Personal data processing and protection policy
Version of [publication date].
This policy explains what personal data the online shop at [website address] collects, why and who receives it, and what rights you have over your data. It follows the Law of Ukraine "On Personal Data Protection".
1. Who processes the data
The controller of the personal data, that is the person who decides why and how it is processed (Article 2 of the Law of Ukraine "On Personal Data Protection"), is [full name of the seller: sole proprietor or company], [registration or tax number], [registered address] (the "Shop"). For any question about personal data write to [email].
2. What we collect
- first and last name;
- phone number and email address;
- delivery address or pickup point;
- the history of orders, returns and requests;
- account details, if you have registered;
- technical data: IP address, browser and device type, cookies.
The Shop neither receives nor stores payment card details: they are entered on the page of the payment service or the bank.
3. Why
- to accept, fulfil and deliver orders;
- to contact you about an order, a return or a request;
- to keep the records the law requires;
- to send news and offers, only if you agreed to it. You can opt out at any time;
- to keep the website working and make it better.
4. Legal grounds for processing
Data is processed with your consent, to conclude and perform the sale contract, and to meet the Shop's obligations under the law.
5. Who we share data with
Only those without whom an order cannot be fulfilled, and only as much as they need:
- delivery services: name, phone, delivery address;
- payment services and banks you pay through, including when paying in instalments;
- providers of the hosting, mail and other services the website runs on;
- public authorities, when the law requires it.
We do not sell personal data or pass it to third parties for advertising.
6. How long we keep it
No longer than the purpose it was collected for requires. Documents related to orders are kept as long as accounting and tax legislation requires. Account data is deleted when you delete the account or ask us to.
7. Cookies
The website uses necessary cookies without which the cart and signing in do not work. Analytics and advertising cookies are switched on only with your consent. You can change your choice at any time with the "Cookie settings" link at the bottom of the website.
8. Your rights
Under Article 8 of the Law of Ukraine "On Personal Data Protection" you have the right:
- to know what data of yours is processed, where, by whom and why;
- to access your data;
- to have inaccurate data corrected or data deleted;
- to object to processing and withdraw your consent;
- to complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.
To use these rights, write to [email]. We reply within 30 calendar days.
9. How we protect data
Data travels over an encrypted connection, and only the staff who need it for their work have access to it. Account passwords are stored only in a form from which the password cannot be recovered.
10. Changes
The Shop may update this policy. A new version is published on this page with the date it applies from.