Privacy Policy

Publication Date: 10/14/2024

1. Terms and definitions

1.1 The Service is the NOSH service available by using the website at https://nosh.guide/ or the NOSH mobile application on Android and iOS platforms, the main functions of which are:

Restaurant Search: Easily and quickly search for restaurants based on friends' recommendations and geolocation on the app's map.
Ordering and booking: The possibility of ordering food, booking tables both on site and for delivery / takeaway via mobile application.
Tipping & Feedback: Tipping and giving feedback on the restaurant, service and food through the app.
Recommendations and gifts: Recommending restaurants to friends, sending dinners as gifts, subscriptions to certain services (e.g. coffee).
Bonus systems: Promotions, discounts and bonuses for regular restaurant customers through the app.
Analytics for Restaurants: Detailed reports and analytics on orders, guest preferences, effectiveness of promotions, etc. for restaurants.
Business Integration: Seamless integration and implementation into restaurant operations, reducing commissions and software maintenance costs.
Ratings and feedback: Ratings of restaurants, food, service, and the ability to communicate with restaurant representatives via chat or feedback.

1.2 User - any visitor of the Service. The Service divides three categories of Users, different in the scope of granted rights and assigned duties - "Guest", "Employee" and "Administrator".

Guest - an unregistered or registered User of the Service who has the right to use the full functionality of the Service voluntarily and free of charge.
Employee - a registered User of the Service who has the opportunity to receive money transfers (tips) from Tip Payers, as well as receive ratings, comments and reviews in the Service.
Administrator (administrator of an establishment (restaurant, beauty salon, etc.) - a registered User of the Service, who has the ability to provide access to the Service to Employees, and monitors the received money transfers and feedback on the work of Employees and other analytical data and settings within the establishment(s) of which he is the administrator.

1.3 Personal Data - any information about the User obtained in the process of using the Service.

1.4 Online payment system - partner(s) of the Service, providing the possibility of cashless transfer of funds from the Guests to the recipient of funds.

1.5 Confidential information - information transferred by the User to the Operator in accordance with this Agreement, which includes, but is not limited to the following: commercial, contractual and financial information, as well as all documents and/or other information prepared in writing or otherwise by the User, which reflect and/or include such information. Information subject to protection and non-disclosure in accordance with this Agreement does not include information posted by the User in public access on the Service resources and on other sites and services, as well as other information that may not be confidential information in accordance with the current legislation of the Russian Federation.

2. General provisions

2.1 Nakit Yok Rus LLC (INN 2311359029, hereinafter referred to as the "Operator") has developed and approved this Personal Data Processing Policy (hereinafter referred to as the "Policy").

2.2 This Policy applies to all information that may be obtained about the "User" in the process of using the website available at: https://nosh.guide/, or the mobile application "NOSH" hosted on Android and iOS platforms (hereinafter - the "Service").

2.3 The User is obliged to familiarize with this Policy before using the Service and accept this Policy in the manner specified in clause 3.4 of this Policy. By accepting the Policy, the User expresses unconditional consent to the provision of Personal Data and their subsequent processing by the Operator. Failure to agree with the terms of the Policy entails the inability to use the Service.

2.4 The Service may contain links to third party websites and make automatic transfer to third party websites. The Operator is not responsible for the confidentiality of Personal Data when accessing such sites or interacting with third-party services. The User should familiarize himself/herself with the Personal Data processing policy of such sites and services.

2.5 Personal data is processed in accordance with the Federal Law of 27.07.2006 No. 152-FZ "On Personal Data".

3. Processing of personal data

3.1 In order to provide the User with access to the Service, the Operator processes Personal Data, including by collecting, recording, systematizing, accumulating, storing, clarifying, extracting, using, transferring, depersonalizing, blocking, deleting and destroying the User's Personal Data.

3.2 The Operator processes the User's personal data using the database at the address: Vladimir DC, Vladimir, 37, Energetikov St., Bldg. 2 (Yandex DC Vladimir LLC (INN 3328000568)).

3.3 The User agrees that the Operator has the right to transfer (provide) the User's Personal Data to third parties - partners of the Service, including Best2pay LLC. Such transfer of data is necessary to ensure the functioning of the Service, its administration, improvement and technical support.

