Privacy Policy

Draft: the text is being reviewed by a lawyer.

1. Who we are and what this policy covers

Service feedback processes customer feedback on behalf of client stores (data processor). For its own data — the website and admin users — the service is the data controller.

2. What data we process

Respondents: ratings, answers, comments, order number, language; name, phone, e-mail — provided by the store. Technical data: an IP address hash with a rotating salt; web server logs — 14 days. Admin users: name, e-mail, sign-in and action log. Website visitors — web server logs only.

3. Purpose and legal basis

Helping the store improve its service and contact the customer about a specific order if something went wrong.

4. Who has access

Store staff according to their roles; service support — without contact details, contact details only with the store's temporary permission and with every view logged; the hosting provider (EU); Telegram (the store's feedback feed). We do not sell or publish data and have no ads or trackers.

5. Transfers abroad

Hosting is in the EU; the store's feedback feed is in Telegram.

6. Retention

Contact details — up to 60 days without feedback, 12 months with feedback; feedback text — 3 years; ratings — indefinitely in anonymised form. Contact details in Telegram feed messages are replaced with “contacts deleted” on the same schedule. Backups — up to 35 days, the same in every copy.

7. How we protect data

Encrypted contact details, two-factor sign-in to the admin panel, access logs, encrypted backups.

8. Your rights

Under the Law of Ukraine “On Personal Data Protection” and the GDPR where applicable. We reply within 30 calendar days; requests about feedback are passed on to the store that controls it.

9. Cookies

Only the admin panel session cookie; the form and the website set no cookies (the form is protected by a signed token in the page itself, not a cookie). No analytics or trackers.

10. The service's Telegram bot

The bot posts feedback to the store's group and keeps the identifiers of its messages so it can edit and delete them; it does not receive the group's conversation.

11. Changes to this policy

A new version is published on this page with its date.

12. Contacts

The contact address is on the Contacts page.