Privacy policy

The store collects only what it needs to fulfil an order and to keep the website working securely.

Who processes your data. Արեգ ԱԿ, 29 Tadevosyan St, mail@areg.pro, +374 93 238766 ("Areg Tools", "we").

What we collect and why

• Full name and phone number – to confirm your order by phone.
• Email address (optional) – if you prefer to get our answer by email.
• Delivery address (only if you choose delivery) – to deliver the order in Yerevan.
• The comment you write – to take your wishes into account.
• What you write in the site's chat, and our answers – to answer you. The chat's automatic assistant works on our own server (nothing is sent to another company). Shop staff see the conversation in the administration area, and new messages are also e-mailed to the shop's e-mail box (Gmail, a Google service). Chat conversations are deleted 180 days after the last message.
• A repair request on the “Service centre” page – your name, phone number, e-mail (if you give it), the tool and a description of the problem – to contact you and arrange the repair. The request is also e-mailed to the shop (Gmail, a Google service) and is deleted after 2 years.
• A photo you choose for “Search by photo” – only to find similar products. The photo is compared with our product photos on our own server (nothing is sent to another company) and is not saved: it is discarded as soon as the results are shown.
• Products, quantities and chosen length – to prepare the order.
• Order number, date and time of the order, and the website language – to identify and process your order.
• An anonymous identifier of your browser (stored only as a hash) – so that "My orders" shows only the orders sent from that browser.
• Search words that found nothing (only the words, without your name, phone number or IP address) – to add missing products and improve search.
• Anonymous statistics: how many times a day pages were opened and buttons such as "Add to cart", "WhatsApp" and "Call" were pressed – totals only, with no IP address, cookie or anything about you, to see what makes the shop easy to use. If you came from a QR code in our shop, your browser remembers which code until you close the tab, and this is counted in the same statistics.

On your own device the store keeps your cart, your chosen language, and the name, phone and email from your last order, so you do not have to type them again. These stay in your browser.

Cookies. The website uses only two cookies, both needed for it to work: (1) areg_cid – a random anonymous identifier that is set when you send an order or write in the chat. It lets "My orders" show only the orders sent from your browser. It contains no name or phone number and is kept for up to two years. (2) areg_admin – used only when shop staff log in to the administration area; it is valid for 7 days and is never set for customers. We do not use analytics, advertising or tracking cookies, and no third-party cookies are set through our website. You can delete cookies in your browser settings at any time; "My orders" will then no longer show your earlier orders, but you can still find an order by its number and phone number.

Checking your order. In "My orders" you can see the status of the orders sent from your browser (see "Cookies"). You can also find a single order by entering its order number together with the phone number given in the order. Please do not share your order number with others: anyone who knows both the order number and the phone number can see that order's details.

Technical data. Like any website, our server automatically records technical data about each visit: IP address, date and time, the page requested and the type of browser. We use these records only to protect the website and fix errors. They are kept on our server for a limited time and are automatically overwritten by newer records. To protect against misuse, the website also uses your IP address briefly to limit the number of requests; it is not stored for this purpose.

Legal basis. You give your consent when you tick the consent box and send the order form (Law on Protection of Personal Data, Art. 8 and 9). Cookies and technical records are necessary for the website to work and to stay secure, and are not used for any other purpose.

Who receives your data. Only Areg Tools staff who handle orders, and our delivery staff when you choose delivery. Only staff with a password-protected account can see orders. Our server and the storage for our backups are provided by Oracle Cloud Infrastructure, which stores the data on our behalf as a hosting provider. Each new request (name, phone, email, comment and products) is also sent to the shop's own email box (Gmail, a Google service), so that staff see it at once. The website loads nothing from other companies' servers, so no one else receives your IP address when you visit. The only exception: if you press a shop's button under "Open in Google Maps" on the contacts page, your browser loads the map from Google Maps (Google), which then receives your IP address and may use its own cookies under Google's privacy policy; until you press it, the contacts page shows a picture of the map stored on our server. We do not sell or pass your data to anyone else, except when Armenian law requires it.

Where it is stored. The website and order data are kept on Areg Tools' own server, hosted with Oracle Cloud Infrastructure in Frankfurt, Germany. Oracle acts only as the hosting provider. Data travels between the website and your browser over an encrypted (HTTPS) connection. Your data is not processed by artificial intelligence systems. By sending the order you agree to the transfer of your data outside Armenia (Art. 27).

How long we keep it. Order data: 3 years after the order, for accounting and warranty. After that we delete it. To protect against data loss, a backup copy of the database is made every day; backups are encrypted and kept on our server for 7 days and in Oracle Object Storage (Frankfurt, Germany) for at most 28 days, and are then deleted automatically. Deleted data therefore disappears from all backups within 30 days at most. Search words that found nothing are kept for 90 days.

Your rights

• See what data we hold about you. We answer within 5 days of a written request (Art. 15 and 20).
• Ask us to correct, block or delete your data. We do it within 3 working days (Art. 20).
• Withdraw your consent at any time by writing to mail@areg.pro.
• Complain to the authorised body for the protection of personal data, or go to court (Art. 17).

Security. We protect the data against loss and unauthorised access (Art. 19): the website works only over an encrypted (HTTPS) connection, orders can be viewed only by shop staff after logging in with a password, and the database is backed up every day in encrypted form. If a leak happens, we will announce it and inform the Police and the authorised body (Art. 21).