📄 PRIVACY POLICY
White Night
1. General Provisions
1.1. This Policy defines the procedure for processing and protecting personal data collected and processed by the online store White Night (hereinafter — the Seller).
1.2. Personal data processing is carried out in accordance with:
- the Law of Ukraine “On Personal Data Protection”
- other applicable legal acts
1.3. By using the website, placing an order, or submitting personal data, the user consents to its processing in accordance with this Policy.
2. Types of Personal Data Collected
The Seller may process the following personal data:
- full name
- phone number
- email address
- delivery address
- order details
- IP address and device data
- other voluntarily provided information
3. Sources of Data Collection
Personal data is collected:
- when placing an order
- when filling out forms on the website
- when contacting support
- via cookies and analytics tools
4. Purpose of Data Processing
Personal data is processed for:
- order processing and delivery
- customer communication
- fulfillment of contractual obligations
- accounting and tax compliance
- website improvement
- marketing communications (with user consent)
5. Categories of Databases
The Seller processes personal data in the following categories:
- customer database
- contractor database
- user requests database
6. Legal Basis for Processing
Processing is carried out based on:
- user consent
- contract performance
- legal requirements
7. Data Sharing with Third Parties
Data may be shared with:
- delivery services
- payment systems
- accounting providers
- government authorities
Also with:
- analytics services (Google Analytics)
- advertising platforms (Meta, Google Ads)
8. International Data Transfer
Personal data may be transferred outside Ukraine when using international services.
9. Cookies
Cookies are used for:
- website functionality
- analytics
- ad personalization
Users can manage cookies via browser settings.
10. Data Protection
The Seller implements appropriate technical and organizational measures to protect personal data.
11. Responsible Person
A designated person ensures compliance and control over data processing.
12. User Rights
Users have the right to:
- access their data
- request correction or deletion
- withdraw consent
- file complaints or go to court
13. Requests Handling
Requests are processed within 30 calendar days.
14. Data Retention
Data is stored no longer than necessary or required by law.
15. Changes to Policy
The current version is always available on the website.