1. General provisions

1.1. This Policy applies to the online store Choboty.store, placing orders, contacting support, interactions with advertising, analytical systems, social networks, messengers and other brand communication channels.

1.2. Personal data are processed in accordance with the legislation of Ukraine, in particular the Law of Ukraine "On Protection of Personal Data", the Law of Ukraine "On Electronic Commerce" and other applicable norms.

1.3. The owner of the personal data is the legal entity or individual entrepreneur that sells goods under the Choboty.store brand.

2. What data we may collect

2.1. Data the buyer provides when placing an order

• first and last name;
• phone number;
• email address;
• locality, address or delivery branch/postamat;
• recipient's details;
• selected products, size, colour, quantity and other characteristics;
• delivery method and payment method;
• order number and status;
• information the buyer voluntarily adds in the order comments.

2.2. Data that may be processed during payment

• amount and currency of the payment;
• date and time of the transaction;
• payment status;
• transaction identifier;
• payment method and information necessary to confirm or refund the payment.

2.3. Data when contacting Choboty.store

• name and contact details;
• order number;
• content of correspondence or inquiry;
• photos of the product, packaging or defect, if the user sends them to resolve the issue;
• username or another profile identifier in a social network or messenger.

2.4. Technical and analytical data

• IP address;
• device type, browser and operating system;
• browser language;
• approximate geographic location;
• date and time of visit;
• viewed pages and products;
• referrer;
• UTM tags and advertising parameters;
• actions on the site: product view, add to cart, begin checkout, purchase and other events;
• cookies, advertising identifiers and other technical signals.

3. Purposes of data use

Personal and technical data may be used only to the extent necessary for a specific lawful purpose, in particular for:

• placing, confirming and fulfilling orders;
• organising delivery with Nova Poshta, Nova Post;
• processing and confirming payments;
• refunds, exchanges and returns;
• communication with the buyer regarding the order;
• handling inquiries, claims and warranty issues;
• accounting, tax and other mandatory records;
• fraud prevention, abuse and technical attack mitigation;
• ensuring site operation and security;
• traffic, user behaviour and conversion analysis;
• improving assortment, site structure and customer service;
• measuring the effectiveness of Google Ads, Meta Ads and other advertising campaigns;
• remarketing and building advertising audiences;
• ad personalisation, if the user has provided the necessary consent;
• email, SMS and messenger marketing where there is an appropriate legal basis or consent.

4. Legal grounds for processing

Depending on the specific operation, data may be processed on the basis of:

• the necessity to conclude and perform a contract with the buyer;
• fulfilment of obligations established by law;
• user consent;
• Choboty.store's legitimate interest where such processing does not infringe the rights and freedoms of the user;
• other grounds directly provided by the legislation of Ukraine.

If processing is based on consent, the user may withdraw it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and similar technologies

The site may use cookies, local storage, pixels, tags, advertising identifiers and other similar technologies. They help ensure the store's operation, analyse traffic and measure advertising.

6. Managing cookies and consent

On the Site the user can separately manage non-essential cookies. Analytical and marketing technologies are activated according to the user's choice and applicable legal requirements.

Equivalent actions are available in the cookie banner:

• "Accept all";
• "Reject non-essential";
• "Configure".

Necessary cookies may operate regardless of the choice regarding analytical or marketing cookies if they are objectively required for basic Site operation.

7. Google Analytics 4

Choboty.store may use Google Analytics 4 to analyse traffic and user behaviour.

The service may process, in particular:

• device and browser information;
• page and product views;
• traffic source and channel;
• approximate geographic location;
• ecommerce events;
• adding product to cart;
• beginning checkout;
• purchases and other conversions.

These data are used for statistics, sales analysis, site improvement and evaluating marketing effectiveness.

8. Google Tag Manager

The site may use Google Tag Manager for technical management of analytical and advertising tags. It may trigger Google Analytics, Google Ads, Meta Pixel and other connected tools.

The actual scope of data depends on the specific tags active on the Site.

9. Google Ads and advertising conversions

Choboty.store may use Google Ads campaigns for promotion, including Search, Shopping, Performance Max, Display, YouTube and remarketing.

Google Ads may use cookies and other identifiers to:

• determine clicks from ads;
• record purchases and other conversions;
• attribute advertising results;
• optimise bids and campaigns;
• create remarketing audiences;
• prevent excessive ad frequency.

10. Enhanced Conversions Google Ads

For more accurate ad measurement Choboty.store may use Google Ads Enhanced Conversions.

After a purchase or other conversion, certain first-party data that the user provided to the store may be sent to Google in a securely hashed form according to Google's technical requirements.

Such data may include:

• email;
• phone number;
• first and last name;
• address data, if used in the respective implementation.

These data are used to match the conversion with the advertising interaction and to measure ad performance more accurately.

11. Google Merchant Center and Google Shopping

To list products in Google Shopping Choboty.store may use Google Merchant Center.

Product catalogue data may be sent to Google, including:

• product title and description;
• photos;
• price;
• availability;
• product link;
• brand and characteristics;
• delivery, payment and return terms.

Merchant Center mainly concerns product information. After a user clicks from Google Shopping to the Site, related Google analytical and advertising tools may operate.

12. Meta Pixel

Choboty.store may use Meta Pixel to measure advertising on Facebook and Instagram.

Pixel may record events:

• page view;
• product view;
• search;
• add to cart;
• initiate checkout;
• purchase;
• other interactions with the Site configured for advertising analytics.

This information may be used for analytics, ad optimisation, remarketing and building advertising audiences.

