Privacy Policy

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") defines the procedure for collecting, storing, processing and protecting personal data of users of the Povitrulya online store, available at povitrulya.com.ua (hereinafter — the "Site" or the "Service").

We respect the privacy of every visitor to our Site. Personal data is processed in accordance with the requirements of the Law of Ukraine "On Personal Data Protection", as well as the provisions of the EU General Data Protection Regulation (GDPR) with respect to users located in the European Union.

By using the Site, placing an order or subscribing to informational materials, you agree to the terms of this Policy.

2. Definitions

  • Personal Data Controller — the Povitrulya online store, which determines the purposes and means of data processing.
  • Personal Data — any information that allows direct or indirect identification of an individual (Buyer / User).
  • Processing of Personal Data — any action or set of actions (collection, registration, accumulation, storage, modification, use, transfer, deletion) performed with personal data.
  • Cookies — small text files stored on the user's device to ensure the correct operation of the Site and analytics.

3. What Personal Data We Collect

We collect only the data necessary to ensure the operation of the Site, fulfil orders and communicate with you:

3.1. Data you provide yourself:

  • When placing an order ("Cart" or "Quick order"):
    • First and last name of the buyer and/or recipient;
    • Contact phone number;
    • Email address;
    • Delivery address (city, branch or parcel locker number of the postal operator, or the exact address for door-to-door delivery).
  • When subscribing to news and promo codes:
    • Email address.
  • When sending reviews or contacting customer support:
    • Name, email, text of the request or review.

3.2. Data collected automatically (Usage Data & Cookies):

  • Device IP address;
  • Web browser type and version;
  • Device operating system;
  • Date, time and duration of visits to individual pages of the Site;
  • Source of the visit (referrer);
  • Technical cookies (cart identifier, interface language, cookie consent status).

We do not collect or store payment card data (CVV codes, full card numbers). Payments are processed on secure gateways of certified payment providers.

4. Purposes of Personal Data Processing

Povitrulya uses the received data exclusively for the following purposes:

  1. Order fulfilment and processing: communication with the customer to clarify order details, packing, shipping goods and providing parcel tracking numbers (TTN).
  2. Customer support: responding to requests, consulting on product features, handling inquiries and returns.
  3. Marketing and notifications (only with your consent): sending information about promotions, discounts, new products, free embroidery patterns and special offers.
  4. Maintenance and security: fraud prevention, protection of the Site from automated spam and abuse (including via Cloudflare Turnstile security services).
  5. Analytics and Service improvement: analysis of behavioural factors without deanonymising users (using the privacy-focused Umami analytics platform) to improve performance and catalogue structure.

5. Cookies and Analytics

The Site uses the following types of cookies:

  • Essential (technical) cookies: required to keep items in the cart during navigation, to remember the current language version and authorisation. Without them, the store cannot function.
  • Analytical cookies: used to count visitors and traffic sources. For this we use a privacy-preserving solution (Umami), which does not track users on third-party sites and does not build advertising profiles.
  • Functional cookies: remember your settings (for example, dismissing informational pop-ups or the fact that you accepted the cookie terms).

You can disable cookies in your browser settings. However, please note that in this case some features of the Site (in particular, the cart) may not work correctly.

6. Transfer of Data to Third Parties

We do not sell or rent your personal data to third parties. Data is transferred only in certain cases, strictly within the scope of order fulfilment:

  1. Logistics and postal operators:
    • "Nova Poshta" LLC, "Ukrposhta" JSC and other selected delivery services — for issuing shipping waybills and delivering goods to the address you specified.
  2. Payment systems and banks:
    • For processing and verifying online payments.
  3. Transactional messaging providers:
    • Services for sending email and SMS/Viber messages about order processing status and parcel tracking numbers.
  4. Legal requirements:
    • Data may be disclosed to state authorities exclusively in cases provided for by the current legislation of Ukraine, upon a justified request from a court or law enforcement agencies.

7. Data Retention Period

Personal data is stored for the time necessary to achieve the purposes of its processing:

  • Order data is stored for the period established by the current tax and accounting legislation of Ukraine.
  • Data for marketing mailings is stored until the customer withdraws consent (unsubscribes from the mailing).

After the retention periods expire or upon your request, the data is deleted or anonymised.

8. Your Rights (Data Subject Rights)

In accordance with Article 8 of the Law of Ukraine "On Personal Data Protection" and the provisions of the GDPR, you have the right to:

  • Know the sources of collection, the location of your data and the purposes of its processing;
  • Receive information about the conditions for granting access to personal data to third parties;
  • Access your personal data;
  • Receive an answer as to whether your data is being processed, as well as receive the content of such data;
  • Submit a reasoned request to the controller to change or destroy your personal data if it is processed unlawfully or is unreliable;
  • Protect your personal data from unlawful processing and accidental loss or destruction;
  • Withdraw consent to the processing of personal data at any time;
  • Apply legal remedies in case of violation of personal data protection legislation.

9. Marketing Communications and Unsubscribe

News, discount and promo code mailings are sent to customers only with voluntary consent.

The frequency of mailings is usually no more than once a week.

You can unsubscribe from promotional emails at any time:

  • By clicking the "Unsubscribe" link at the bottom of any of our promotional emails;
  • By contacting our support service with a corresponding request by phone or email.

10. Deletion of Personal Data (Right to Erasure)

You have the full right to request the complete deletion of your personal data from our systems (Right to Erasure / User Data Deletion).

To initiate data deletion, send a written request to the email address: [email protected] with the subject line "Видалення персональних даних".

The request is processed within 7 (seven) business days, after which your contact data will be irrevocably deleted, except for accounting information whose mandatory retention is directly required by the fiscal and tax legislation of Ukraine.

11. Children's Privacy

Our Service is not intended for independent purchases by persons under 18 years of age. We do not knowingly collect personal data from children. If parents or legal guardians discover that a child has provided us with their data without their consent, please contact us immediately — we will take all measures to promptly delete this information.

12. Changes to This Policy

We reserve the right to periodically update this Privacy Policy in connection with changes in legislation or changes in the operation of our Site. Any changes take effect upon their publication on this page. The date of the latest revision is indicated at the beginning or at the end of the document.

13. Contact Information

If you have questions, suggestions or comments regarding this Privacy Policy or the processing of your personal data, please contact us: