General Provisions

This Policy defines the procedure for collecting, processing, and protecting Buyers' personal data when using the barrel.ua website. Data processing is carried out in accordance with the Law of Ukraine "On Protection of Personal Data". Using the website implies consent to this Policy.

What Data We Collect

• First and last name;
• Contact phone number;
• Email address;
• Delivery address (city, branch/parcel locker, or home address);
• Payment details in case of non-cash payment (according to payment system requirements);
• Technical data (IP address, device data, cookies).

Purposes of Data Processing

• Placement, processing, order assembly, and dispatch;
• Delivery organization;
• Order status notifications (SMS, email, messengers);
• Providing support services and consultations;
• Sending marketing messages only with separate voluntary consent.

Legal Basis for Processing

Personal data is processed based on the performance of a purchase and sale agreement and/or based on the User's voluntary consent for marketing purposes.

Transfer of Data to Third Parties

Personal data is not sold or transferred to third parties for marketing purposes without your consent. Data transfer is only possible for order fulfillment — to postal and logistics operators, payment services, and other counterparties ensuring order execution. If we use services outside Ukraine, the transfer is carried out in compliance with legal requirements and with appropriate protection guarantees.

Rights of the Data Subject

• Find out what data we store;
• Request data updates or corrections;
• Revoke consent to data processing;
• Request data deletion;
• Restrict processing or file a complaint with a supervisory authority.

Revocation of consent does not affect the legality of processing carried out prior to revocation. To exercise your rights, send a request via email. We respond within the timeframes stipulated by law.

Data Protection and Storage Period

We apply technical and organizational security measures (including SSL encryption, employee access restrictions) to protect data from unauthorized access, loss, or damage. Personal data is stored for the period necessary to fulfill the contract and comply with legislative requirements; the recommended storage period is up to 3 years after the last interaction, unless otherwise provided by law or agreed with the user.

Cookies and Analytics

The website uses cookies and analytics services (e.g., Google Analytics) to improve website performance, analyze traffic, and for remarketing. Data transferred to partners is anonymized; partners may combine it with information you provided directly to them. You can manage cookies through your browser settings or website tools; refusing cookies may limit functionality.

Payment Data

If payment is made via payment gateways, payment details are processed by respective payment providers in accordance with their policies. We do not store full payment card data on our servers unless otherwise specified.

User Materials

Reviews, comments, and photos you publish are considered publicly available; by posting them, you grant the website the right to use them in marketing and informational materials without additional payment. You are responsible for the legality of such content.

Minors

The website is not intended for individuals under 18 years of age. If you are a minor, use the website only with the permission of parents or guardians.

Changes to the Policy

We may update this Policy, and changes take effect from the moment of publication on the website. We will notify you of substantial changes via email or another convenient method.