Privacy Policy

Privacy and Cookie Policy
Effective date: December 22, 2022

Contents:

Introduction
Data Controller
Personal Data We Collect
Tracking and Cookies Data
Use of Data
Disclosure of Data
Storage of Information / Data Transfers
Information Security and Data Retention
Our Commitment to Children’s Privacy
Rights of The Personal Data Subject
Revisions to This Policy
How to Contact Us

1. Introduction
This Privacy and Cookie Policy (hereinafter — the Policy) describes the types of information that We collect from and about you when you visit on our website https://giftmall.com.ua/ (hereinafter — the Website). Your use of the Website signifies your assent to this Policy. The purpose of this Policy is to set high and consistent our standards to respect privacy and data protection. The information contained herein is our property and may not be copied, used or disclosed in whole or in part, stored in a retrieval system or transmitted in any form or by any means (electronic, mechanical, reprographic, recording or otherwise) without prior written permission.

2. Your Data Controller
The Data Controller
Data Controller of the personal data of the customers of this Website — LLC “GIFT CARD MALL” company code: 38781356, address: Ukraine, Offise 221/1, 2/6, Novozabarska Str., Kyiv, 04074 (hereinafter — the Company).

The Representative
The Company’s representative: Lano Solutions, JSC, company code: 302797487, address: Svitrigailos str. 11B, LT-03228 Vilnius, Republic of Lithuania, email: [email protected] (hereinafter — the Representative). The representative is mandated by the Company to be addressed in addition to or instead of the Company by individuals whose personal data is processed by the way regarding all issues related to processing of the data and all relevant compliance.

3. Personal Data We Collect
We collect information from you when you choose to provide it to us, such as when you make a purchase, create an account, sign up for our email list or other communications from us, provide a product review or rating, or otherwise contact us. The information We collect may include your name, billing and shipping address(es), email address, telephone number, payment card information, account user name and password. If you refuse to provide requested information (whether or not required), you may not be able to take full advantage of certain services, the Website or its features, or other offerings.

By voluntarily providing your phone number during registration, authorization, or order management processes, you consent to receiving SMS messages pertaining to your account and orders. These messages may encompass, without limitation, registration confirmations, order updates, and security notifications.

4. Tracking and Cookies Data
Cookies That We Use
A cookie is a small text file stored on your computer when you visit certain websites. Cookies are essential for us to be able to keep track of your progress through our Website and remember such things as what is in your shopping basket and any selections/preferences you change during your visit. They allow us to remember this information for the next time you visit our Website. Cookies are not programs and therefore cannot contain viruses or other malicious software. Nor do they allow the website to interact in any way with your computer settings or files. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Managing Cookies
If all cookies are disabled on your computer, it will mean that your shopping experience on our Website will be limited to browsing and researching and you won't be able to add products to your basket and purchase them. Depending on which web browser you use it is possible to control how cookies are used, or to delete existing cookies from your computer. Please remember that if you delete or restrict cookies from the Website you may not be able to experience the full benefit of some of the features and services the Website has to offer.

5. Use of Data
We use the collected data for various purposes:

- To provide and maintain our service.
- To notify you about changes to our service.
- To provide customer support.
- To gather analysis or valuable information so that We can improve our service.
- To monitor the usage of our service.
- To detect, prevent and address technical issues.
- To provide you with news, special offers and general information about other services and events which We offer that are similar to those that you have already purchased or enquired about unless you have opted not to receive such information.

Purpose of Data Processing - To provide and maintain our Service, Direct marketing, Handling complaints and inquiries, Website visitor monitoring.
Legal Basis for Data Processing - Execution of the contract (Article 6(1)(b) GDPR), Consent (Article 6(1)(a) GDPR), Legitimate interest (Article 6(1)(f) GDPR), Legitimate interest (Article 6(1)(f) GDPR).
Data categories - name, billing and shipping address(es), email address, telephone number, payment card information, account user name and password; name, email address; Information collected by cookies, registration data: Computer ID; Technical data (IP address, browser type, request data).
Retention Period for Personal Data - 10 year; Until the removal request; 10 years of last use of the website or after the investigation of the complaint; Until the removal request.

