PRIVACY AND PERSONAL DATA PROCESSING POLICY

Last updated: 

This Policy explains what personal data we may collect when you use the shevchenko.memorial website, submit an order request, communicate with us, make a payment, arrange for delivery of the “Indomitable” sculpture, or contact us with any questions.

We use personal data only to the extent necessary for the operation of the website, processing orders, fulfilling orders, organizing payment and delivery, communicating with customers, and complying with Ukrainian law.

1. Who processes your data

The owner of the personal data is:

Iryna Oleksiivna Halushka, Individual Entrepreneur
EDRPOU: 3818807149
Email for questions regarding personal data: shevchenko.memorial@gmail.com

Hereinafter in this Policy — “we,” “us,” “Seller.”

2. What Data We May Collect

When submitting an application on the website

Depending on the form fields, we may collect:

  • first name;
  • phone number;
  • email address;
  • Telegram username or other Telegram contact information;
  • information about the desired order;
  • number of sculptures;
  • information about gift wrapping;
  • any comments you voluntarily included in the form.

When confirming your order

After receiving your request, we will contact you via Telegram or email. During our follow-up communication, we may ask for:

  • first and last name;
  • phone number;
  • shipping information;
  • your chosen payment method;
  • other information necessary to confirm and fulfill the order.

If the order is placed as a gift

We may also receive:

  • the recipient’s name;
  • their phone number;
  • city, branch, post office box, or delivery address;
  • the sender’s name or signature;
  • the text of a personal message for a gift card.

We may also receive other information that you voluntarily provide to us in correspondence or when contacting us.

When you use the website, certain technical data may be processed automatically, such as your IP address, device and browser type, technical information about the website’s operation, and cookies—if used.

3. How We Use the Data

We may process personal data to:

  • receive and process your request;
  • contact you via Telegram or email;
  • clarify and confirm your order;
  • agree on the quantity, configuration, preparation time, payment method, and delivery method;
  • provide payment details;
  • verify the received payment;
  • arrange cash on delivery if this method has been agreed upon;
  • arrange delivery;
  • ship the order directly to the recipient;
  • prepare a gift card;
  • answer questions and respond to inquiries;
  • handle inquiries regarding delivery, exchanges, or returns;
  • to ensure the operation and security of the website;
  • to fulfill accounting, tax, and other obligations required by law.

We do not use personal data for purposes incompatible with those for which it was collected.

4. On what grounds do we process data

Depending on the situation, personal data may be processed:

  • to process your request and subsequently conclude and fulfill a contract;
  • to fulfill a confirmed order;
  • to fulfill the Seller’s legal obligations;
  • based on your consent—in cases where such consent is required;
  • to ensure the operation and security of the website and to pursue the Seller’s legitimate interests, provided that your rights are respected.

Providing personal data is voluntary.

However, without your contact information, we will not be able to contact you, confirm your order, process payment, or arrange delivery.

5. Payment

Payment is not processed directly on the website.

After receiving and confirming your order, we will agree with you on one of the available payment methods, including:

  • bank transfer using the provided bank details;
  • payment to an individual entrepreneur’s account;
  • transfer to a bank card—if this method has been agreed upon;
  • cash on delivery upon receipt of the shipment.

Payment details for advance payment are provided to the buyer after the order is confirmed via the agreed-upon communication channel.

The website does not request or store PINs, CVV/CVC codes, or full payment details of buyers’ bank cards.

After a bank transfer is made, we may receive information from the bank or the payment document necessary to identify the payment, such as:

  • the payer’s name—if displayed;
  • payment amount;
  • the payment date;
  • payment description;
  • other limited information about the transaction available to the payment recipient.

If the payment is made through a bank, payment institution, cash-on-delivery operator, or other financial service provider, that provider processes the data independently in accordance with its own rules and privacy policy.

6. Communication via Telegram and Email

To confirm and follow up on your order, we may communicate with you via:

  • Telegram;
  • email;
  • another agreed-upon communication channel.

If you choose Telegram or email, the respective service may process technical and other data independently in accordance with its own terms of use and privacy policy.

We use correspondence to process your request, confirm your order, arrange payment and delivery, and resolve other issues related to your order.

Please do not send credit card details, PIN codes, CVV/CVC codes, or other payment information that is not necessary for fulfilling your order via correspondence.

7. Delivery

To facilitate delivery, we share the necessary personal data with the Nova Poshta delivery service.

