Privacy policy
Revision of July 22, 2026
This translation is for reference. The legally binding version is the Ukrainian one.
The personal data controller is sole proprietor Savenko Mykola Tarasovych (Tax ID 3578304751, hereinafter "we"). Processing is carried out in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI.
1. What data we collect
- When you place an order: first and last name, phone, email, delivery address/branch, personalization text (if ordered).
- Automatically: technical visit data (IP address, device and browser type, pages viewed) — via cookies and analytics services.
- We do not collect bank card data: payment happens on the secure side of the acquiring bank (monobank); we only receive the payment status.
2. Why (purpose and legal basis)
| Data | Purpose | Basis |
|---|---|---|
| Contacts, address | order fulfilment, delivery | contract (offer) |
| Phone, email | contact about the order, warranty matters | contract |
| Email (separate consent) | news about new products | consent, revocable |
| Technical data | site operation and improvement, statistics | legitimate interest |
We do not use the data for purposes incompatible with those listed and do not sell it to third parties.
3. Who the data is shared with
Only to the extent needed to fulfil the order:
- carriers (Nova Poshta, Ukrposhta, Meest) — name, phone, delivery address;
- the acquiring bank (monobank / JSC "Universal Bank") — payment data;
- the order management CRM (KeyCRM) — order data;
- Google services (Google Analytics, Google Ads) — anonymized technical visit data, and for ad performance measurement (Enhanced Conversions) — your phone and email in hashed (irreversible) form (see section 4);
- state authorities — solely upon a lawful request.
Order data is processed on servers within the EU/Ukraine. Google data may be processed outside them (Google LLC, USA) — the company is certified under the EU–US Data Privacy Framework.
4. Cookies, analytics and advertising
The site uses cookies for the cart, language preferences and anonymized visit statistics. You can restrict cookies in your browser settings — basic site features (cart, checkout) may then work incorrectly.
For statistics and ad performance measurement we use Google Analytics 4 and Google Ads. To match purchases with ad campaigns more accurately (Enhanced Conversions), when you place an order your phone and email are sent to Google in hashed form (SHA-256) — that is, irreversibly encrypted. Google does not receive this data in plain form and uses it solely for conversion matching, not for other purposes.
You can opt out:
- by restricting cookies in your browser settings;
- in Google ad settings — google.com/settings/ads;
- by installing the Google Analytics opt-out browser add-on — tools.google.com/dlpage/gaoptout.
5. Retention
- Order data — for as long as needed to fulfil the contract, warranty obligations and tax law requirements.
- Newsletter data — until consent is withdrawn.
6. Your rights
Under Art. 8 of the Law of Ukraine "On Personal Data Protection" you have the right to:
- know what data of yours we process and receive a copy;
- request correction of inaccurate data;
- request deletion of data (if there are no legal grounds for retention);
- withdraw newsletter consent at any time (a link in every email or a request to hello@bosyak.com.ua);
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights.
Personal data requests: hello@bosyak.com.ua. We respond within 30 days.
7. Data security
Only people who need the data to fulfil orders have access to it. The connection to the site is protected with TLS (https). Administrative systems are protected with additional authentication.
8. Policy changes
A new revision is published on this page with its date. Substantial changes have no retroactive effect on already collected data without your consent.