Privacy Policy — Blackpack

Last updated: 12 November 2026

This Privacy Policy explains what personal data we collect when you use blackpack.ua and shop with us, why we need it, who we share it with and how you can control your data. We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, for visitors from the European Union, the EU General Data Protection Regulation (GDPR).

1. Who processes your data

The data controller is Alona Kysliak, individual entrepreneur (FOP), taxpayer ID 3232812648, Kremenchuk, Ukraine, selling products under the Blackpack brand (“Blackpack”, “we”).

For any questions about your personal data, email [email protected] or call +380 67 941 35 95.

2. What data we collect

When you place an order: first and last name, phone number, email, country, city and delivery address or pick-up point, order notes, order contents and total.
Your account: email, name, password (stored only in encrypted form), order history.
Reviews: name, email (not published), review text, rating and any photos you add.
Back-in-stock notifications: the email you leave to be told when a product is available again.
Newsletter: email, name, language, your newsletter preferences (when, where and how you subscribed or unsubscribed, IP address at that moment), as well as whether you opened our emails and which links you clicked.
Your messages: information you send us by phone, email, Viber, Telegram or Instagram.
Technical data: IP address, device and browser type, language, pages viewed, referral source, how you interact with pages (clicks, scrolling, cursor movement) and cookies (see section 6).

We never receive or store your card details: payments are made on the secure page of the WayForPay payment service.

3. Why we process your data

To fulfil your order — accept and confirm it, take payment, hand the parcel to the carrier, send you the tracking number, handle exchanges, returns and warranty claims. Legal basis — conclusion and performance of a contract with you.
Accounting and reporting — keep sales records as required by Ukrainian law. Legal basis — legal obligation.
Running and securing the website — cart, account login, language choice, fraud and attack prevention. Legal basis — our legitimate interest.
Analytics and advertising — understand how the website is used, improve it, and show Blackpack ads. Legal basis — your consent (for visitors from the EU, UK and Switzerland) or our legitimate interest; you can opt out at any time.
Replying to enquiries and reviews — get in touch with you, publish your review. Legal basis — your consent.
Newsletter and offers — emails about new products, launches, discounts and Blackpack promotions. Legal basis: your consent (checkbox during registration, in your account or in the subscription form on the site); for customers who have not opted out — our legitimate interest to inform you about similar products. You can opt out at any time (see section 7).

4. Who we share your data with

We do not sell your data. We share it only with those without whom we cannot fulfil your order or run the website, and only to the extent necessary:

Nova Poshta LLC — delivery within Ukraine and cash-on-delivery;
Ukrposhta JSC — international delivery (in the recipient’s country, the parcel is delivered by the national postal operator);
WayForPay — accepting online payments, including installment payments;
Google (Google Analytics, Google Ads, Google Tag Manager) — analytics and advertising, in line with your cookie choices;
Plerdy — website usability analysis: click and scroll heatmaps, session recordings; based on your cookie choices;
hosting and website security providers — servers where the site runs, and the service for website protection and acceleration;
Resend — sending newsletter emails;
government authorities — only in cases expressly provided for by law.

Some of these services may process data outside Ukraine (including in the EU and the US). In such cases, we use services that ensure data protection in accordance with their own policies and legal requirements.

5. How long we keep your data

order data — for as long as required by Ukrainian tax and accounting law;
account — for as long as you use it or until you ask us to delete it;
reviews — for as long as they are published on the website or until you ask us to delete them;
email for back-in-stock notifications — until the notification is sent or you opt out;
newsletter data — until you unsubscribe; after unsubscribing, we keep only your email, the unsubscribe mark and consent history to ensure we no longer send you emails and can prove we acted legally if necessary;
analytics data — for the periods set by the settings of the respective services.

6. Cookies

Cookies are small files that the website stores in your browser. We use:

necessary — cart, account login, security, remembering your cookie choices; the website doesn’t work without them;
functional — language and currency selection;
analytical and advertising — Google Analytics, Google Ads and Plerdy.

On your first visit, the site shows a banner where you can accept or decline analytical and advertising cookies. For visitors from the EU, UK and Switzerland, these are disabled until you consent. You can change your choice at any time via the “Cookie Settings” link at the bottom of the site. You can also delete or block cookies in your browser settings.

7. Newsletters

We send emails about new arrivals, sales launches, discounts and Blackpack promotions from [email protected]. You can reply to the email as you would to any regular email — the reply will come to us.

How to join the newsletter:

leave the checkbox “I want to receive Blackpack news, discounts and announcements by email” ticked during registration (you can untick it) or enable it in your account: My Account → Personal Data;
leave your email in a subscription form on the website (e.g., “Notify me” about the launch of a new model);
if you’ve bought from us before, we may send you emails about similar products until you opt out of them.

How to unsubscribe:

the “Unsubscribe” link at the bottom of every email — it opens a page on blackpack.ua where you just need to confirm you want to unsubscribe;
the “Unsubscribe” button in your email app (Gmail, Apple Mail and others), if it shows one;
untick the checkbox in your account: My Account → Personal Data;
write to us at [email protected].

Unsubscribing takes effect immediately. Emails about your orders (confirmation, tracking number, status changes) will keep coming — these are not newsletters.

What we see about emails. Newsletter emails contain an invisible image and tagged links so we can tell whether an email was opened and which links were clicked — this helps us make emails more useful and bother less those who aren’t interested. Links to our website include UTM tags for Google Analytics. We also keep a record of your consents: when, where and how you subscribed or unsubscribed.

8. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection” (and, for visitors from the EU, the GDPR), you have the right to:

know what data of yours we process, why and who we share it with;
get a copy of your data;
request correction of inaccurate data;
request deletion of your data or restriction of its processing, if there is no legal basis to keep it;
object to processing and withdraw your consent at any time;
file a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court (for visitors from the EU, also with the supervisory authority in your country).

To exercise these rights, email [email protected]. We will reply within 30 days.

9. Data protection

The site operates via a secure connection (HTTPS), passwords are stored only in encrypted form, and access to order data is restricted to employees who need it for their work.

10. Children

The site is not intended for persons under 16 years of age. We do not knowingly collect their data; if you believe a child has provided us with their data, please write to us and we will delete it.

11. Data from Google services (our internal SEO tool)

Our website admin panel has an internal tool, Blackpack SEO Tools, used only by the Blackpack team. It connects to our own Google accounts through official Google APIs (OAuth) and receives:

Google Search Console (read-only): search queries, clicks, impressions and average positions of blackpack.ua in Google search;
Google Analytics (read-only): aggregated statistics on visits, landing pages and sales for blackpack.ua;
Google Ads Keyword Planner: search query frequency and keyword ideas;
the email address of the Google account used to connect — so we know which account is connected.

We use this data only to improve the website’s texts and its visibility in search: category and product descriptions, headings, blog articles. This is aggregated statistics about our own website and contains no personal data of customers. Access keys are stored on our server outside the public part of the website and are accessible only to administrators. We do not sell this data, do not share it with third parties, and do not use it for advertising or for training artificial intelligence models. You can revoke access at any time in your Google account settings (myaccount.google.com/permissions) or in the website admin panel — after that, the stored keys are deleted.

The use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

12. Changes to this Policy

We may update this Policy. The current version is always available on this page, with the update date indicated at the top.