13. Meta Conversions API

To improve measurement accuracy Choboty.store may use Meta Conversions API, through which event data are sent from the Site's server-side to Meta.

Depending on configuration, the following may be transmitted:

• event type, e.g. Purchase;
• order amount and currency;
• product identifiers;
• order number;
• email or phone;
• name;
• technical advertising identifiers.

Personal identifiers may be transmitted in hashed form according to Meta's technical requirements.

14. Remarketing and advertising audiences

Choboty.store may build advertising audiences based on user interaction with the Site or brand pages.

For example, ads may be targeted to users who:

• visited the Site;
• viewed a specific product or category;
• added a product to the cart;
• initiated checkout;
• made a purchase;
• interacted with Choboty.store on Facebook or Instagram.

15. Customer Match and Custom Audiences

Where there is a lawful basis, Choboty.store may use its customers' contact data for Google Customer Match, Meta Custom Audiences or similar tools.

For example, an email or phone number may be sent to the respective platform in hashed form to:

• match with platform users;
• exclude existing customers from certain campaigns;
• show offers to existing customers;
• create lookalike or optimised audiences if such a feature is available on the platform.

16. UTM tags and advertising attribution

Marketing links may contain UTM tags or other parameters that allow identification of the source, channel, campaign, ad group or specific ad.

These data are used to evaluate the effectiveness of marketing channels and to allocate the advertising budget.

17. Marketing messages

With appropriate consent or other lawful basis Choboty.store may send marketing messages via:

• email;
• SMS;
• Viber;
• Telegram;
• WhatsApp;
• Instagram;
• Facebook Messenger;
• other agreed channels.

Such messages may contain information about new collections, products, discounts, promotions, special offers, product availability, personal recommendations or an unfinished order.

The user can opt out of marketing messages via the unsubscribe mechanism or by contacting Choboty.store. Opting out of marketing does not affect service messages regarding an placed order.

18. Abandoned cart and incomplete order

If a user begins checkout and provides contact details but does not complete the purchase, Choboty.store may use the permitted data to remind about the incomplete order where there is a lawful basis for such communication.

19. To whom data may be disclosed

To fulfil orders, operate the Site and the marketing infrastructure, data may be disclosed only to the extent necessary to the respective service providers, including:

• Nova Poshta, Nova Post — depending on the delivery method;
• NovaPay;
• WayForPay;
• banks, Visa, Mastercard and other payment systems;
• Google;
• Meta;
• hosting provider;
• CRM, email, SMS or messenger service providers;
• developers and technical contractors;
• accounting and legal consultants;
• state authorities — only in cases provided by law.

20. Processing of data by international services

Some technological and advertising providers, including Google and Meta, are international companies. Due to the use of their services some data may be processed on infrastructure located outside Ukraine.

Such processing is carried out according to the provider's terms, applicable law and the user's privacy settings.

21. Data retention periods

Personal data are retained no longer than necessary for the purpose of processing, or for the periods required by law.

In particular:

• order data may be kept for contract performance, warranty service, returns, dispute resolution and accounting;
• accounting and payment documents are kept for periods required by law;
• marketing contact data may be used until consent is withdrawn or the relevant marketing purpose ceases;
• analytical and advertising data are kept according to the settings of the respective platforms and measurement needs.

After the required period data are deleted, anonymised or cease to be used for the respective purpose unless law requires further retention.

22. Personal data protection

Choboty.store implements organisational and technical measures to protect personal data from unauthorised access, loss, alteration, unlawful use or disclosure.

Access to data is granted only to persons who need it to perform relevant functions. At the same time no method of transmitting or storing information over the Internet can guarantee absolute security.

23. User rights

Within the limits provided by Ukrainian law, the user has the right to:

• know the sources of collection, location and purpose of processing of their personal data;
• access their personal data;
• request correction of inaccurate or outdated data;
• object to unlawful processing;
• withdraw consent if processing is based on consent;
• opt out of marketing messages;
• request deletion of data where provided by law;
• file complaints with competent authorities or court;
• use other rights provided by the legislation of Ukraine.

24. Google Consent Mode and advertising signals

Choboty.store may use Google Consent Mode to send signals to Google systems about the user's choices regarding analytical and advertising technologies.

Depending on implementation, parameters related to ad storage, analytics storage, ad personalisation and the use of user data for advertising purposes may be controlled.

25. Social networks and third-party platforms

Choboty.store may use Instagram, Facebook and other third-party platforms.

When a user interacts with Choboty.store directly on such a platform, that platform also processes the user's data according to its own privacy policy.

26. Links to third-party resources

The Site may contain links to Nova Poshta, NovaPay, WayForPay, Google, Meta, social networks and other external resources.

Choboty.store does not control third-party privacy policies. After navigating to an external resource the user is advised to review its privacy rules.

27. Children's data

Choboty.store does not knowingly engage in marketing collection of personal data of young children.

Purchases should be made by persons who have the legal capacity required to enter into the relevant contract.

28. Automated advertising and personalisation

Google, Meta and other advertising platforms may automatically analyse technical signals and behavioural data to optimise ad campaigns, predict purchase likelihood, determine relevant audiences and personalise ads according to their rules and the user's settings.

29. Changes to the Privacy Policy

Choboty.store may update this Policy due to changes in legislation, site functionality, payment and delivery methods, analytical or advertising technologies.

The current version is published on the Site. Date of last update of this version: 26 August 2026.

30. Contacts regarding personal data

For questions related to personal data, cookies, advertising technologies or this Policy, the user may contact Choboty.store.