Privacy policy

The present privacy policy (hereinafter the "Policy") sets out how personal data is collected, processed, stored and protected for persons who visit the online store scematique.com (hereinafter the "Website"), place orders on it, subscribe to the newsletter or contact the Seller (hereinafter the "Users", and each of them a "User").

The Policy complies with the Law of Ukraine "On Personal Data Protection" and, with respect to Users from the European Union, with Regulation (EU) 2016/679 (hereinafter the "GDPR").

By using the Website, the User confirms having read this Policy.

1. Data controller

1.1 The personal data controller is the individual entrepreneur (FOP) Olena Arseniivna Mikhailutsa, taxpayer ID (RNOKPP) 3417603945, with address at 10 Volodymyra Velykoho St., 79004, Lviv, Ukraine (hereinafter the "Seller"). The Seller's full details are set out in the Public Offer Agreement.

1.2 For any questions regarding the processing of personal data, the User may contact the Seller at info@scematique.com.

2. Personal data processed by the Seller

2.1 The Seller processes the following categories of personal data of Users (hereinafter the "Personal Data"):

(a) contact and order details: first and last name, phone, email address, delivery address or branch, items and order total, payment method and payment status;

(b) account details: email address and order history, where the User has created an account;

(c) request details: information provided through the contact form, the return form, by email or in Instagram messages;

(d) email address, where the User has subscribed to the newsletter or to back-in-stock alerts;

(e) technical data: IP address, device and browser type, pages viewed and actions on the Website.

2.2 The Seller obtains Personal Data:

(a) directly from the User, when they place an order, create an account, fill in forms on the Website, subscribe to the newsletter or write to the Seller;

(b) automatically, when the User visits the Website, through cookies and similar technologies in accordance with section 8;

(c) from payment providers and carriers, to the extent necessary to confirm payment and delivery of the order.

2.3 The User provides Personal Data voluntarily. Without the data needed to place and deliver an order, the Seller cannot perform the order.

2.4 The Seller does not receive or store full payment card details. Such details are processed exclusively by payment providers and the bank.

3. Purposes and legal bases

3.1 Personal Data is processed for the following purposes and on the following legal bases:

(a) placing, paying for, delivering and returning orders — for the performance of the contract with the User;

(b) handling requests and warranty service — for the performance of the contract and on the basis of the consent given by the User when submitting a form;

(c) accounting and tax records — for compliance with legal obligations;

(d) newsletter about new pieces and offers — exclusively with the User's consent;

(e) back-in-stock alerts — at the User's request;

(f) analytics and advertising — exclusively with the consent given by the User in the cookie banner;

(g) protection of the Website against fraud and spam — on the basis of the Seller's legitimate interest.

3.2 The Seller does not process Personal Data for purposes incompatible with those set out in paragraph 3.1.

3.3 The User may withdraw consent to the newsletter at any time using the "Unsubscribe" link in the email, and consent to cookies in accordance with paragraph 8.3. Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal.

4. Method of processing

4.1 Personal Data is processed electronically using the Shopify platform and the other services listed in section 5.

4.2 Only the Seller and persons who need access for the purposes set out in section 3 have access to Personal Data.

5. Disclosure of Personal Data

5.1 The Seller does not sell Personal Data. The Seller discloses it only to the extent necessary for the purposes set out in section 3, to the following recipients:

(a) Shopify (Canada, Ireland, USA) — the platform on which the Website runs: storage of order data, accounts, email notifications;

(b) payment providers — hutko for card payments and JSC Universal Bank (monobank) for "Покупка частинами" instalments;

(c) carriers — Nova Poshta LLC and JSC Ukrposhta: name, phone, delivery address;

(d) Cloudflare (USA) — a technical service that passes order data to monobank for instalment payments;

(e) Meta Platforms — pixel and Conversions API to measure advertising, exclusively where the User has accepted marketing cookies;

(f) hCaptcha (Intuition Machines, Inc., USA) — protection of Website forms against spam, provided through Shopify;

(g) Notify Me — back-in-stock notification service: the User's email address and product page views;

(h) public authorities — exclusively upon their lawful request.

5.2 The recipients listed in paragraph 5.1 process Personal Data under their own privacy policies and the terms of their contracts with the Seller.

6. Transfers outside Ukraine

6.1 Some of the recipients listed in section 5 are located outside Ukraine, including in Canada, Ireland and the USA.

6.2 The Seller discloses Personal Data only to recipients that ensure an adequate level of protection, including under contracts with standard data protection clauses.

7. Retention periods

7.1 The Seller retains Personal Data no longer than necessary for the purposes of processing, in particular:

(a) order data and receipts — 3 (three) years after the order, as required by tax law;

(b) account details — until the account is deleted by the User;

(c) requests and correspondence — 1 (one) year after the request is resolved;

(d) newsletter email address — until the User unsubscribes;

(e) cookies — for the periods stated in the cookie settings, from the length of the session up to 2 (two) years.

7.2 When the retention period ends, Personal Data is deleted or anonymised.

8. Cookies

8.1 Cookies are small text files that the Website stores in the User's browser. On the first visit, the Website displays a banner in which the User chooses which cookies to allow.

8.2 The Website uses the following categories of cookies:

(a) necessary — cart, checkout, security and remembering the User's cookie choice. Always active;

(b) analytics — Shopify visit statistics. Active exclusively with the User's consent;

(c) marketing — Meta pixel and Notify Me pixel. Active exclusively with the User's consent.

8.3 The User may change their choice at any time using the "Cookie settings" link at the bottom of the Website. The Website also honours the Global Privacy Control signal as an opt-out from marketing cookies.

8.4 The cookies used on the Website are described in detail in the Cookie policy. More about Shopify cookies: shopify.com/legal/cookies.

9. Rights of the User

9.1 Under Article 8 of the Law of Ukraine "On Personal Data Protection", the User has the right to:

(a) know which of their Personal Data is processed, for what purpose and to whom it is disclosed;

(b) access their Personal Data;

(c) request the correction of inaccurate Personal Data or its deletion;

(d) object to processing and withdraw consent;

(e) receive a copy of their Personal Data in a usable format;

(f) lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court.

9.2 Users from the European Union also have the rights provided by the GDPR, including the right to lodge a complaint with the data protection authority of their country.

9.3 To exercise these rights, the User sends a request to info@scematique.com. The Seller replies within 30 (thirty) calendar days and may ask the User to confirm that the request comes from them.

9.4 Deletion does not apply to data that the Seller is required by law to keep, including receipts.

10. Children

10.1 The Website is not intended for persons under 14 (fourteen) years of age. The Seller does not knowingly collect their Personal Data.

10.2 If a User believes that a child has provided Personal Data to the Seller, they may notify the Seller, and such data will be deleted.

11. Security

11.1 The Seller takes organisational and technical measures to protect Personal Data against loss, unlawful access and alteration, including a secure connection (HTTPS), limited access to Personal Data and services with certified security standards.

11.2 No method of transmission over the internet is completely secure. Users should never send payment card details by email or message.

12. Changes to the Policy

12.1 The Seller may amend this Policy. The new version is published on this page with its date.

12.2 The Seller notifies registered Users of significant changes by email.

13. Contact

13.1 For any questions regarding Personal Data, the User may contact the Seller at info@scematique.com. The Seller's other contact details are set out in the Public Offer Agreement.

Version of 16 October 2026. This is a translation; in case of discrepancies, the Ukrainian version prevails.