This Privacy Policy explains what personal data we collect when you use blackpack.ua and shop with us, why we need it, who we share it with and how you can control your data. We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, for visitors from the European Union, the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
The data controller is Alona Kysliak, individual entrepreneur (FOP), taxpayer ID 3232812648, Kremenchuk, Ukraine, selling products under the Blackpack brand (“Blackpack”, “we”).
When you place an order: first and last name, phone number, email, country, city and delivery address or pick-up point, order notes, order contents and total.
Your account: email, name, password (stored only in encrypted form), order history.
Reviews: name, email (not published), review text, rating and any photos you add.
Back-in-stock notifications: the email you leave to be told when a product is available again.
Your messages: information you send us by phone, email, Viber, Telegram or Instagram.
Technical data: IP address, device and browser type, language, pages viewed, referral source and cookies (see section 6).
We never receive or store your card details: payments are made on the secure page of the WayForPay payment service.
3. Why we process your data
To fulfil your order — accept and confirm it, take payment, hand the parcel to the carrier, send you the tracking number, handle exchanges, returns and warranty claims. Legal basis: performance of a contract with you.
Accounting — keep sales records as required by Ukrainian law. Legal basis: legal obligation.
Running and securing the website — cart, account login, language choice, fraud and attack prevention. Legal basis: our legitimate interest.
Analytics and advertising — understand how the site is used, improve it and show Blackpack ads. Legal basis: your consent (for visitors from the EU, UK and Switzerland) or our legitimate interest; you can opt out at any time.
Replying to you and publishing reviews. Legal basis: your consent.
4. Who we share your data with
We never sell your data. We share it only with those we need to fulfil your order or run the website, and only as much as necessary:
Nova Poshta — delivery within Ukraine and cash on delivery;
Ukrposhta — international delivery (in your country the parcel is delivered by your national postal operator);
WayForPay — online payments, including instalments;
Google (Google Analytics, Google Ads, Google Tag Manager) — analytics and advertising, respecting your cookie choice;
hosting and website security providers — the servers the site runs on and the service that protects and speeds up the site;
public authorities — only where required by law.
Some of these services may process data outside Ukraine (including in the EU and the USA). In such cases we use services that protect data in line with their policies and applicable law.
5. How long we keep your data
order data — for as long as Ukrainian tax and accounting law requires;
your account — while you use it or until you ask us to delete it;
reviews — while they are published or until you ask us to remove them;
back-in-stock email — until the notification is sent or you opt out;
analytics data — for the periods set in the respective services.
6. Cookies
Cookies are small files the website stores in your browser. We use:
necessary cookies — cart, account login, security and remembering your cookie choice; the site does not work without them;
functional cookies — language and currency choice;
analytics and advertising cookies — Google Analytics and Google Ads.
On your first visit a banner lets you accept or reject analytics and advertising cookies. For visitors from the EU, UK and Switzerland they stay off until you accept. You can change your choice at any time via the “Cookie settings” link at the bottom of the site, or delete and block cookies in your browser settings.
7. Your rights
Under Article 8 of the Law of Ukraine “On Personal Data Protection” (and, for EU visitors, the GDPR) you have the right to:
know what data we process, why and who we share it with;
get a copy of your data;
have inaccurate data corrected;
have your data deleted or its processing restricted where we have no legal grounds to keep it;
object to processing and withdraw your consent at any time;
lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court (EU visitors — also with the data protection authority in their country).
To exercise these rights, email [email protected]. We will reply within 30 days.
8. Data security
The website uses a secure connection (HTTPS), passwords are stored only in encrypted form, and order data is accessible only to staff who need it for their work.
9. Children
The website is not intended for people under 16. We do not knowingly collect their data; if you believe a child has given us their data, let us know and we will delete it.
10. Changes to this Policy
We may update this Policy. The current version is always available on this page, with the date of the last update at the top.
We use cookies to run the site, for analytics and advertising. You can accept or reject analytics and advertising cookies.
