Privacy policy

Version of 25 September 2026.
Data controller: Sole proprietor (FOP) Mykola Hordiichuk (details and address are in the “Seller details” block below).
Contact for personal data: company@frostdivision.com.ua, +380 68 212-02-69.

This policy explains what data frostdivision.com.ua collects, why, who receives it and how long it is kept. It follows the Law of Ukraine “On Personal Data Protection”.

1. What we collect

• Orders: name, phone, e-mail (if given), Nova Poshta city and branch, order items and total, payment method, comment.
• Unfinished orders: if you type your name or phone into the order form but do not submit it, we keep these details and the cart contents so a manager can help you complete the purchase.
• Other forms: callback, wholesale request, dropshipping application, “notify me when in stock” — whatever you enter in them.
• Customer account: the sign-in e-mail and the history of orders placed with it.
• Technical data: IP address (to prevent abuse and rate-limit requests), device and browser type, pages viewed, traffic source (UTM tags).
• Support chat: the text of messages you write in the on-site chat.

We never receive or store card details: you enter them on the payment provider’s page.

2. Why and on what basis

• To fulfil your order: contact you, take payment, issue a fiscal receipt, ship the goods — basis: concluding and performing the sales contract.
• To meet legal duties: accounting, fiscal receipts, warranty — basis: law.
• To answer a form or chat enquiry — basis: your consent.
• Analytics and advertising — only with your consent in the cookie banner.
• Protecting the site from abuse — legitimate interest.

3. Who receives the data

We do not sell personal data. We share only what each service needs to work:

• Nova Poshta — name, phone, branch, parcel description and value, for delivery.
• Monobank (JSC “Universal Bank”) — order total and number, for card payment.
• Checkbox — fiscal receipt data (items, total, payment method).
• SMS Club — phone number, for SMS with the tracking number and receipt.
• Resend — e-mail address, for the confirmation and receipt e-mails.
• Telegram — a notification to our manager about an order or request (name, phone, items).
• Supabase — the site database holding orders and requests, and account sign-in.
• Cloudflare — site hosting and attack protection (processes visitors’ IP addresses).
• Google (Google Tag Manager, Google Analytics) and Meta (Facebook Pixel) — analytics and ad measurement, only after you consent in the cookie banner.
• Microsoft Clarity — anonymised session recordings and click heatmaps, so we can see where the site is hard to use. Only after you consent in the cookie banner; form fields (name, phone, e-mail, address) are not recorded.
• Meta Conversions API — after a purchase we send Meta the order number, total and hashed e-mail and phone to measure advertising. You can opt out by writing to the e-mail above.
• AI provider (OpenAI) — the text of support chat messages, to generate a reply. We do not store these messages in our database. Please do not share passport or payment details in the chat.
• Public authorities — only where the law expressly requires it.

Some of these services (Supabase, Cloudflare, Resend, Google, Meta, Microsoft, OpenAI) process data on servers outside Ukraine — in the EU and the USA — for the purposes described above.

4. Cookies and local storage

• Necessary (work without consent): site language (cookie fd_lang, 1 year), your cookie banner choice, cart, wishlist and recently viewed items, traffic source (UTM tags), account sign-in session. Stored in your browser.
• Analytics and advertising (Google, Meta, Microsoft Clarity and other tools connected via Google Tag Manager) — only after you click “Accept all”. To change your choice, clear this site’s data in your browser and the banner will appear again.

5. How long we keep data

• Order data — for the warranty period (3 years from purchase) and the retention periods for accounting and fiscal records set by law.
• Form requests and unfinished orders — as long as needed to handle the request, or until you ask us to delete them.
• Analytics data — under the rules of the relevant service (Google, Meta, Microsoft).

6. Your rights

Under Article 8 of the Law “On Personal Data Protection” you have the right to:

• know what data about you is processed, where, by whom and why;
• access your data;
• have inaccurate data corrected, or data processed without grounds deleted;
• withdraw consent, including for analytics and advertising;
• object to processing;
• complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.

To exercise a right, write to company@frostdivision.com.ua from the e-mail, or quoting the phone number, you used for the order. We will reply within the time limits set by law. Data we are legally required to keep (such as fiscal receipts) cannot be deleted before that period ends — we will tell you so in our reply.

7. Security

Only the owner and the store’s managers can see orders. Connections to the site are encrypted (HTTPS), and database access is restricted by permissions.

8. Changes

A new version is published on this page with its date at the top. Data collected earlier is processed under the version in force when it was collected, unless the new one is more favourable to you.