Privacy
What we collect, who else sees it, and how to say no to analytics.
Who is responsible
Andrii Buniak, sole proprietor (ФОП) registered in Ukraine, vul. Rohatyntsiv 24, Lviv, Ukraine, is the controller of your personal data. Write to drovianni.b@gmail.com about anything on this page.
What we collect and why
- Order data — name, address, email, order contents. To perform the contract with you and to meet accounting obligations.
- Payment data — handled by our payment providers. We never see or store your card number.
- Commission applications — what you write in the form. To decide whether we take the commission and to reply to you.
- Newsletter — your email address, on your consent, which you can withdraw at any time by the unsubscribe link in every message.
- Site usage — which pages you open, which pieces you look at, what reaches the cart and what is bought, together with the technical data your browser sends: approximate location from your IP address, device and browser. We use it to understand how the shop is used and what to make next. This one runs on your consent, and refusing it changes nothing about your order.
Who else sees it
The shop runs on our own server in Germany. Brevo sends the emails you receive from us and processes data on our instructions. Carriers receive the delivery address. Payment providers receive what they need to take payment.
Google receives site-usage data, through Google Analytics 4 and through the Google & YouTube app that connects this shop to Google. Google acts under its own terms, not only ours — read Google’s privacy policy and how Google uses data from sites that use its services.
We do not sell your data. Nobody gets your email address or your postal address for their own marketing.
Transfers outside the EU
We operate from Ukraine, and our processors operate internationally. Transfers rely on the European Commission’s adequacy decision for Ukraine and on standard contractual clauses where a processor sits elsewhere. Google Analytics data may be processed in the United States under Google’s own transfer safeguards.
How long we keep it
Order records for as long as tax and accounting law requires. Newsletter data until you unsubscribe. Commission applications for two years, then deleted. Analytics data is kept by Google for fourteen months from your last visit.
Your rights
You may ask for access to your data, correction, erasure, restriction, portability, and you may object to processing. You may also complain to the supervisory authority in your EU country. Write to drovianni.b@gmail.com and we answer within one month.
Cookies
Two kinds, and they are not the same thing.
Necessary. Your cart, your session, the storefront password while the shop is closed. Without these the shop does not work, so they are always set. No consent is asked because none can be given to a shop that would otherwise be broken.
Analytics. Google Analytics 4 sets cookies to tell one visit from another and to see which pages lead to a purchase. These are set only if you agree, through the banner you see on your first visit. Say no and the shop works exactly the same; we simply see less.
You can change your mind at any time: clear this site’s cookies in your browser and the banner asks again. You can also block analytics for every site with Google’s own opt-out add-on.
We run no advertising or profiling trackers, and there are no social network pixels on this shop.