PRIVACY POLICY

1. General Provisions and Definitions

1.1. This Privacy and Personal Data Protection Policy (hereinafter – the “Policy”) establishes the procedure for obtaining, collecting, accumulating, storing, processing, using, protecting, and disclosing the personal data of users of the online store website https://oberty.com.ua/, built on the Shopify platform (hereinafter – the “Site”).

1.2. The controller and administrator of personal data is FOP SYDORENKO ANASTASIIA OLEHIVNA, Taxpayer Identification Number (RNOKPP) 3581003744 (hereinafter – the “Administrator” or the “Seller”).

1.3. This Policy has been developed in accordance with applicable Ukrainian legislation, in particular the Law of Ukraine “On Personal Data Protection.”

1.4. By placing an order for goods on the Site, registering an account, or otherwise using the website (by checking the box “I agree to the Public Agreement and Privacy Policy” or by making a payment), the User grants unambiguous consent to the processing of their personal data on the terms set out below.

2. Categories of Personal Data Collected

2.1. The Administrator may collect and process the following User data:

  • Personal contact information: first name, last name, patronymic, contact phone number, e-mail address, social media profile data (where applicable);

  • Address and demographic information: delivery address (city, region, postal branch, or street, building, apartment), date of birth or age range (if available);

  • Technical data (collected automatically by the Shopify platform): IP address, device type, operating system, browser type and version, cookie files;

  • Payment information: data required to process payment transactions via the “Khutko” payment acquiring service (processing is carried out in accordance with high security standards of international payment systems);

  • Interaction history: reviews, comments, support inquiries, order history.

3. Purposes of Collecting and Processing Personal Data

3.1. Personal data is used by the Administrator for the following purposes:

  • Administering the Site and ensuring its technical support and updates;

  • Concluding and performing contractual relations (distance sale and purchase agreement and delivery of goods);

  • Processing User orders and conducting payment transactions;

  • Providing effective customer and technical support, and handling inquiries and complaints;

  • Informational support and communication with the User (sending order status updates and tracking numbers);

  • Marketing purposes: direct marketing, commercial mailings, and information about new products, promotions, or offers (only with the User’s consent, with the ability to unsubscribe at any time via a special link in the e-mail);

  • Compliance with applicable Ukrainian legislation (tax, accounting, etc.).

4. Interaction with Third Parties

4.1. The Administrator does not transfer personal data to third parties, except where necessary to fulfill obligations to the User or where required by Ukrainian legislation.

4.2. The following parties may be granted access to personal data to the minimum extent necessary:

  • The Shopify platform: the online store’s technical infrastructure;

  • Carrier companies and delivery services (e.g., “Nova Poshta,” “Ukrposhta”) – solely for organizing order delivery;

  • Payment system and acquiring operators (including the “Khutko” payment acquiring service) – for processing secure payments;

  • Contractors and persons engaged by the Administrator for technical support or the provision of services (subject to strict confidentiality obligations).

4.3. Cross-border data transfer. The Site’s technical infrastructure is based on the Shopify platform, whose servers are located outside Ukraine. Accordingly, the User’s personal data may be transferred to and processed on servers in other countries. The Administrator takes reasonable measures to ensure that such transfers comply with the requirements of Ukrainian personal data protection legislation and that Shopify provides an adequate level of data protection.

5. Security and Data Retention Period

5.1. The Administrator, together with the Shopify platform, applies all necessary technical, operational, and organizational security measures (including encryption protocols) to prevent unauthorized or unlawful disclosure, loss, destruction, or damage of data. However, it should be noted that absolute protection during data transmission over the Internet does not exist.

5.2. Personal data is stored for the period necessary to achieve the purposes of processing (e.g., for the duration of legal obligations and performance of agreements between the parties), or in accordance with the periods established by Ukrainian legislation.

6. User Rights (Rights of the Data Subject)

6.1. The User has the right to:

  • Know the sources of collection and location of their personal data, and the purpose of its processing;

  • Receive information about the conditions under which access to the data is granted, including information about third parties to whom it is transferred;

  • Access their personal data and receive a response within 30 days of the request;

  • Request correction, updating, blocking, or destruction of their personal data if it is inaccurate or unlawfully processed;

  • Object to the processing of their data or withdraw consent to processing at any time;

  • File complaints with the Ukrainian Parliament Commissioner for Human Rights or with a court.

6.2. To update, access, amend, block, or delete your data, or to withdraw consent to its processing, please contact the Administrator’s e-mail address: obertystore@gmail.com.

7. Cookie Policy

7.1. The Site uses cookie files to ensure the technically optimized operation of the store, to save items in the shopping cart, to remember User settings, and to analyze the effectiveness of resource use.

7.2. The User may independently configure their browser to block cookie files; however, this may limit access to, or the full functioning of, certain sections of the Site.

8. Final Provisions

8.1. The Administrator has the right to amend or supplement this Policy at any time (in particular, in the event of changes to legal requirements) without prior notice to Users. The new version takes effect upon its publication on the Site.

8.2. If the User does not agree with any provision of this Policy, they must immediately stop using the Site.