Privacy policy

PRIVACY POLICY

Last updated: January 9, 2026
Website: https://magazinjorikaflekssa.com.ua
Owner/Seller: Sole Proprietor (FOP) Kuts-Polikarpov Heorh Heorhiiovych (hereinafter — the “Store”, the “Seller”, the “Site Administration”)

1. Definitions

1.1. The following terms are used in this Privacy Policy:
1.1.1. “Site Administration” — authorized persons of the Seller who manage the Website, organize and/or carry out the processing of personal data, and determine the purposes of processing, the scope of personal data to be processed, and the actions (operations) performed with personal data.
1.1.2. “Personal Data” — any information that directly or indirectly relates to an identified natural person (data subject).
1.1.3. “Personal Data Processing” — any action (operation) or set of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction, etc.
1.1.4. “Confidentiality of Personal Data” — an obligation not to disclose personal data without the consent of the data subject or another lawful basis.
1.1.5. “User” — a person who visits the Website and/or places an order.
1.1.6. “Third Parties / Service Providers” — delivery services, payment providers, IT contractors, analytics services, and other counterparties that help the Store provide its services.

2. General Provisions

2.1. By using the Website, the User agrees to this Privacy Policy and to the terms of processing their personal data.
2.2. If the User does not agree with this Privacy Policy, they must stop using the Website.
2.3. This Privacy Policy applies only to this Website. The Store does not control and is not responsible for third-party websites that the User may access via links from this Website.
2.4. The Site Administration does not verify the accuracy of personal data provided by the User, but assumes that the User provides current and truthful information.

3. Scope of the Privacy Policy

3.1. This Privacy Policy sets out the obligations of the Site Administration to ensure confidentiality and protection of personal data provided by the User when placing an order, registering (if available), contacting support, or otherwise interacting with the Website.
3.2. Personal data permitted for processing under this Privacy Policy may include:

full name (last name, first name, patronymic — if applicable);
contact phone number;
email address;
shipping address / city / country;
other information required for delivery and payment (for example, recipient details needed by delivery services).

3.3. The Website may also automatically receive technical data when the User visits pages and interacts with content, including:

IP address;
cookie data and similar technologies;
information about browser/device/operating system;
access time and pages viewed;
referrer (the address of the previous page).

3.3.1. Disabling cookies may limit access to certain Website features.
3.3.2. Statistics (including IP) may be used to ensure stable Website operation, analytics, and security (to detect technical issues and/or suspicious activity).

4. Purposes of Collection and Processing

4.1. The Site Administration processes the User’s personal data in order to:

process and fulfill orders (payment, packing, delivery);
communicate with the User regarding an order, clarifications, returns/exchanges;
provide support and respond to inquiries;
comply with legal requirements (accounting, tax/financial obligations);
ensure security and prevent fraud;
improve the Website and services (analytics and statistics).

4.2. Legal bases for processing (depending on the situation) may include: performance of a contract/order, compliance with legal obligations, legitimate interests (security, analytics), and the User’s consent where required by law.

5. Processing Conditions and Disclosure to Third Parties

5.1. Personal data is stored and processed using appropriate organizational and technical security measures.
5.2. The Site Administration may disclose personal data to third parties to the extent necessary for:

delivering orders (delivery providers);
processing payments (payment service providers/banks/acquirers);
maintaining Website operations and infrastructure (hosting, IT contractors, analytics tools).

5.3. Personal data may be disclosed upon a lawful request of governmental authorities in accordance with applicable law.

6. International Orders and Cross-Border Transfers

6.1. If the User places an international order, or if the Store uses services whose infrastructure is located outside Ukraine, personal data may be transferred and/or processed in other countries to the extent necessary to provide the services.
6.2. Where required (including for transfers related to the EEA/UK), recognized safeguards may be used, such as Standard Contractual Clauses or other lawful transfer mechanisms.

7. Shopify and Third-Party Services

7.1. The Website may be technically supported by Shopify. Shopify and integrated services may process personal data to provide store functionality (checkout, payments, analytics, security).
7.2. Third-party sites/services linked from the Website have their own privacy policies; the Store is not responsible for their practices.

8. Data Retention

8.1. Personal data is retained no longer than necessary for the purposes described in this Privacy Policy and/or as required by law (for example, accounting/tax compliance).
8.2. After the purpose of processing is achieved, the data may be deleted or anonymized unless retention is required by law.

9. User Rights

9.1. The User has rights provided by Ukrainian law, including the right to know the sources of collection and the purposes of processing, to access information about their personal data, to request correction/deletion in cases provided by law, and to withdraw consent where processing is based on consent.
9.2. For Users located in the EEA/UK, additional rights may apply (access, rectification, erasure, restriction, objection, portability) in accordance with local regulations.

10. Children’s Data

10.1. The Website is not intended for use by children. The Site Administration does not knowingly collect personal data of children without parental/guardian consent. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.