At HIMIK SHOP, we respect your privacy and take the protection of personal data seriously.
This Policy explains what information we collect and how we use, store and protect it when you use himik.shop.
Personal data is processed in accordance with Ukrainian law, including the Law of Ukraine “On Personal Data Protection”.
1. What data we collect
We collect only the data necessary to operate the shop, serve customers and provide the website’s services.
Account
During registration or profile setup, the following may be processed:
- First name, last name, email address and phone number.
- Date of birth, gender, country and selected language.
- Profile photo, if you have added one.
- Preferred contact method and Telegram username, if provided.
- Login credentials. Passwords are stored securely and cannot be viewed by the shop’s administration.
Orders and delivery
To process orders, we use contact details, Nova Poshta delivery information, the selected payment method, comments, order contents and order history.
Correspondence with a manager relating to order handling is also stored.
Questionnaires and personal preferences
If you wish, we may collect information about your experience, goals and favourite brands to make product selection more convenient. Completing this questionnaire is optional.
Reviews and enquiries
If you leave a review, we process its text, rating and any attached photos. Your name and profile photo may be displayed alongside the review.
When you contact us through the contact form, we receive the data you provide in your message.
Technical information
The website may process your IP address, technical browser data and cookies necessary for authentication, security and the proper functioning of services.
Language and theme settings, the shopping cart, a guest’s favourite products and recently viewed products are stored directly in your browser.
2. How data is used
We use personal data to:
- Place, confirm and deliver orders.
- Communicate with customers about products and orders.
- Send service messages, login codes and order status information.
- Manage accounts, addresses, favourite products and purchase history.
- Suggest products for you (the “For you” and “You may like” sections) based on your purchases, favourite and viewed products and questionnaire answers. This happens on the website itself; the data is not passed to advertising services.
- Handle enquiries, reviews and messages.
- Protect the website against spam, fraud and unauthorised access.
- Maintain the stable and secure operation of the shop.
Depending on the situation, the grounds for processing data are order fulfilment, user consent, compliance with legal obligations and other grounds provided for under Ukrainian law.
We do not sell personal data or share customer databases with advertising companies.
3. Who data may be shared with
To operate the shop, we use third-party technical services and partners strictly within the scope of the necessary functions.
- Nova Poshta — recipient and delivery details.
- Supabase and Vercel — data storage, processing and website operation. Vercel also keeps anonymous visit statistics (which pages are opened and where visitors come from) — without cookies and without data that could identify you.
- Resend — sending emails.
- Cloudflare Turnstile — protection against automated requests.
- Google — authentication, if you choose to sign in with Google.
- OpenAI — translation of reviews and of messages with a manager when you and the shop write in different languages.
- Telegram — service notifications to shop staff about new orders, messages and enquiries, and conversations with a manager if you chose Telegram as your contact channel.
- Browser push services — delivering service notifications to shop staff devices.
Some of these services may process information on servers outside Ukraine in accordance with applicable legal requirements.
We do not give third parties access to the customer database for their own advertising or marketing purposes.
Information may be disclosed to public authorities in cases provided for by law.
4. How long data is retained
We retain information only for the period necessary for the relevant processing purpose or to comply with legal requirements.
- Account: until it is deleted by the user.
- Account deletion: after a request is submitted, there is a 7-day period during which it can be cancelled. Once this period ends, the profile is deleted, except for information that must be retained on lawful grounds.
- Incomplete registrations: accounts with incomplete registration and no orders may be automatically deleted after 30 days, with 3 days’ advance notice.
- Order history: necessary information may be retained after account deletion for record-keeping, handling enquiries and complying with legal requirements.
- Correspondence: retained for as long as necessary to handle the order and resolve related issues.
5. Information security
To protect data, we use technical security measures, secure authentication mechanisms and tools to restrict unauthorised access.
However, no internet service can guarantee absolute protection against all possible threats.
6. Your rights
Under Ukrainian law, you have the right to:
- Receive information about the processing of your personal data.
- View and update information in your account.
- Request the correction of inaccurate data.
- Request that processing be stopped or data be deleted in cases provided for by law.
- Withdraw consent to processing where consent is its legal basis.
- Object to data processing in cases provided for by law.
- Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with a court.
For enquiries concerning personal data, use the contact form or the contact details provided on the website.
7. Age restrictions
Account creation and order placement are available only to persons aged 18 or older.
We do not knowingly collect personal data from minors.
8. Changes to this Policy
We may update this Policy periodically due to changes in the website’s operation, technology or legislation.
The current version is always available on this page, with the date of the last update indicated.
9. Contact
For any questions regarding privacy and personal data processing, you can contact the HIMIK SHOP administration through the “Contacts” section or the feedback form on the website.
HIMIK SHOP — himik.shop