Privacy Policy

This Policy explains what personal data we collect when operating the Sova Nataliia website, why we need it, how we store it, and to whom we may transfer it.

We do not use any marketing or analytics tools. We do not track user behavior.

When processing personal data, we are guided by the Law of Ukraine "On Protection of Personal Data" and the EU General Data Protection Regulation (GDPR).

Personal data controller: FOP Sova Nataliia Serhiivna Tax ID (RNOKPP): 2943900762 Legal address: Ukraine, Kyiv, Valerii Lobanovskyi Avenue, 144 Actual address/warehouse address: Ukraine, Kyiv, Valerii Lobanovskyi Avenue, 144, apt. 169 Email (legal matters and returns): sovanatalia01@gmail.com Phone: +380933514015 Support hours: Mon–Fri, 12:00–18:00

We may collect the following data:

3.1. Order processing data: • Recipient's full name • Phone number • Email • Delivery address / city / country / branch (if branch delivery) • Order comment (if you left one)

3.2. Custom tailoring data (if you choose "custom-made"): • Measurements / parameters / other information you provide for product manufacturing • Correspondence regarding parameter clarification (email / messenger / Telegram bot)

3.3. Payment data: We do not store complete bank card data (number/CVV). We store the following payment-related data: payment provider (e.g., LiqPay), provider payment ID, amount, currency, payment status, and raw response data from the payment provider for transaction verification.

We process data only for the following purposes:

• Order processing and fulfillment (sale, manufacturing, packaging, delivery) • Communication with you regarding order/tailoring/returns • Payment processing and refunds • Compliance with tax and accounting requirements (storage of supporting documents)

We process data based on:

• Contract performance (when you place an order — we must deliver the goods) • Fulfillment of legal obligations (tax accounting and documentation) • Your consent (for example, if you voluntarily provide additional measurements/details or communicate via messenger)

We transfer only what is needed "for the order to happen":

6.1. Delivery services: • Nova Poshta (where branches are available) • Ukrposhta — for international shipments We transfer: full name, phone, city/country, address/branch — only for delivery.

6.2. Payment services: Card payment / Apple Pay / Google Pay through: LiqPay. If you place an order via our Telegram bot and choose to pay directly to IBAN, we receive only the payment confirmation you provide (screenshot/receipt).

6.3. Technical contractors: Hosting, database, email service, and Telegram bot may receive technical access to data as "processors". All services are hosted in the EU (Stockholm, Sweden). • Web application hosting: AWS Amplify • Database: AWS RDS (PostgreSQL) • Email sending: Resend • Telegram bot: AWS Lambda + AWS DynamoDB (stores order data for custom tailoring communication)

We do not sell your data and do not transfer it for advertising.

Since we deliver worldwide (except Russia and Belarus), your data may be transferred abroad:

• To delivery services (for international delivery) • To technical services located in the EU (Sweden) — AWS Amplify, AWS RDS, AWS Lambda, AWS DynamoDB, and Resend

We store data only as long as needed for:

• Order fulfillment • Processing inquiries/returns • Tax accounting

Documents and confirmations required for tax reporting are stored for at least 1095 days from the date of submission of the report for which they are used.

Technical data (order records, payment logs) is stored for up to 5 years.

We use organizational and technical security measures:

• Only authorized persons have access to data • Passwords/access are restricted • Data transmission occurs via secure connection (HTTPS) with SSL certificate provided by AWS

We may use local storage in your browser only to save items in the cart, so the cart doesn't "reset".

This is not advertising or tracking, just "cart memory" on your device. You can clear this in your browser settings.

If analytics/marketing cookies appear on the site — we will update this Policy.

You have rights provided by the Law of Ukraine "On Protection of Personal Data" and the EU General Data Protection Regulation (GDPR), including the right to know about processing, access, correction, erasure, data portability, and to request cessation of processing in cases determined by law.

To exercise your rights — write to us at sovanatalia01@gmail.com.

Important: we may not be able to delete some data immediately if it needs to be stored for tax accounting.