Last updated: April 14, 2026

1. Who We Are

This website is operated by:

WENERA_GROUP LLP (trading as Nera - WeNera)
BIN: 231240009149
Legal address: Samal-2, 105, office 110, Almaty, 050059, Kazakhstan
Shop: Nazarbayeva 128, Almaty, Kazakhstan
Email: info@we-nera.com
Phone: +7 707 762 8700

We are the data controller for personal data collected through this website.

Our website is hosted on servers located in Germany (Hetzner Online GmbH).

2. What Data We Collect

a) When you fill in the checkout form:

— First name, last name
— Email address
— Phone number (with country code)
— Delivery address (street, building type, city, state, postal code, country)
— Additional delivery instructions

b) When you create an account:

— First name, last name
— Email address
— Password (stored securely using one-way hashing; we cannot see your password)
— Saved delivery addresses

c) Automatically when you visit the site:

— IP address — used to determine your approximate country for language and legal compliance purposes. Not stored unless your visit triggers our anti-spam protection (see Section 3).
— Browser type, device information, and pages visited (collected via analytics, see Section 5).
— Session cookie required for the website to function.

3. Why We Collect Your Data and Legal Basis

To process your inquiry via WhatsApp
Data used: name, phone, address, selected products.
Legal basis: legitimate interest (pre-contractual communication).

To create and manage your account
Data used: first name, last name, email, password.
Legal basis: contract performance.

To send account-related emails (password reset, account verification)
Data used: email address.
Legal basis: contract performance.

To save your delivery addresses for future use
Data used: address details.
Legal basis: contract performance.

To detect your country for cookie consent compliance
Data used: IP address (not stored).
Legal basis: legal obligation (GDPR).

To protect against spam and abuse
Data used: IP address, email, browser information. Stored only when suspicious activity is detected (e.g., automated signups).
Legal basis: legitimate interest (security).

To improve our website and understand usage patterns
Data used: anonymized browsing data.
Legal basis: consent (EU visitors) / legitimate interest (non-EU visitors).

To diagnose technical errors
Data used: error logs, which may incidentally contain request data.
Legal basis: legitimate interest (maintaining service reliability).

4. WhatsApp Communication

When you select products and choose to contact us via WhatsApp, your selected items and contact details are included in the WhatsApp message. This data is then processed by WhatsApp (Meta Platforms, Inc.) under their own privacy policy. We do not track whether a purchase is completed via WhatsApp.

5. Cookies and Analytics

Essential cookies (always active):

Session cookie — required for the website to function (basket, login). Expires after 2 weeks of inactivity.

Cookie consent preference — remembers your cookie choice. Expires after 6 months.

Analytics cookies (require your consent if you are in the EU):

PostHog — we use PostHog for website analytics. PostHog data is stored on servers in the European Union (eu.i.posthog.com). PostHog collects data about pages visited, clicks, and device type. If you are logged in, your activity may be linked to your user profile.

If you are located in the EU, analytics cookies are only activated after you give consent via our cookie banner. You can change your preference at any time via the cookie settings.

If you are located outside the EU, analytics cookies are active by default. You may opt out at any time via the cookie settings.

6. Third-Party Service Providers

We share your data with the following service providers, solely for the purposes described:

Hetzner Online GmbH — Website hosting. All website data is stored on Hetzner servers in Germany.

PostHog — Website analytics. Browsing behavior and device info. Servers in the European Union.

Brevo (Sendinblue) — Email delivery service. Your email address and name pass through Brevo when we send you account-related emails (password reset, verification). Servers in the European Union.

Honeybadger — Error monitoring. Technical error logs may incidentally include request data. Servers in the United States.

WhatsApp (Meta) — Customer communication. When you click the WhatsApp button, your name, phone, selected products, and address are included in the message you send. Servers in the United States.

We do not sell your personal data to any third party.

7. International Data Transfers

Your data is primarily stored on servers in Germany. Some of our service providers operate outside the European Economic Area:

WhatsApp (Meta) — United States. Data is transferred when you initiate a WhatsApp conversation. Meta operates under the EU-U.S. Data Privacy Framework.

Honeybadger — United States. Technical error data only, no intentional personal data collection.

8. Data Retention

Checkout form data (if no purchase was completed) — 90 days, then deleted.

Customer account data — retained while your account is active. Deleted 3 years after your last activity.

Order-related data — 7 years (required by Kazakhstan tax law).

Anti-spam records — 1 year.

Analytics data (PostHog) — 12 months.

Cookie consent preferences — 1 year.

9. Your Rights

Depending on your location, you have the following rights regarding your personal data:

Access — request a copy of the data we hold about you.

Correction — request correction of inaccurate data.

Deletion — request deletion of your data (subject to legal retention requirements).

Portability — receive your data in a machine-readable format.

Objection — object to processing based on legitimate interest.

Withdraw consent — withdraw your cookie consent at any time via cookie settings.

For EU residents: you have the right to lodge a complaint with a data protection authority in your country of residence.

For Kazakhstan residents: your rights are protected under the Law of the Republic of Kazakhstan on Personal Data and Their Protection (No. 94-V, May 21, 2013).

To exercise any of these rights, contact us at: info@we-nera.com

We will respond within 30 days.

10. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us at info@we-nera.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

12. Contact

Nera - WeNera
Email: info@we-nera.com
Phone: +7 707 762 8700
Nazarbayeva 128, Almaty, Kazakhstan