Got Questions?

Address

Kyiv, st. Hlubochytskaya 32B

This Privacy Policy is part of the general Terms of Use of the website. The purpose of this Privacy Policy is to implement basic values in the field of personal data protection and ensure transparency during their processing.

We will try to explain why and how your personal data will be processed, disclose the mechanisms and technologies of their processing, as well as the scope of mutual rights and obligations. In developing this Privacy Policy, we took into account the provisions of national legislation, the General Data Protection Regulation (GDPR; Regulation (EU) 2016/679), and the Confidentiality Agreement between the EU and the USA (EU-US Privacy Shield Framework).

Introduction

BY ACCEPTING THE TERMS OF THIS PRIVACY POLICY, YOU UNCONDITIONALLY CONSENT TO THE PROCESSING OF YOUR PROVIDED DATA IN ACCORDANCE WITH THE RULES SET FORTH HEREIN. ALL DATA POSTED BY THE USER THROUGH THE WEBSITE IS CONSIDERED PERSONAL, CONSCIOUSLY POSTED BY THE USER, AND THE ACT OF POSTING CONFIRMS THE USER’S RIGHT TO PROCESS SUCH DATA.

We do not verify user-posted data except in cases where it is necessary to fulfill our obligations to the user or others, or when the user requests such verification.

Purpose of Data Processing

The collection and processing of personal data are carried out solely for the purpose of ensuring the convenient and secure use of the website and fulfilling our obligations to you.

The information we collect about you is necessary for the following purposes.

• User Identification: To establish the identity of the user (contractor, client, buyer, recipient, etc.), it is necessary to know their name, contact information, and other details that allow identification. Without this information, we cannot ensure the processing of orders, payment acceptance, security, technical support, or legal documentation.
• Profiling and Automated Decision-Making: We do not use the data obtained to create profiling or any automated decision-making processes that may have a discriminatory character or place the user in a more advantageous position compared to other users.
• Security: We may process data that allows the identification of the user as the account owner, the device used to access the site, cookies, IP addresses, etc. This is necessary to detect atypical activity resulting from the use of the account without your knowledge (unauthorized acquisition of login or password, device theft, credit card theft, etc.).
• Marketing and Advertising: We may inform users about new site features and products. Your personal data will not be used to send advertising messages from third parties unless you have consented to it.
• Statistics and Research: We process certain data for statistical or research purposes (visitor geography, sales indicators, user activity time, most popular products, etc.). The disclosure of such data occurs after anonymization. This data is processed until it becomes irrelevant for us. We may also share this information with partner companies and provide access to it to other users. We cannot delete such information upon your request, as after anonymization, the connection between such data and your personal data is lost.

Methods of Data Acquisition

• Automatic Collection (Cookies, Sessions, IP Addresses, Logging): When you attempt to visit a specific site, a request is sent to our server, which returns the requested information to you. These data are stored in cookies and sessions automatically upon the first visit to the site and are constantly changing depending on user activity. Without their storage, the user would need to re-enter their login and password for each page load, and it would be impossible to view products in the cart, save language settings, currency, etc.
• User Data Transmission: Users may be asked to fill out a form on the site to place an order or contact customer support, etc. There are cases when it is necessary to obtain additional information from the user in connection with the detection of errors in filling out the form, clarification of the address, details, payment amount, etc.
• Correspondence Processing: We will keep messages sent by you, regardless of their form and method of receipt. If messages contain additional data, we may use them to create, modify, or delete other data.
• Public Sources: If we find inaccuracies in the data, we will try to clarify this information with the user or obtain it from publicly available sources. We may try to obtain data through social networks, communication channels, technical and financial intermediaries, etc.

Upon request, we undertake to provide comprehensive information about the source of receipt of your personal data.

Information Transmission

The transmission of information between the user and the website occurs using the HTTPS protocol, which enables authentication and encryption. In the event of issues with data transmission via HTTPS, you will receive a corresponding browser notification indicating that your connection is not secure. In such a situation, we recommend limiting the transfer of sensitive information until the issues are resolved or until specific instructions are provided by us.

Data Management

All rights to the data belong to the user who has provided them, and, therefore, the user can restrict their use, make changes, or delete them at any time. The user can revoke their consent for data processing at any time by deleting the account or performing other data-related operations through the website settings. For security reasons, this Privacy Policy or other rules may impose restrictions on data deletion.

Certain data are necessary for us to properly fulfill our obligations to the user (providing access to the website, processing orders, accepting payments, etc.), and therefore, operations involving such data may affect or lead to the suspension of the fulfillment of our obligations.

Data Change or Deletion

The service support team can change or delete data only under the following conditions: (1) the interface does not provide the capability to perform such operations independently; (2) the user is the owner of the account or personal data; (3) the data are accurate; (4) performing data operations will not complicate the further use of the website; (5) there is no need to retain the original data for legal protection; (6) there is no other necessity for preserving the original appearance of the data.

Data Retention Period

The duration of data retention depends on the purpose of their collection. Different data have different retention periods:

Database:

Information stored in databases is retained until the user deletes it or the user account is deleted. Data necessary for fulfilling our obligations to the user are kept until the termination of such obligations.

• After fulfilling the obligations, such data will be retained for a certain period: (1) as long as there is a likelihood of claims regarding the fulfillment of obligations; (2) for the period defined by legislation as the minimum for storing such data (e.g., financial and accounting documentation, transaction data, data required for financial monitoring, etc.); (3) until the data may be required by competent authorities (tax, law enforcement, judicial, etc.).

Right to Make Data Copies

We reserve the right to make copies of data if the deletion of the account or data was performed by the user before the expiration of the periods determined by this section.

