1. General Provisions
1.1. This Agreement (hereinafter referred to as the “Agreement”) establishes the terms and conditions for the processing and protection of personal data of users (hereinafter referred to as the “User”) in the personal data databases owned by the Seller (hereinafter referred to as the “Administrator”).
1.2. This Agreement is published on a separate page of the website. A link to it is placed in the shopping cart, and the corresponding consent checkbox is enabled by default. The User may enable or disable this option before placing an order.
1.3. By using the website and checking the designated checkbox in the cart, the User confirms that they have read this Agreement and give their consent to the processing of their personal data. In case of revoking consent (unchecking the box), processing of any new personal data for order placement is not possible.
2. Definitions
-
Personal Data — any information relating to an identified or identifiable natural person (the “User”), including but not limited to surname, first name, patronymic, email address, phone number, delivery address, payment details, etc.
-
Processing of Personal Data — any action (operation) or set of actions (operations) performed on personal data, such as collection, recording, systematization, accumulation, storage, specification (updating, modification), use, transfer (distribution, provision, access), anonymization, blocking, deletion, destruction, and so forth, with or without the use of automation tools.
-
Administrator of Personal Data (hereinafter the “Administrator”) — the Seller who determines the purposes and means of processing the User’s personal data, collects, stores, and protects it.
-
User — a natural person who visits and uses the website, places an order, and provides their personal data for processing.
3. Purposes and Legal Bases for Processing Personal Data
3.1. The Administrator processes the User’s personal data solely based on the explicit and voluntary consent given by checking the designated checkbox in the shopping cart.
3.2. The purposes of processing personal data are:
-
Order Fulfillment — to obtain information necessary for processing, packaging, shipping, and payment of goods.
-
Communication — to make calls, send emails or SMS notifications regarding order status, promotions, special offers, and to inform about changes to the service (if the User has consented to marketing communications).
-
Compliance with Legal Obligations — to generate reports, exchange data with regulatory authorities as required by the laws of Ukraine.
-
Service Improvement — to analyze order statistics, handle complaints and suggestions, identify customer needs, and personalize the service (when necessary and with the User’s consent).
3.3. The legal bases for processing are:
-
Article 6 of the Law of Ukraine “On Protection of Personal Data” — voluntary, informed consent of the User;
-
Paragraph 2 of Article 10 of the Law of Ukraine “On Information Protection in Information and Telecommunication Systems” — processing data for the performance of obligations under the contract with the User;
-
Internal rules and procedures of the Administrator, provided they do not contradict applicable law.
4. Categories of Personal Data Collected and Processed
4.1. The Administrator may collect and process the following categories of personal data:
-
Surname, first name, patronymic;
-
Contact phone number;
-
Email address;
-
Delivery address (country, city, street, postal code, and any additional information necessary for the courier);
-
Payment details (bank card data or other payment credentials required for purchasing goods);
-
IP address and technical information about the browser (for analytics and fraud protection);
-
Other information required for fulfilling the contract of sale.
4.2. The processing of the personal data listed above is carried out strictly to the extent necessary to achieve the purposes specified in Section 3 of this Agreement.
5. Data Collection Procedure
5.1. The User provides personal data directly by filling out the appropriate fields when placing an order in the shopping cart:
-
Fields for surname, first name, and patronymic;
-
Field for phone number;
-
Field for email address;
-
Field for delivery address and any additional information;
-
Payment details through a secure payment form (in compliance with payment system requirements).
5.2. Additional data (IP address, browser information, cookies) are collected automatically when the User visits the website and places an order for analytics and security purposes.
5.3. If the User refuses to provide the required personal data (Section 4.1), the Administrator will be unable to fulfill the contract of sale (e.g., deliver the goods or process payment), and the order cannot be placed.
6. Retention Period of Personal Data
6.1. The Administrator retains the User’s personal data only for as long as necessary to:
-
Fulfill the contract of sale;
-
Comply with legal obligations to regulatory authorities under the laws of Ukraine (reporting and payment document retention period is at least 3 years);
-
Resolve any potential claims and disputes (up to 3 years after the end of the relationship with the User).
6.2. Data no longer needed for these purposes and within these timeframes will be permanently deleted or anonymized according to the Administrator’s internal procedures.
