Last updated: 29 August 2026
1. General provisions
The website https://sendy.com.ua/ and the SendyShop platform for creating online stores, including stores hosted on sendy.com.ua and on clients' own domains (together, the “Platform”), are operated by sole proprietor Yelyzaveta Volodymyrivna Sendeha, tax ID 3292213947, registered and operating under the laws of Ukraine (the “Company”, “we”).
This Privacy and Personal Data Protection Policy (the “Policy”) sets out how the Company processes personal data: what data we collect, for what purpose, how long we keep it, who we may share it with, how we protect it, and what rights data subjects have and how to exercise them.
The owner and controller of Platform users' personal data is sole proprietor Yelyzaveta Volodymyrivna Sendeha.
Personal data is processed in accordance with the Law of Ukraine “On Personal Data Protection” No. 2297-VI.
By using the Platform or submitting a request on the website, you confirm that you have read this Policy.
2. What data we collect and why
2.1. If you submitted an early access request
Name and email address you provide in the form: to contact you and notify you when Platform access opens; answer your questions; send information about the launch and early access terms.
Answers about your store, such as approximate monthly order volume: to understand who we can help and how; plan Platform development for future users; build anonymised demand statistics.
Technical visit data: IP address, device and browser type, referral source, pages viewed. Some of this data is collected through cookies: to understand how users interact with the site and improve it; measure channel effectiveness.
2.2. If you are a seller using the Platform
Information about you and your business: name, store name, email, phone number, billing details — to provide Platform access, verify identity, communicate about Platform operation, billing and technical matters, and comply with legal requirements.
Data you upload in the admin panel: products, descriptions, images, store settings — to run your store. This data belongs to you; we only store and display it.
Information about how you use the admin panel: device, browser, IP address, interface actions — to keep the Platform stable, save interface settings, and improve usability.
Support correspondence — to respond to your request and keep history so we do not ask the same questions twice.
2.3. If you are a buyer in a store built on the Platform
When you place an order in a store built on the Platform, the seller of that store is the owner of your personal data. The Company acts as processor: we store and process data on the seller's instructions so the store can operate.
Name, email, phone number, delivery address, order contents — so the seller can accept and process your order, arrange delivery, and contact you.
Payment status information — to confirm payment to the seller. We do not receive or store your card details; payments are processed by the payment service.
Technical visit data to the store: IP address, device, browser, pages viewed — to run the store and provide the seller with anonymised visit statistics.
Buyers should contact the seller of the store where the order was placed first with questions about their data. We can help forward your request if you write to us.
2.4. If you are simply visiting the website
Technical data: IP address, device and browser type, referral source, pages viewed, time on site. Some of this data is collected through cookies — to understand which content is useful and improve the site; see where visitors come from.
Selected interface language — to show the site in your chosen language on future visits.
3. Data we do not collect
The Company does not collect or process data subject to special legal requirements: racial or ethnic origin, political, religious or worldview beliefs, membership in political parties or trade unions, criminal convictions, as well as health, sex life, biometric or genetic data. This is provided for in Article 7 of the Law of Ukraine “On Personal Data Protection”.
We also do not receive or store payment card details. All payment operations are processed by the payment service on its side.
4. Legal basis for processing
The legal basis for processing your personal data is your consent, given by checking the relevant box in a site form or accepting the Platform terms of use.
In some cases the basis may be performance of a contract between you and the Company or compliance with legal obligations imposed on the Company.
You may withdraw consent at any time. This does not make processing unlawful before withdrawal.
5. Where data is stored and processed
Personal data is processed and stored on AWS US East 2 (Ohio) servers.
Because some of our contractors are located outside Ukraine, your data may be transferred and processed abroad. We work only with providers that ensure an adequate level of personal data protection.
Cross-border transfers occur when using: Google Analytics and Google Tag Manager web analytics (Google, USA); AWS US East 2 (Ohio) hosting; email used for correspondence with you.
6. Retention period
Personal data is kept no longer than necessary for the purpose for which it was collected.
Early access request data is kept until you become a Platform user or until you withdraw consent.
