Privacy policy

1. General provisions

This Privacy Policy (the “Policy”) sets out how personal data of users of the website (hereinafter referred to as: the “Visitor”) store.sardarapat.am (the “Site”) owned and operated by Sardarapat FC, a legal entity registered in Republic of Armenia on 19th of October 2021 with is registration number 211.171.1200540 (hereinafter referred to as: the “Club”) is collected, processed and protected. This Policy has been prepared in accordance with the Law of the Republic of Armenia “On Personal Data Protection” and other applicable laws.

By using the Site, you acknowledge that you have read and accept this Policy and consent to the processing of your personal data as described herein.

2. Personal data we collect

We may collect and process the following categories of personal data:

·       Full name;

·       Contact phone number;

·       E-mail address;

·       Delivery address;

·       Order history and order details;

·       Payment information (note: full payment card details are processed by our payment provider and are not stored by the Club unless explicitly stated);

·       Technical information (IP address, browser type and version, device identifiers, operating system), log files and cookies.3. Purpose and legal basis for processing

We process personal data for the following purposes:

·       To process and fulfill orders and deliver goods (performance of the contract);

·       To contact customers regarding orders, deliveries and customer service;

·       To maintain accounting and comply with statutory obligations, active legislation of Republic of Armenia;

·       To improve Site functionality, analyze usage and carry out statistical and analytical processing;

·       To send marketing communications only where the user has provided consent;

·       To respond to legal requests and protect the Club’s rights (legal obligation or legitimate interests).

The legal bases for processing are the user’s consent, the ensuring of the website usage “as is” by the Visitor as well as entering into legal relations with the Club by placing the order, compliance with legal obligations, and the Club’s legitimate interests where applicable

4. Disclosure and transfer of personal data

The Club may share personal data with third parties to the extent necessary for the purposes above, including but not limited to:

·       Courier and delivery services;

·       Payment service providers;

·       Hosting and IT service providers;

·       Accounting and tax advisors;

·       Legal advisors and other professional service providers;

·       State authorities in cases set forth by the law and court decisions

We require that third-party processors take appropriate measures to protect personal data and process it only for the purposes permitted by us and in compliance with applicable law.

5. Data storage and retention

Personal data is retained only for as long as necessary to achieve the purposes for which it was collected, to comply with legal obligations (such as tax and accounting requirements, archiving purposes), or as otherwise permitted by applicable law. Specific retention periods may vary by data category; please contact us for details.

The personal data or information you provide to the Club will, as a general rule, be retained for a period of five (5) years from the date of collection or from the end of your relationship with the Club (whichever is later).

This five-year retention period is our standard policy. However, we may retain the information for a shorter or longer period if required or permitted by applicable law. For example:

Certain laws may obligate us to keep specific records for a longer period (e.g., tax or accounting regulations that require retention for 7–10 years).

Other laws may require or allow earlier deletion (e.g., upon your valid request to erase your data under privacy regulations such as GDPR, CCPA, or equivalent legislation).

In all cases, the actual retention period will comply with the mandatory requirements or permissible options provided under applicable law, which will take precedence over the general five-year rule.  

The Club does NOT collect any data on biometrics or connection with religion. If you believe that you entered religious data or data connected with biometric information, we advise you to immediately contact the Club’s support for making the corresponding corrections and delete irrelevant data.

6. Data security

The Visitor’s personal data is stored in the Website’s information systems and protected by various means (encryption on servers, hashing, and other measures) to prevent unauthorized access to and disclosure of Visitors’ personal data. Personal data protection measures are ensured through the Website’s corresponding firewall-type security system and the HTTPS secure hypertext transfer protocol. The Company applies other security measures as well. The information systems of the Website that collect, record, systematize, accumulate, store, clarify, update, and extract Visitors’ personal data are located in the French Republic. Data subjects are informed that, in accordance with Article 27(2)(2) of the law “On Personal Data Protection” of Republic of Armenia and Decision No. ATPP-001/23 adopted on 10 February 2023 by the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia, French Republic is considered a country that provides an adequate level of personal data protection. Data subjects have no objections regarding the choice of the country for storing and processing personal data and accept that the exclusive right to choose the country for storing and processing personal data belongs to the Club.

The use, transfer, dissemination, provision, entry, depersonalization, blocking, deletion, and destruction of Visitors’ personal data is carried out solely on the basis of a decision by the Company’s executive body. The Website does not make decisions that affect the rights and legitimate interests of Visitors based solely on automated processing of personal data.

Unless expressly stated otherwise in this Policy, this document applies only to the use by the Company of Visitors’ personal data and identification data provided by the Partner that are necessary for identification.

Changes

The Website periodically improves its methods of collecting, storing, and processing data, including security measures. In this regard, as well as in the event of changes to personal data legislation, the Website may at any time amend this Policy by notifying Visitors of the revised version through publication on the Website. By continuing to use the Website after such changes are published, the Visitor and the Partner agree to those changes, unless the law requires separate confirmation of the Visitor’s consent to such changes.

We implement appropriate technical, organizational and administrative safeguards to protect personal data against unauthorized or unlawful processing, accidental loss, destruction or damage. However, no method of transmission or electronic storage is completely secure, and we cannot guarantee absolute security

7. User rights

Under applicable law, users have the right to:

·       Request access to their personal data;

·       Request correction of inaccurate or incomplete data;

·       Request deletion of personal data where there is no lawful basis to retain it;

·     Withdraw consent to processing where consent was the legal basis and there was no order made from the Club;

·       Object to processing based on legitimate interests;

      Lodge a complaint with the Personal Data Protection Agency of the Ministry of Justice of the Republic of Armenia.

To exercise these rights, please contact us at the details below. We will respond in accordance with applicable legal requirements.

8. International transfers

If personal data is transferred outside the Republic of Armenia, the Club will ensure that such transfers are carried out in compliance with applicable law and that adequate safeguards are in place.

9. Cookies and tracking technologies

Our use of cookies and similar technologies is described in the separate Cookie Policy, which forms part of this Privacy Policy.

10. Changes to this Policy

We may update this Policy from time to time.

The “Last updated” date at the end of this document indicates when the Policy was last revised. We will post any material changes on the Site.

11. Contact information

If you have questions about this Policy or wish to exercise your rights, please contact:

Email: Support@sardarapatfc.am

Address: Armenia, Armavir, Hanrapetutyan str. B. 130

Last updated: 03.12.2025