7. Transfer of Personal Data to Third Parties
7.1. Personal data may be transferred to third parties only in the following cases:
-
Contractors and Partners (logistics services, payment gateways, financial institutions, courier services) necessary for fulfilling, delivering, and paying for the order. Transfers are made only to the extent required by contracts with these third parties and in accordance with legal requirements.
-
Regulatory Authorities (tax authorities, law enforcement agencies) — when requested and within the scope of their authority as prescribed by Ukrainian law (for example, upon a court or prosecutor’s order).
-
Other Cases — with the User’s written consent or where required by law.
7.2. The Administrator does not share personal data with third parties (banks, healthcare institutions, courts, etc.) without an appropriate legal basis or the User’s consent.
8. Measures for Protecting Personal Data
8.1. The Administrator implements the following technical and organizational measures:
-
Use of SSL certificates to encrypt data transmitted over the Internet;
-
Restricted access to personal data only to authorized employees of the Administrator;
-
Deployment of antivirus software, firewalls, and intrusion detection systems on servers where data are stored;
-
Regular updates of software (CMS, plugins, and other components);
-
Use of strong passwords for administrative access to the website;
-
Regular backups of databases, stored on secure servers.
8.2. The Administrator is obliged to promptly notify the User and relevant authorities in the event of any disclosure, unauthorized access, or loss of personal data.
9. Rights and Obligations of the Parties
9.1. Rights of the User
-
To obtain information about the processing of their personal data in accordance with applicable law (Article 8 of the Law of Ukraine “On Protection of Personal Data”).
-
To request correction, updating, or deletion of inaccurate, incomplete, or outdated personal data.
-
To demand cessation of processing or deletion of personal data if the processing purpose has been fulfilled or consent has been withdrawn (except as otherwise provided by law).
-
To file a written complaint with the authorized personal data protection authority if their rights are violated.
9.2. Obligations of the User
-
To provide accurate personal data when placing an order.
-
To promptly inform the Administrator of any changes to their personal data (e.g., a change of delivery address, contact phone number, or email address).
-
Not to share their account credentials (login/password) with third parties.
9.3. Rights of the Administrator
-
To process the User’s personal data exclusively for the purposes specified in this Agreement.
-
To amend this Agreement by publishing a new version on a separate page of the website.
-
To verify the accuracy of personal data provided by the User.
9.4. Obligations of the Administrator
-
To ensure confidentiality and protection of personal data in accordance with current legislation and this Agreement.
-
Not to disclose personal data to third parties unless strictly in accordance with the terms of this Agreement and applicable law.
-
To delete or anonymize personal data after the purpose of processing is achieved or the retention period expires.
10. Liability of the Parties
10.1. In case of breach of this Agreement or failure to fulfill obligations regarding personal data protection, the Parties shall be held liable in accordance with applicable Ukrainian law.
10.2. If the Administrator fails to comply with personal data protection requirements, they shall be liable to the User and may face penalties as set forth in the Law of Ukraine “On Protection of Personal Data” and other legal acts.
11. Disclaimer
11.1. The Administrator is not liable for the User’s browser privacy settings, including blocking or deleting cookies necessary for the website’s functionality.
11.2. In the event of technical failures that lead to disclosure or loss of data, the Administrator will take all possible measures to mitigate consequences and notify the User.
12. Amendments and Updates to the Agreement
12.1. The Administrator reserves the right to amend this Agreement. The latest version will always be available on a separate page of the website (e.g., /user-agreement).
12.2. A new version of this Agreement becomes effective upon publication. Continued use of the website after amendments signifies the User’s acceptance of the updated terms.
12.3. If the User does not agree with the changes, they must stop using the website and refrain from placing new orders.
13. Procedure for Granting and Withdrawing Consent
13.1. To place an order, the User must check the box “I agree to the User Agreement on the processing and protection of personal data” in the shopping cart. If the checkbox is not checked, the “Place Order” button remains inactive.
13.2. The User may withdraw their consent at any time by contacting the Administrator via email or phone (contact details provided in Section 14). After withdrawing consent, processing of any new personal data becomes impossible, and new orders cannot be placed.
14. Contact Information
If you have any questions or complaints regarding the processing and protection of your personal data, please contact the Administrator at:
-
Email: thegravix0@gmail.com
-
Phone: +38 067 220 9 220
Last Updated: June 1, 2025