3.4 Adoption of this Policy shall be accomplished by:

The Guest when accessing the Service in order to interact with any element of the functionality. The Guest checks the boxes "I agree with the terms of the User Agreement and Personal Data Processing Policy" before making payment and leaving a review.
Employee by filling in the registration form on the website or in the Service application. When making registration actions, the Employee ticks the boxes "I accept the terms of use of the NOSH platform" and "I agree with the policy of personal data processing".
Administrator by logging in to the personal account on the website or in the Service application using the generated login and password. When performing registration actions, the Administrator checks the boxes "I accept the terms of use of the NOSH platform" and "I agree with the policy of personal data processing".

3.4.1 The Guest's Personal Data to be processed includes:

information about the Guest's payment system (MasterCard, Visa, Mir), type of payment (contactless/entry of card details), card mask (PAN), type of device (Android/Apple), information about the institution where the transaction was made, time and amount of the transaction for the purposes of collecting analytical data for improvement and revision of the Service;
Guest's cell phone contact number for contacting the Guest;
anonymized data (user session data - a sequence of requests made by the Guest while using the Service) obtained when accessing the Service using Internet statistics services (Yandex.Metrica, Google Analytics, Amplitude, etc.) for the purposes of collecting analytical data for improving and refining the Service.

3.4.2 The Personal Data of the Employee to be processed includes:

surname, first name of the Employee for the purpose of addressing the Employee, as well as for the purpose of identification of the Employee by the Guest;
the Employee's cell phone number for sending information, advertising messages, and for contacting the Employee;
image for the Employee's profile / photo to ensure the Operator's functioning of the Service and to identify the Employee by the Guest before making a transaction or leaving a feedback;
information about the type of device (Android/Apple), information about the institution where the Employee receives transactions, time and amounts of transactions, information about the Employee's card mask for the purposes of collecting analytical data to improve and finalize the Service;
anonymized data (user session data - a sequence of requests made by the Employee while using the Service) obtained when accessing the Service using Internet statistics services (Yandex.Metrica, Google Analytics, Amplitude, etc.) for the purposes of collecting analytical data for improving and refining the Service.

3.4.3 The Personal Data processed by the Administrator shall include:

surname, first name of the Administrator to address the User;
contact cell phone number of the Administrator for sending information, advertising messages, as well as for contacting him;
anonymized data (user session data - a sequence of requests made by the Administrator while using the Service) obtained when accessing the Service using Internet statistics services (Yandex.Metrica, Google Analytics, Amplitude, etc.) for the purposes of collecting analytical data for improving and refining the Service.

3.5 Purposes of Personal Data Processing

3.5.1 Guest:

providing access to the Service, operation of the Service;
providing customer and technical support in case of problems related to the use of the Service;
management of the Service, its administration, improvement, finalization and technical support;
other purposes that do not contradict the current legislation of the Russian Federation, public interests, fundamentals of law and order and morality, subject to the terms and conditions of the User Agreement between the Operator and the User.

3.5.2 Employee:

providing access to the Service, operation of the Service;
creating an account to use the Service;
verifying that the account belongs to the User to limit abuse and violation of the rights of the User or others;
Identification of Employee by Guest;
establishing feedback for the purpose of using the Service, processing requests and applications from the User;
sending notices, requests regarding the use of the Service and its operation;
providing customer and technical support in case of problems related to the use of the Service;
provision of special offers, newsletters, advertising (marketing) and other information on behalf of the Operator or on behalf of the Operator's partners;
management of the Service, its administration, improvement, finalization and technical support;
other purposes that do not contradict the current legislation of the Russian Federation, public interests, fundamentals of law and order and morality, subject to the terms and conditions of the User Agreement between the Operator and the User.

3.5.3 Administrator:

providing access to the Service, operation of the Service;
establishing feedback for the purpose of using the Service, processing requests and applications from the User;
sending notices, requests regarding the use of the Service and its operation;
providing customer and technical support in case of problems related to the use of the Service;
provision of special offers, newsletters, advertising (marketing) and other information on behalf of the Operator or on behalf of the Operator's partners;
management of the Service, its administration, improvement, finalization and technical support;
other purposes that do not contradict the current legislation of the Russian Federation, public interests, fundamentals of law and order and morality, subject to the terms and conditions of the User Agreement between the Operator and the User.

