1. General provisions
This Personal Data Processing Notice ("Notice") describes how YOMI FILM LLC ("Controller", "we") processes personal data of users ("data subjects", "you") in connection with the operation of the website yomimovie.com and its subdomains (the "Site").
The Notice applies to all personal data that the Controller receives from data subjects.
This Notice is issued in addition to the Privacy Policy and sets out detailed terms of personal data processing.
2. Definitions
- Personal data — any information relating to an identified or identifiable natural person.
- Controller — YOMI FILM LLC, which alone or jointly determines the purposes and means of processing.
- Processor — a third party that processes personal data on behalf of the Controller.
- Processing — any operation performed on personal data, including collection, recording, storage, use, disclosure, and erasure.
- Data subject — the natural person to whom the personal data relates.
- Consent — any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they agree to the processing of their personal data.
3. Processing principles
We process personal data in accordance with the following principles:
- lawfulness, fairness, and transparency;
- purpose limitation — processing only for specified, explicit, and legitimate purposes;
- data minimization — processing only data that is adequate, relevant, and limited to what is necessary;
- accuracy — keeping data accurate and, where necessary, up to date;
- storage limitation — retaining data only for as long as necessary;
- integrity and confidentiality — protecting data against unauthorized processing, loss, destruction, or damage.
4. Legal bases for processing
We process personal data on the following legal bases:
- Performance of a contract — to create and administer your account, provide the Services, and process payments.
- Consent — for non-essential cookies, marketing communications, and other processing requiring your consent.
- Legitimate interests — to ensure Site security, prevent fraud, improve the Services, and conduct internal analytics (balanced against your rights).
- Legal obligations — to comply with applicable tax, accounting, and regulatory requirements.
5. Categories of personal data
5.1. Account & registration data
- first and last name (or pseudonym);
- email address;
- password (stored in hashed form).
5.2. Billing & subscription data
- transaction date, amount, status, and provider-assigned transaction identifier.
We do not store your full card number, CVV, or other sensitive payment credentials. Payments are processed by PCI DSS–compliant providers.
5.3. Technical data
- IP address and approximate geolocation derived from it;
- device type, browser type and version, operating system;
- date and time of access, pages viewed, referrer URL;
- cookie identifiers and similar technical identifiers;
- analytics data from tools such as Yandex.Metrica and Google Analytics.
5.4. User-generated content
- scripts, texts, and other files you upload, create, or store on the Services.
We do not intentionally process special categories of personal data (race, ethnicity, political opinions, religious beliefs, health, biometric data) or data of children below the minimum age of digital consent applicable in your jurisdiction.
6. Purposes of processing
- user registration and identification;
- providing access to Site functionality and performing the Terms of Service;
- processing payments and refunds;
- responding to support inquiries;
- notifying users of changes to the Site and service conditions;
- improving the Site and conducting statistical research on aggregated data;
- sending promotional communications — with separate consent;
- compliance with applicable law.
7. How we process data
Personal data is processed both by automated means and, where necessary, manually. Operations include collection, recording, organization, storage, adaptation, retrieval, use, disclosure, alignment, restriction, erasure, or destruction.
We collect data in two ways: (i) directly from you when you register, subscribe, or contact us; (ii) automatically through cookies and server logs when you use the Site.
8. Retention periods
- account data — for the duration of the account, plus up to 3 years after deletion;
- payment and billing data — for the period required by tax and accounting laws (at least 5 years);
- analytics data — up to 24 months from collection;
- user-generated content — for the duration of the account; upon deletion of the account, removed within 30 days, except where retention is legally required;
- support inquiries — up to 3 years after resolution.
Once data is no longer needed, we delete or anonymize it within 30 days, unless a longer period is required by law.
9. Disclosure to third parties
We may disclose personal data to:
- payment providers (to process transactions);
- infrastructure providers (hosting, cloud, email delivery, analytics, customer support) — under agreements ensuring confidentiality and appropriate safeguards;
- professional advisors (lawyers, auditors, accountants);
- public authorities — where required by applicable law.
We do not sell personal data.
10. International data transfers
Your personal data may be transferred to, stored in, and processed in countries other than your country of residence, including Russia and other jurisdictions where we or our processors operate. Where required, we implement appropriate safeguards for such transfers (for example, standard contractual clauses or equivalent mechanisms).
11. Consent and its withdrawal
Where processing is based on consent, you may withdraw it at any time by contacting us at privacy@yomimovie.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal. After withdrawal, we stop processing your data unless another legal basis applies.
12. Your rights
Subject to applicable law, you have the right to:
- access — obtain a copy of the personal data we hold about you;
- rectification — have inaccurate or incomplete data corrected;
- erasure — request deletion of your data ("right to be forgotten");
- restriction — limit how we process your data;
- objection — object to processing based on legitimate interests or to direct marketing;
- portability — receive your data in a structured, commonly used, machine-readable format;
- withdraw consent at any time;
- lodge a complaint with the competent data protection authority.
To exercise any of these rights, contact us at privacy@yomimovie.com. We will respond within 30 days or within the timeframe required by applicable law.
13. Security measures
We implement appropriate technical and organizational measures, including:
- encryption of data in transit (HTTPS/TLS);
- hashed password storage;
- role-based access controls;
- regular backups and monitoring;
- staff training and internal audits;
- designation of a person responsible for data processing compliance.
14. Final provisions
This Notice may be updated from time to time. The current version is published on the Site and takes effect upon publication, unless the update specifies a later effective date.
For any questions regarding this Notice or the processing of your personal data, please contact us using the details above.