6. Disclosure of Data
We share information with third parties that help us operate, provide, improve, integrate, customize, support and market our services.

Disclosure for Law Enforcement
Under certain circumstances, We may be required to disclose your personal data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Legal Requirements
We may disclose your personal data in the good faith belief that such action is necessary to:

- To comply with a legal obligation.
- To protect and defend the rights or our property.
- To prevent or investigate possible wrongdoing in connection with the service.
- To protect the personal safety of users of the service or the public.
- To protect against legal liability.

To ensure security, performance, and protection against DDoS attacks, we use the services of Cloudflare, Inc. (USA). Cloudflare acts as a data processor based on a Data Processing Agreement (DPA) and may process visitors’ technical data, including IP addresses, in the course of traffic routing.
More details: Cloudflare Privacy Policy

7. Storage of Information / Data Transfers
We operate an international online business. As a result, your information may be transferred to, stored at or processed in other countries, which may not have equivalent privacy or data protection laws. However, regardless of where your information is transferred, We will protect it in accordance with this Policy and applicable law.

8. Information Security and Data Retention
The security of your personal data is important to us. While We will use every reasonable means to help ensure the security and integrity of our network and systems, We cannot guarantee our security measures. We use physical, technical, organizational and administrative safeguards to help protect your information from unauthorized access or loss. For example, We use technology like encryption to protect sensitive information (such as your name and address) during transmission. We will retain your information for as long as the information is needed for the purposes listed herein and for any additional period that may be required or permitted by law.

9. Our Commitment to Children’s Privacy
You can get Our services (use Our online store) only if you are over 16 years old. If you are under the age of 16, you should not provide your personal data without the permission of a parent or guardian. If you are a parent/guardian and you find out that your minor child under the age of 16 is getting Our services (is using Our online store) and you object to this, please contact us and we will remove all related data as soon as possible.

10. Rights of The Personal Data Subject
LLC hereby informs that you, as a subject of personal data, have the rights provided for by the Law of Ukraine "On the Protection of Personal Data", namely:
- To know about the sources of collection, the location of their personal data, the purpose of their processing, the location or place of residence (residence) of the owner or manager of personal data or to give an appropriate mandate to obtain this information to persons authorized by him, except for cases established by law;
- Receive information about the conditions for providing access to personal data, in particular information about third parties to whom his personal data is transferred;
- To access your personal data;
- To receive, no later than thirty calendar days from the date of receipt of the request, an answer on whether his personal data is being processed, as well as to receive the content of such personal data;
- Present a reasoned demand to the owner of personal data with an objection to the processing of his personal data;
- Make a reasoned demand for the change or destruction of your personal data by any owner and administrator of personal data, if these data are processed illegally or are unreliable;
- To protect your personal data from illegal processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision of them, as well as protection from providing information that is unreliable or dishonors honor, dignity and business reputation natural person;
- File complaints about the processing of personal data with the Commissioner or the court;
- Apply legal remedies in case of violation of the legislation on the protection of personal data;
- Enter reservations regarding the limitation of the right to process one's personal data when giving consent;
- Withdraw consent to the processing of personal data;
- Know the mechanism of automatic processing of personal data;
- To protect against an automated decision that has legal consequences for him.

11. Revisions to This Policy
We reserve the right to revise this Policy at any time. When We do, We will post any changes on this Website. You can tell if the Policy has changed by checking the last revision date that appears at the top of the Policy. If We change the Policy in a material way, We will provide appropriate notice to you.

12. How to Contact Us
We hope this Policy has been helpful in explaining how we use your personal data and your rights. If you have any questions that haven’t been covered, please contact us at [email protected].

Last updated: April 10, 2026