CONSENT

to the processing of personal data permitted by the data subject for dissemination, of a user of the «Laffy Smart Wishlist» application

Version of 11 October 2026

This English version is a translation provided for convenience. In case of any discrepancy, the Russian version at https://laffy.store/consent_public.html prevails.

This Consent is a separate electronic document, is given under Article 10.1 of Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", and is not part of the user agreement, the Privacy Policy or the consent to the processing of personal data.

I, a user of the «Laffy Smart Wishlist» application (the Application), acting freely, of my own will and in my own interest, give INOLT LLC, INN 2223639154, KPP 222301001, located at office N15, 99 Vlasikhinskaya St., Barnaul, Altai Krai, Russia, e-mail laffyconnect@bk.ru (the Operator), my consent to the dissemination of my personal data on the terms set out below.

1. Information resource

The personal data is disseminated only inside the Application for Android and iOS — in the «Wish feed» section, on the screen of my wish opened from that section, and in my profile opened by another user.

The laffy.store website and other information resources are not used to disseminate my personal data.

2. Purpose of dissemination

Showing my wishes to users of the Application who are not my contacts, so that they can offer to fulfil a wish.

3. List of personal data

I allow the dissemination of:

• my name or the display name I have chosen;
• my profile photo;
• the city given in my profile;
• the text I have entered in the «About me» field of my profile;
• the names, descriptions, links and images of those of my wishes that I have made public (the «Make public» switch), except wishes set to «Visible to favorites only», booked and fulfilled wishes, and wishes without an image.

My phone number, date of birth, contact list, messages and other personal data are not disseminated. My date of birth is used only to check age and is not shown to other users.

4. Conditions and prohibitions

I set the following conditions of dissemination:

• the personal data is available only to users of the Application who are signed in to an account and are 16 or older;
• the personal data is shown only inside the Application;
• a user I have hidden or blocked does not see my personal data.

I set the following prohibitions:

• I prohibit the Operator from transferring my personal data to an indefinite range of persons other than by giving access to it in the Application on the conditions above;
• I prohibit an indefinite range of persons from processing my personal data other than viewing it in the Application, including copying, collecting, systematising and using it outside the Application.

5. Term

The Consent is valid from the moment it is given until it is withdrawn or the account is deleted. Each wish is disseminated while its «Make public» switch is on.

6. Withdrawal of Consent

I may withdraw the Consent at any time:

• by turning off a wish's «Make public» switch — dissemination of that wish stops at once; while no wish is marked, my personal data is not disseminated;
• by deleting my account;
• by sending a request to laffyconnect@bk.ru or by letter to the Operator's address — dissemination stops within three business days of receipt of the request.

The Operator cannot guarantee the deletion of copies saved by other users in breach of the prohibitions I have set.

7. How the Consent is given

The Consent is deemed given in one of the following ways:

• at sign-up in the Application — I have read the text of the Consent through the link, ticked the box «Show my name, photo, city and wishes in the feed to other users — I give my consent to the dissemination of personal data» myself, and confirmed my phone number with the code from an SMS;
• when adding or editing a wish — I have turned on its «Make public» switch; next to the switch is a «?» button that opens an explanation of who is shown what, with a link to the text of the Consent.

The Consent is not given by default: the box at sign-up is not ticked in advance, and new wishes are added with the «Make public» switch off, including after the box at sign-up is ticked. Wishes, including those added before the switch appeared, do not go into the feed until I mark them myself.

The Operator records the version of the Consent, the date and time it was given and withdrawn, the account identifier, the phone number, the IP address and device information to the extent necessary to confirm that the Consent was obtained.