Duration of Data Storage

The duration of storing data processed using distributed databases and file systems depends on the specific features of the underlying technologies. Certain distributed data storage technologies restrict the ability to modify or delete data (e.g., blockchain).

Encrypted Data

Data stored in encrypted form, preventing identification and user ownership, is kept indefinitely. We minimize cases of modification or deletion of encrypted information as we lack knowledge of its content, and such actions may compromise database integrity.

Backup Copies

To ensure data protection, backup copies are created at different intervals (monthly, weekly, daily, hourly, etc.). The retention period of backup copies depends on whether new backup copies have been created in the quantity necessary for data restoration in the event of a technical failure.

An archival copy of the database contains data for all users. Therefore, WE CANNOT FACILITATE THE CHANGE OR DELETION OF DATA FOR A SPECIFIC USER FROM AN ARCHIVAL COPY WITHOUT RISKING THE INTEGRITY OF OTHER USERS’ DATA. If a user performs certain data operations, the archival copy with the original data will be replaced with a new one after some time, and the archival copy with the previous data will be deleted.

Replication

For high performance and data security, data duplication occurs in real-time (replication). Replication takes place with any data operations, so if data or an account is deleted, the data will be removed from all replicas in real-time.

Cookies

Cookies without personal data have a relatively long storage period (over a year). Cookies used to store more critical information (session number, specific account parameters, access rights) are stored until the user is authorized on the site.

Sessions

Sessions are stored on our server and are automatically deleted after logging out of the account or in case of inactivity on the site for a specific period.

Server Request Logs

The history of server requests is stored for the necessary period to ensure user security and software functionality. We do not intend to retain this information for an extended period.

Messages

The storage period of messages depends on the circumstances to which they relate. We may limit the user’s ability to delete their own messages if there is a need to preserve them for the protection of rights and interests.

Third-Party Processed Data

We cannot influence the data retention periods by entities engaged in fulfilling our obligations to the user (providers, financial institutions, postal and courier services, legal and financial consultants, etc.). WE DO NOT CONTROL THE STORAGE PERIODS OF SUCH INFORMATION AND DO NOT PARTICIPATE IN RESOLVING USER DISPUTES WITH THESE ENTITIES IF THE DATA WAS TRANSMITTED TO FULFILL OUR OBLIGATIONS TO THE USER.

Data transmitted to the above entities is processed by them under their own terms.

Consent Information

Legislation in certain states requires obtaining the user’s consent for data processing. The need for such proof may arise at any time; therefore, we may indefinitely store information allowing us to confirm receipt of your consent.

WE DO NOT NOTIFY ABOUT THE EXPIRATION OF DATA STORAGE, THE NEED FOR ITS UPDATE, OR DELETION.

Disclosure to Third Parties

To fulfill obligations to the user, data may be processed by our (1) employees, (2) contractors, (3) affiliated entities (our branches, representations, partners, and entities we are part of), and (4) accompanying subjects (financial institutions, postal operators, communication means operators, entities acting as intermediaries between us and the user, etc.). The processing of data by these entities occurs under conditions that cannot worsen or diminish the rights specified in this Privacy Policy.

WE ALWAYS STRIVE TO ENGAGE ONLY RELIABLE CONTRACTORS, BUT WE ARE NOT LIABLE FOR THEIR ACTIONS.

The transfer of personal data to third parties occurs in the presence of a data protection policy for such parties.

Data Disclosure to Official Authorities

Data disclosure at the request of competent authorities is carried out in strict accordance with the procedure provided by the legislation of the country where business activities are conducted or where such data is located.

WE DO NOT NOTIFY THE USER IN CASE OF RECEIVING AN OFFICIAL REQUEST FROM COMPETENT AUTHORITIES OR AFTER PROVIDING THE RELEVANT REQUEST.

Public Data Disclosure

We do not publicly disclose data without obtaining user consent.

IF THE SITE’S FUNCTIONALITY IMPLIES THAT CERTAIN DATA BECOMES PUBLIC AND YOU DISAGREE, YOU SHOULD NOT POST SUCH DATA.

In the case of public data placement on the site, an unlimited number of people, including automated data collection programs (web crawlers, bots, parsers), may have access to such data.

WE ARE NOT RESPONSIBLE FOR THIRD PARTIES’ USE OF PUBLICLY POSTED DATA.

We cannot influence individuals who keep copies of publicly posted personal data. Limiting, changing, or deleting data on the site will not affect its alteration or deletion by individuals who obtained it publicly. We do not participate in resolving disputes with third parties using publicly posted data.

Cross-Border Data Transfer

We do not restrict the use of the site by foreign citizens or individuals in other countries. Data exchange between the user and the site occurs through communication channels that may be located in several countries.

SERVERS AND PROVIDERS THAT ENSURE THE SITE’S OPERATION MAY BE LOCATED IN DIFFERENT COUNTRIES AROUND THE WORLD.

Conflict Resolution

If you have concerns about the processing of personal data, you can contact us using the feedback form, contact information on the site, or the details provided in this Policy.

Contacts for filing complaints:

Queries are accepted in Ukrainian or English. This does not mean that we will not consider requests in other languages, but there is a risk that we may misunderstand the essence of your request. All responses will be sent in Ukrainian or English.

If you have difficulty filing a complaint in Ukrainian or English, you can seek assistance from lawyers or direct your complaint to the competent supervisory authority responsible for data protection.

Responses to user inquiries in electronic form are provided free of charge. If the user wishes to receive a response in writing, incurring additional costs, we may ask the user to cover these expenses.