Last updated: 18 December 2025

This Privacy Policy explains how Soviet-Box (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit or make a purchase on our website.

1. Data Controller

Controller: ФОП (Sole Proprietor) Ihor Lozoviy
Country: Ukraine
Contact (Privacy): [email protected]

2. What Personal Data We Collect

Depending on how you use the website, we may collect:

• Contact details: name, email address, phone number (if provided).
• Shipping details: delivery address for order fulfillment.
• Order information: items purchased, order totals, order history, and related communications.
• Technical data: IP address and basic browser/device information for security and troubleshooting.
• Cookies: technical cookies necessary for website functionality (see Section 7).

3. How We Use Your Data

• To process and fulfill your orders.
• To provide customer support and communicate about your order.
• To arrange shipping with our carrier(s).
• To maintain website security and prevent fraud or abuse.

4. Legal Basis for Processing (GDPR)

• Contract: processing is necessary to complete your purchase and deliver your order.
• Legitimate interests: website security, fraud prevention, and service improvement.
• Consent: where required (for example, certain cookies). You can withdraw consent at any time.

5. Payments

We accept payments via Stripe, including bank cards and supported wallets such as Apple Pay and Google Pay. Payment processing is handled by Stripe. We do not store full payment card details on our servers.

6. Shipping

We ship orders using Ukrposhta. To deliver your order, we share only the necessary information (e.g., name, phone number if required, and shipping address) with the carrier.

For shipping details, please see our delivery page: Delivery

7. Cookies

We use technical cookies to ensure the website works correctly (for example, cart and session functionality). We do not use marketing cookies.

Cookie retention (typical): 365 days (may vary depending on your browser settings). You can manage cookies through your browser settings.

8. Email Communications

We may send you service-related emails (for example, order confirmation and shipping updates). If you contact us, we may keep the correspondence to support you and resolve issues.

9. Data Sharing (Third Parties)

We may share your data only when necessary with:

• Stripe (payment processing).
• Ukrposhta (shipping and delivery).
• Our hosting/IT infrastructure providers (to operate and secure the website).

10. International Data Transfers

Because we use Stripe, some personal data may be processed outside your country of residence. Stripe may process data in different jurisdictions to provide its services and ensure payment security.

11. Data Retention

• Orders: we retain order data for up to 2 years.
• Account data: if you have an account, we retain it for up to 2 years (or until deletion, if applicable).
• Cookies: typically up to 365 days (see Section 7).

12. Your Rights (EU/EEA/UK and Similar Rights Elsewhere)

Depending on your location, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion of your data (where applicable).
• Object to or restrict certain processing.
• Withdraw consent (where processing is based on consent).

To exercise your rights, contact us at: [email protected]. We typically respond within 3 days.

13. Minimum Age

To place an order on this website, you must be legally able to enter into a purchase agreement under applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates the latest revision.