Last updated: November 3, 2026
This Privacy Policy explains how Appstallio (https://appstallio.x10.mx) collects and uses personal data. It is designed to meet the requirements of the EU General Data Protection Regulation (GDPR) and the Law of the Republic of Kazakhstan “On Personal Data and its Protection”.
1. Data controller
Yuriy Morkhov, private individual, Republic of Kazakhstan. Email: morkhov76@gmail.com.
2. Data we collect
- Account data: name, username, email, password (stored hashed).
- Order data: purchased products, billing details, order history. Card details are processed by payment providers and are not stored by us.
- Vendor data: store name, payout details and information needed for payouts.
- Technical data: IP address, browser type, device data, logs and cookies.
- Communications: messages you send to us or to Vendors.
3. Purposes and legal bases
- To provide the marketplace, process orders and deliver products – performance of a contract (GDPR Art. 6(1)(b)).
- To pay Vendors, keep accounting records and meet legal obligations – legal obligation (Art. 6(1)(c)).
- To prevent fraud, secure the Platform and improve it – legitimate interests (Art. 6(1)(f)).
- To send marketing emails – only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
4. Sharing
We do not sell personal data. We share data only with: the Vendor whose product you buy (the data needed to fulfil the order and provide support); payment providers; hosting and email service providers; authorities when required by law. Vendors act as independent controllers for the data they receive.
5. International transfers
Because Vendors and service providers are located in different countries, data may be transferred outside your country, including outside the EEA. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
6. Retention
Account data is kept while your account is active. Order and accounting records are kept as long as required by law (usually up to 5 years). Logs are kept for a limited period for security. Then data is deleted or anonymised.
7. Cookies
We use necessary cookies for login, cart and checkout, and may use analytics cookies to understand how the site is used. You can control cookies in your browser settings.
8. Your rights
You have the right to access, correct, delete, restrict or object to processing of your data, the right to data portability and the right to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise your rights, email morkhov76@gmail.com. We respond within 30 days.
9. Security
We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS) and hashed passwords. No method of transmission is 100% secure.
10. Children
The Platform is not intended for persons under 16. We do not knowingly collect their data.
11. Changes
We may update this policy. The current version is always published on this page.