Privacy policy
Last updated: 18 August 2026
This Policy explains what personal data we collect on https://skeiron.com.ua, why we process it, who we share it with, how long we keep it and what rights you have. The controllers are LLC "SKEIRON" (the website) and Individual Entrepreneur Yu. Prepodobnyi (the shop) — the split is described in section 1.
1. Who processes your data
There are two data controllers, each within its own scope:
- LIMITED LIABILITY COMPANY "SKEIRON", registration code (EDRPOU) 40358486, address: 114 Yevhena Konovaltsia St., Lviv, 79057, Ukraine — for the operation of the website: accounts, publications, the newsletter, contact-form enquiries and analytics;
- Individual Entrepreneur Yurii Prepodobnyi, taxpayer number (RNOKPP) 3440812536, address: 40 Khutorivka St., apt. 103, Lviv, 79070, Ukraine — for shop orders: checkout, payment, delivery and returns.
Both operate under the shared Skeiron brand and apply this Policy to the same extent.
For any data protection matters write to info@skeiron.com.ua — your request will be passed to the responsible person.
We process data under the Law of Ukraine “On Personal Data Protection” and, for users in the European Economic Area, under the General Data Protection Regulation (GDPR).
2. What data we collect
| Category | Examples | Source |
|---|---|---|
| Order data | first and last name, phone number, city, branch/parcel locker or delivery address, order contents and total | provided by you at checkout |
| Account data | name, email, hashed password, profile settings, saved objects | provided by you at registration |
| Social sign-in data | account identifier, name, email, avatar | the sign-in provider, if you use one |
| Payment data | payment status, invoice identifier, masked card number, authorisation code | the plata by mono payment service; full card details are never passed to us |
| Enquiry data | name, email, message text | the contact form |
| Subscription data | email, subscription confirmation status | the newsletter form |
| Technical data | IP address, browser and device type, pages viewed, cookies | collected automatically |
We do not collect special categories of data (health, religious or political beliefs, etc.) and do not use automated decision-making producing legal effects for you.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing, payment and delivery of an order | performance of a contract (the offer) | 3 years after the order is fulfilled (limitation period) |
| Accounting and tax records | compliance with a legal obligation | as required by law, at least 3 years |
| Maintaining your account | performance of a contract / your consent | while the account exists + 30 days after deletion |
| Replying to contact-form enquiries | legitimate interest — communicating with users | 12 months from the enquiry |
| Newsletter | your consent (confirmed by email) | until consent is withdrawn (unsubscribe) |
| Website analytics | your consent (cookie banner) | up to 14 months |
| Anti-spam and abuse protection (Cloudflare Turnstile) | legitimate interest — service security | up to 6 months |
Where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of processing carried out beforehand.
4. Who we share data with
We do not sell your data. We share it only with partners without whom the service cannot be provided, and only to the extent necessary:
| Recipient | Purpose | Data shared |
|---|---|---|
| Nova Poshta JSC | delivering the order and issuing the waybill | first and last name, phone, city, branch or address |
| JSC UNIVERSAL BANK (plata by mono) | accepting online payments and issuing refunds | order number and amount, basket contents |
| Google Analytics (Google Ireland Ltd.) | website traffic statistics | pseudonymised technical data, cookie identifier |
| Cloudflare | protecting forms from automated abuse | IP address, technical request data |
| Cloudinary | image storage and delivery | technical request data |
| Email (SMTP) provider | sending order and subscription emails | email address, message content |
| Hosting provider | hosting the website and database | all data stored on the server |
We may also disclose data to public authorities where required by law.
5. Cookies and analytics
Analytics and other optional cookies are set only after you consent via the banner shown on your first visit. Strictly necessary cookies (login session, cart, your cookie choice) always operate, as the site cannot function without them.
You can change your choice at any time using the “Cookie settings” button at the bottom of every page. See the Cookie Policy for details.
6. International transfers
Some of our service providers (Google, Cloudflare, Cloudinary) are located outside Ukraine, including in the EU and the USA. Transfers rely on Standard Contractual Clauses (SCC) or other legally recognised safeguards ensuring an adequate level of protection.
7. Data security
We apply organisational and technical safeguards: encrypted traffic (HTTPS), passwords stored as cryptographic hashes, restricted staff access to the database, backups and separated environments.
No system is completely secure. In the event of a breach posing a high risk to your rights, we will notify you and the competent authorities within the deadlines required by law.
8. Your rights
You have the right to:
- know what data we process about you and receive a copy of it;
- have inaccurate data corrected or incomplete data completed;
- have your data erased (“right to be forgotten”) where there is no ground for further processing;
- request restriction of processing or object to it;
- receive your data in a machine-readable format (portability) — for EEA users;
- withdraw consent where processing is based on consent;
- lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or, for EEA users, with your local supervisory authority.
To exercise your rights write to info@skeiron.com.ua. We reply within 30 calendar days. You can also delete your account yourself in the profile section.
9. Children’s data
The Website is not intended for persons under 16 and we do not knowingly collect their data. If you believe a child has provided us with data, write to info@skeiron.com.ua and we will delete it.
10. Changes to this Policy
We may update this Policy. The current version is always available on this page with its revision date. We will announce material changes on the Website or by email.
Version of 18 August 2026.