Privacy and cookie policy

This Privacy and Cookie Policy describes how AA Audit Holding (the “Company”, “we”) processes the personal data of visitors and customers of the website https://aaauditholding.com (the “Site”).

Personal data is processed in accordance with the Law of the Republic of Azerbaijan “On Personal Data” and other legislation of the Republic of Azerbaijan.

By submitting an application, placing an order or signing in on the Site, you confirm that you have read this policy and consent to the processing of your data as described in it.

We collect only the data needed to handle your applications and orders:

• Identification and contact data: first name, surname, phone number and, if you provide them, e-mail address and company name.
• Application data: the service you are interested in and the text of your application or note.
• Order data: the contents and amount of your orders and their payment status.
• Payment data: the masked card number returned by the payment system. We never receive the full card number.
• Technical data: the IP address and the browser user-agent string recorded when an application is submitted.
• Sign-in data: the phone number you use to sign in with a one-time SMS code.

We process personal data for the following purposes:

• to review and answer applications;
• to accept, confirm and fulfil orders and to contact you about them;
• to accept payments and make refunds;
• to let you sign in to your account with your phone number;
• to keep accounting records and meet the obligations imposed by law;
• to protect the Site from abuse.

The legal basis for processing is your consent, given when you submit an application or place an order; the need to perform the agreement concluded with you (an order or a service contract); and the Company’s obligations under the legislation.

We do not sell personal data. Data is disclosed only to the extent necessary and only to:

• the Payriff payment system — to carry out payments and refunds;
• service providers needed to run the Site — hosting, SMS and e-mail delivery;
• state bodies — where the legislation of the Republic of Azerbaijan requires it.

Card payments are made on the secure page of the Payriff payment system (payriff.com). Card details are entered there; the Site does not receive or store them.

After a payment, the payment system informs us of its result: the payment status and the masked card number, in which only part of the digits is visible. This information is kept together with the order.

Cookies are small files that a website stores in your browser. The Site uses only the storage that is strictly necessary for it to work:

• Sign-in cookie. It is set when you sign in with your phone number and a one-time SMS code and keeps you signed in. It is deleted when you sign out or when its validity period ends.
• Shopping cart. The contents of your cart are saved in the local storage of your browser so that the cart is not lost between visits. This data stays on your device and is sent to us only when you place an order.

The Site does not use analytics or advertising cookies or tracking scripts.

The Contact page shows an embedded Google Maps map. When that page is opened, the map is loaded from Google’s servers, and Google may set its own cookies in accordance with its own policy.

Because the Site itself uses only strictly necessary storage, it has no cookie-settings panel.

You can delete or block cookies and clear site data in your browser settings, usually in the “Privacy” or “Privacy and security” section. If cookies are blocked, signing in will not work; if site data is cleared, the saved cart is emptied.

Personal data is kept for as long as it is needed for the purposes described in this policy and for as long as the legislation, including accounting requirements, obliges us to keep records. Data that is no longer needed is deleted or anonymised.

We apply technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure:

• data between your browser and the Site is transmitted over an encrypted connection (HTTPS);
• access to applications and orders is limited to authorised employees;
• card details are handled only by the payment system.

No method of transmitting data over the internet is completely secure, so absolute security cannot be guaranteed; nevertheless, we work to keep your data protected.

You have the right to:

• find out what personal data about you we hold;
• ask us to correct inaccurate or incomplete data;
• ask us to delete your data where the law does not oblige us to keep it;
• withdraw your consent to the processing of your data.

To exercise these rights, contact us using the details at the end of this page. We may ask you to confirm your identity before acting on a request. Withdrawing consent does not affect processing carried out before the withdrawal and may make it impossible to complete an application or order that is in progress.

The Site is not intended for minors, and we do not knowingly collect their personal data. If you believe that a minor has given us personal data, contact us and we will delete it.

The Site may contain links to other websites, including the page of the payment system and social networks. We are not responsible for the content of those sites or for the way they handle personal data, so we recommend reading their own policies.

We may update this policy. The current version is always published on this page together with the date of the last update.