Depending on the delivery method, this may include:

  • the recipient’s first and last name;
  • phone number;
  • city;
  • branch or parcel locker number;
  • delivery address;
  • other information required to process a specific shipment.

If the order is sent cash on delivery, the required information may also be processed by the payment institution or operator through which the funds are transferred.

Nova Poshta and the relevant payment institutions subsequently process the data they receive in accordance with their own rules and privacy policies.

8. If you are ordering a gift for someone else

If you provide us with the personal data of another recipient, you confirm that you have a legal basis to transfer this data for the processing and delivery of the order.

We use the recipient’s data only to the extent necessary to:

  • process the shipment;
  • arrange delivery;
  • communicate about the delivery, if necessary;
  • prepare a gift card, if you have ordered one.

Please do not include confidential, financial, medical, or other sensitive personal information in the text of the gift card unless it is necessary.

9. Who May Receive Your Data

To the extent necessary for the operation of the website and the fulfillment of your order, access to certain personal data may be granted to:

  • banks and other financial institutions;
  • payment institutions and cash-on-delivery operators;
  • delivery services;
  • website hosting and technical support providers;
  • email and other communication service providers;
  • analytics services—if they are integrated with the website;
  • government agencies—only in the cases and to the extent provided for by law.

We only share data that is necessary for the relevant purpose.

We do not sell personal data to third parties.

10. Cookies and Technical Data

This website may use cookies and similar technologies.

Technical cookies may be necessary, for example, to:

  • enable the website to function properly;
  • make the application form work;
  • save your selected language;
  • ensure the security and stability of the website.

If the website uses analytical or advertising cookies, information about their use and the ability to manage your consent will be provided in accordance with the website’s settings and legal requirements.

You can also manage cookies through your browser settings.

Disabling certain technical cookies may affect the functionality of some website features.

11. How Long We Retain Data

We retain personal data no longer than is necessary for the purposes for which it was collected, unless a longer retention period is required by law.

Information regarding requests, orders, and payments may be retained for the period necessary to:

  • process the request;
  • fulfill the order;
  • perform accounting and tax reporting;
  • process exchanges and returns;
  • address potential inquiries or disputes;
  • fulfill other legal obligations.

If an order is not placed after a request is submitted, the data may be retained for a reasonable period of time necessary to complete communication and resolve any related issues.

Correspondence with customers may be retained for the time necessary to fulfill the order and resolve any related issues.

Once the necessary period has elapsed, personal data is deleted, destroyed, or anonymized, unless its continued storage is required by law.

12. How We Protect Data

We take reasonable organizational and technical measures to protect personal data from:

  • unlawful or unauthorized access;
  • loss;
  • alteration;
  • disclosure;
  • destruction.

Access to personal data is granted only to the extent necessary to perform the relevant functions.

At the same time, no method of transmitting or storing information online can guarantee absolute security.

13. Your Rights

Under Ukrainian law, you have the right, in particular:

  • to know the sources of collection, the location, and the purpose of the processing of your personal data;
  • to receive information about the conditions for accessing your personal data;
  • to access your personal data;
  • to request the correction of inaccurate or outdated data;
  • to submit a reasoned request to object to the processing of your personal data;
  • in cases provided for by law, request the modification or deletion of personal data;
  • withdraw consent to the processing of personal data if such processing is based on that consent;
  • file complaints with the Ukrainian Parliament Commissioner for Human Rights or in court;
  • exercise other rights provided for by Ukrainian law.

To exercise your rights, please contact us:

shevchenko.memorial@gmail.com

In your message, please provide sufficient information so that we can identify you and understand the nature of your request.

14. User Data from Other Countries

The website may be accessible to users located outside Ukraine.

Certain providers of technical, communication, or payment services may process data outside of Ukraine in accordance with their own infrastructure and policies.

If additional legal requirements of the country where you are located apply to the processing of your personal data, you may contact us at:

shevchenko.memorial@gmail.com

15. Changes to the Policy

We may update this Policy if there are changes to:

  • the operation of the website;
  • the application form;
  • the order placement process;
  • payment or delivery methods;
  • the third-party services we use;
  • legal requirements.

The current version of the Policy is published on this page, along with the date of the last update.

16. Contact Information

For any questions regarding this Policy and the processing of personal data, please contact:

Iryna Oleksiivna Halushka, Individual Entrepreneur
EDRPOU: 3818807149
Email: shevchenko.memorial@gmail.com
Instagram: @shevchenko.memorial
Telegram:
@shevchenko_memorial