Privacy policy

Version of 29 September 2026.
Data controller: Sole proprietor (FOP) Mykola Hordiichuk (details and address are in the “Seller details” block below).
Contact for personal data: foresterraaa@gmail.com, +380 77 693 20 10.

This policy explains what data frostdivision.com.ua collects, why, who receives it and how long it is kept. It follows the Law of Ukraine “On Personal Data Protection”.

1. What we collect

• Orders: name, phone, e-mail (if given), Nova Poshta city and branch, order items and total, payment method, comment.
• Unfinished orders: if you type your name or phone into the order form but do not submit it, we keep these details and the cart contents so a manager can help you complete the purchase.
• Other forms: callback, wholesale request, dropshipping application, “notify me when in stock” — whatever you enter in them.
• Customer account: the sign-in e-mail and the history of orders placed with it.
• Partner account (dropshipping): the e-mail, phone and password from your application. The password is never stored in plain text — only its hash; our manager cannot see it.
• Technical data: IP address (to prevent abuse and rate-limit requests), device and browser type, pages viewed, traffic source (UTM tags).
• Support chat: the text of messages you write in the on-site chat.

We never receive or store card details: you enter them on the payment provider’s page.

2. Why and on what basis

• To fulfil your order: contact you, take payment, issue a fiscal receipt, ship the goods — basis: concluding and performing the sales contract.
• To meet legal duties: accounting, fiscal receipts, warranty — basis: law.
• To answer a form or chat enquiry — basis: your consent.
• Analytics and advertising — only with your consent in the cookie banner.
• Protecting the site from abuse — legitimate interest.

3. Who receives the data

We do not sell personal data. We share only what each service needs to work:

• Nova Poshta — name, phone, branch, parcel description and value, for delivery.
• Monobank (JSC “Universal Bank”) — order total and number, for card payment.
• Checkbox — fiscal receipt data (items, total, payment method).
• Resend — e-mail address, for the confirmation and receipt e-mails.
• Supabase — the site database holding orders and requests, and account sign-in.
• Cloudflare — site hosting and attack protection (processes visitors’ IP addresses).
• Google (Google Tag Manager, Google Analytics) and Meta (Meta Pixel) — analytics and ad measurement, only after you consent in the cookie banner.
• Microsoft Clarity — anonymised session recordings and click heatmaps, so we can see where the site is hard to use. Only after you consent in the cookie banner; form fields (name, phone, e-mail, address) are not recorded.
• Meta Conversions API — after a purchase we send Meta the order number, total and hashed e-mail and phone to measure advertising. You can opt out by writing to the e-mail above.
• AI provider (OpenAI) — the text of support chat messages, to generate a reply. We do not store these messages in our database. Please do not share passport or payment details in the chat.
• Public authorities — only where the law expressly requires it.

Some of these services (Supabase, Cloudflare, Resend, Google, Meta, Microsoft, OpenAI) process data on servers outside Ukraine — in the EU and the USA — for the purposes described above.

4. Cookies and local storage

• Necessary (work without consent): site language (cookie fd_lang, 1 year), your cookie banner choice, cart, wishlist and recently viewed items, traffic source (UTM tags), account sign-in session. Stored in your browser.
• Analytics and advertising (Google, Meta, Microsoft Clarity and other tools connected via Google Tag Manager) — only after you click “Accept all”. You can change your choice or withdraw consent at any time with the “Cookie settings” button in the site footer.

5. How long we keep data

• Order data — for the period for warranty claims (up to 5 years from the day you receive the item) and the retention periods for accounting and fiscal records set by law.
• Form requests and unfinished orders — as long as needed to handle the request, or until you ask us to delete them.
• Analytics data — under the rules of the relevant service (Google, Meta, Microsoft).

6. Your rights

Under Article 8 of the Law “On Personal Data Protection” you have the right to:

• know what data about you is processed, where, by whom and why;
• access your data;
• have inaccurate data corrected, or data processed without grounds deleted;
• withdraw consent, including for analytics and advertising;
• object to processing;
• complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.

To exercise a right, write to foresterraaa@gmail.com from the e-mail, or quoting the phone number, you used for the order. We will reply within the time limits set by law. Data we are legally required to keep (such as fiscal receipts) cannot be deleted before that period ends — we will tell you so in our reply.

7. Security

Only the owner and the store’s managers can see orders. Connections to the site are encrypted (HTTPS), and database access is restricted by permissions.

8. Changes

A new version is published on this page with its date at the top. Data collected earlier is processed under the version in force when it was collected, unless the new one is more favourable to you.