3.6 The Operator processes the User's Personal Data only if it is submitted by the User through the forms located on the website or in the Service application.

3.7 The anonymized data of Users (data about the user session - a sequence of requests made by the User during the use of the Service), collected with the help of Internet statistics services, serve to collect information about the actions of Users on the website, to improve the quality of the Service and its content. The Operator processes anonymized data about the User if it is allowed in the User's browser settings.

3.8 The Operator takes technical, organizational and legal measures to ensure protection of the User's Personal Data from unauthorized or accidental access, deletion, modification, blocking, copying and distribution of Personal Data. Among other things, the Operator takes the following measures:

exchange of Personal Data during their processing in information systems is carried out via communication channels, the protection of which is ensured through the use of HTTPS transport protocol with the use of SSL-certificate issued by one of the public certification centers and providing data encryption;
the data center controls and manages physical access to technical means, information protection means, means of ensuring the functioning of the information system, as well as to the premises and facilities in which they are installed, excluding unauthorized physical access to information processing means, information protection means and means of ensuring the functioning of the information system, to the premises and facilities in which they are installed. The data center is equipped with protection against external influences (environmental effects, instability of power supply, air conditioning and other external factors). The servers use operating systems that are not susceptible to virus infection, and there is no access from client networks to service/service networks.
WAF - Web Application Firewal proactive filter is installed on Personal Data storage systems in the organization storing Personal Data.

3.9 The period of Personal Data processing is unlimited. The User may withdraw his/her consent to the processing of Personal Data at any time by sending a notice to the Operator to the e-mail address support@nosh.guide marked "Withdrawal of consent to the processing of Personal Data".

3.10. In case the User revokes the consent to the processing of Personal Data, the Operator has the right to continue processing Personal Data without the User's consent if there are grounds provided for by the legislation of the Russian Federation.

3.11. The Operator has the right to delete the User's account or information posted by the User, thereby terminating the processing and storage of the User's Personal Data. The Operator is not obliged to disclose to the User the reasons for such deletion of the User's Personal Data.

4. Rights and obligations of the User

4.1 The User has the right to access his/her Personal Data processed by the Operator.

4.2 The User has the right to refuse to receive information messages at any time by sending a notice to the Operator to the e-mail address: support@nosh.guide.

4.3 The User has the right to restrict access to his/her Personal Data at any time by refusing to use the Service in whole or in part, provided that the use of the Service will be possible without access to the relevant data, by sending a notice to the Operator to the e-mail address: support@nosh.guide.

4.4 In case of identifying inaccuracies in the Personal Data, the User is obliged to update them by sending a notice to the Operator to the e-mail address: support@nosh.guide marked "Personal Data Update". The Operator does not verify the data received from the User, except when such verification is necessary to fulfill the Operator's obligations to the User.

5. Final provisions

5.1 The law of the Russian Federation shall apply to this Policy and relations with the User in the field of Personal Data.

5.2 The User may obtain any clarifications on the issues of interest regarding the processing of his/her Personal Data by sending the Operator a request to the e-mail address: support@nosh.guide. In order to effectively process the requests, the text of the e-mail should refer to this Policy and acceptance of its terms.

5.3 The Policy may be changed by the Operator by posting a new version of the Policy on the website and in the Service application. The User undertakes to independently periodically check this Policy for any changes (the date of its publication is indicated in the document). Changes to the Policy made by the Operator come into force on the date of publication of the new version of the Policy. The User has the right to refuse to accept changes and amendments to this Policy, which means the User's refusal to use the Service. The refusal to use the Service is carried out as follows:

The Guest does not accept the Policy in the current version and does not use the features of the Service to transfer funds in cashless form to the recipients of funds.
The Employee and the Administrator shall send notice to the Operator at the following e-mail address: support@nosh.guide
The Operator shall process the notification within 3 (three) business days and disconnect the Tip User from the Service.

5.4 The current version of the Policy can be found at: nosh.guide