General Provisions

This Policy defines the procedure for collecting, processing, and protecting customers' personal data when using the barrel.ua website. Data processing is carried out in accordance with the Law of Ukraine "On Personal Data Protection". By using the website, you agree to this Policy.

What Data We Collect

• First and last name;

• Contact phone number;

• Email address;

• Delivery address (city, branch/post locker, or home address);

• Payment details in the case of non-cash payments (in accordance with payment system requirements);

• Technical data (IP address, device information, cookies).

Purposes of Data Processing

• Placing, processing, assembling, and shipping orders;

• Organizing delivery;

• Informing customers about order status (SMS, email, messengers);

• Providing customer support consultations;

• Sending marketing communications only upon separate voluntary consent.

Legal Basis for Processing

Personal data is processed for the performance of a sales contract and/or on the basis of the user's voluntary consent for marketing purposes.

Transfer of Data to Third Parties

Personal data is not sold or transferred to third parties for marketing purposes without your consent. Data may only be transferred for the purpose of fulfilling an order — to postal and logistics operators, payment service providers, and other contractors involved in order fulfillment. If we use services located outside Ukraine, such transfers are carried out in compliance with applicable legal requirements and with appropriate safeguards in place.

 Rights of the Data Subject

• Know what data we store;

• Request updates or corrections to your data;

• Withdraw consent to data processing;

• Request deletion of your data;

• Restrict processing or file a complaint with the supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before such withdrawal. To exercise your rights, please send a request via email. We will respond within the time limits established by law.

Data Protection and Retention Period

We implement technical and organizational security measures (including SSL encryption and restricted employee access) to protect data against unauthorized access, loss, or damage. Personal data is retained for the period necessary to fulfill contractual obligations and comply with legal requirements; the recommended retention period is up to 3 years after the last interaction unless otherwise required by law or agreed with the user.

Cookies and Analytics

The website uses cookies and analytics services (such as Google Analytics) to improve website performance, analyze traffic, and conduct remarketing activities. The data shared with partners is anonymized; partners may combine it with information that you have provided to them directly. You may manage cookies through your browser settings or website tools; disabling cookies may limit website functionality.

Payment Information

If payments are processed through payment gateways, payment details are handled by the relevant payment service providers in accordance with their own policies. We do not store complete payment card information on our servers unless otherwise explicitly stated.

User Content

Reviews, comments, and photographs that you publish are considered publicly available. By posting such content, you grant the website the right to use it in marketing and informational materials without additional compensation. You are responsible for ensuring the legality of such content.

Minors

The website is not intended for individuals under the age of 18. If you are a minor, you may use the website only with the permission of your parents or legal guardians.

Changes to This Policy

We may update this Policy from time to time. Any changes become effective upon publication on the website. We will notify you of significant changes via email or by another appropriate method.