Seller data is kept for the period of Platform use. After use ends it is deleted except data we must retain by law, such as accounting records.
Buyer data in stores is kept for the period set by the seller and deleted with the store data when the store stops operating.
To delete your data or withdraw consent, email sendyshopplatform@gmail.com or write to: 51404, Dnipropetrovsk region, Pavlohrad, Kooperatyvna St., 5, apt. 41.
7. Sharing data with third parties
We do not sell personal data or share it with third parties except in these cases:
sharing with contractors that operate the Platform (hosting, analytics, payment and mail services) to the extent needed for the relevant service;
sharing with the seller in whose store you placed an order;
sharing when required by law or upon a lawful request from authorised public authorities;
sharing at your own request.
The site may link to other resources. This Policy does not apply to them; please read each site's policy before sharing your data there.
8. Cookies
What they are: cookies are small text files stored on your device when you visit a site. They let the site remember your actions and settings between visits.
Technical cookies required for the site to work. Without them the site may not function correctly. They remember your language choice, cookie preferences, and help secure the connection and session. They are not used for advertising and are not shared with third parties.
Analytics cookies count visitors, show which pages are viewed, how long people stay, and where they come from. We use this data in anonymised form to improve the site.
We do not use advertising cookies or third-party tracking for ads.
Third-party services: Google Analytics — how users interact with the site (policy: https://policies.google.com/privacy); Google Tag Manager — analytics tag management (policy: https://policies.google.com/privacy). No other third-party tracking tools are used on the site.
You can accept or reject cookies in your browser settings. To opt out of Google Analytics specifically, use the official extension: https://tools.google.com/dlpage/gaoptout
9. Protection of personal data
The Company applies generally accepted technical and organisational measures to protect information from loss, misuse, alteration or destruction. Connections to the site and Platform are protected with HTTPS.
We cannot guarantee absolute protection against threats outside our control.
Only authorised staff bound by confidentiality obligations have access to personal data.
10. Children's privacy
The Platform is not intended for minors. We do not knowingly collect personal data from minors. If you learn that a child provided us data, email sendyshopplatform@gmail.com and we will delete it.
11. Confidentiality of your activity
Information about user activity on the site and Platform, as well as correspondence, is protected under applicable law. The Company does not violate correspondence secrecy or disclose activity data except where required by law.
12. Your rights
Under the Law of Ukraine “On Personal Data Protection” you have the right to: know the sources of collection, location of your personal data, purpose of processing, and location of the owner or controller;
receive information about conditions for access to personal data, including third parties to whom it is transferred;
access your personal data;
receive, within thirty calendar days of a request, a response on whether your data is processed and obtain its content;
submit a reasoned objection to processing of your personal data;
submit a reasoned request to change or delete your personal data if it is processed unlawfully or is inaccurate;
protection of your personal data from unlawful processing and accidental loss, destruction or damage;
complain about processing to the Ukrainian Parliament Commissioner for Human Rights or to court;
use legal remedies if personal data law is violated;
add reservations limiting processing when giving consent;
withdraw consent to processing;
know the mechanism of automated processing;
protection against automated decisions with legal effect.
Access to your own data is provided free of charge.
13. Terms of access to personal data
Third-party access to personal data is governed by your consent or legal requirements.
Delay of access by the data subject to their own personal data is not permitted.
Delay of third-party access is permitted if data cannot be provided within thirty calendar days of a request. The total review period may not exceed forty-five calendar days.
A decision to delay or deny access may be appealed to the Ukrainian Parliament Commissioner for Human Rights or to court.
14. Changes to this Policy
We may update this Policy, for example when the data we process or services we use change. The current version is always available at this address; the effective date is shown at the top.
We will notify Platform users by email about material changes.
15. How to contact us
To access, change, block or delete your personal data, withdraw consent, or ask any question about this Policy, contact us:
Email: sendyshopplatform@gmail.com
Postal address: 51404, Dnipropetrovsk region, Pavlohrad, Kooperatyvna St., 5, apt. 41
Personal data owner: sole proprietor Yelyzaveta Volodymyrivna Sendeha, tax ID 3292213947
We respond within the period required by law and try to do so sooner.