Privacy Policy

This Policy explains what personal data the SKLO Repair website collects, why it is needed, who it is shared with, and how to manage it. We collect only as much as needed to fulfill your order.

Edition effective as of September 19, 2026

1. Who processes your data

1.1. The data controller is sole proprietor Dobrianska Iryna Valentynivna, RNOKPP 3305706867 (hereinafter — "we", "Seller").

1.2. This Policy applies to the website sklorepair.ua and all its pages.

1.3. Processing is carried out in accordance with the Law of Ukraine "On Personal Data Protection", the Law of Ukraine "On Electronic Commerce", and the Constitution of Ukraine.

2. What data we collect

2.1. When placing an order: first name, last name, phone number, email address, delivery method and address (city and carrier office or parcel locker, or courier address), order notes.

2.2. Upon registration: email address and password. The password is stored as an irreversible hash — we cannot see it or recover it.

2.3. If you sign in via Google: email address and name from your Google account. We do not have access to other account data.

2.4. During purchases: composition and order history, amount of purchased orders, and accumulated discount amount.

2.5. Technical data: IP address, browser and device type, access time — they are automatically logged on the server and needed for security and diagnostics.

2.6. If you message us on Telegram: username and chat ID — to send replies and order notifications directly to you.

2.7. We do not collect data on race or ethnicity, political, religious or ideological beliefs, health status, and other sensitive categories.

2.8. While browsing the catalog: anonymized browser identifier (cookie and localStorage sr_vid) and events "product view", "add to cart", "purchase". This is first-party analytics for recommendations, enabled only after your consent on the banner (section 7.3): data is stored on our server, not shared with third parties, and does not contain name, contacts, or payment information.

2.9. Referral source: the address of the page you came to us from (your browser sends it in the Referer header), campaign tags from the address (utm_source, utm_medium, utm_campaign, gclid), and the first page you opened. These details are stored in your order record alongside its contents and total. They contain neither your name, nor contacts, nor payment data, are kept on our server and are not shared with third parties. No separate cookies are set for this — until the order is placed the details live in the technical session, the same one that remembers your cart (section 7.2).

3. Why we need this data

3.1. To process your order, assemble it, and hand it over to the carrier.

3.2. To contact you to confirm product availability, clarify the address, and notify you of order status, and, if checkout was not completed (for example, the bank declined the payment), to offer help or another payment method. For this we use only the contacts you entered in the order and send no advertising to them.

3.3. To prepare the carrier's waybill — for this, the recipient's last name, first name, and phone number are passed to the delivery service.

3.4. To process payment and refund money in case of product return.

3.5. To confirm your email address during registration and provide access to your personal account.

3.6. To calculate accumulated discount based on the total amount of purchased orders.

3.7. To comply with accounting and tax reporting requirements.

3.8. We do not use your data for advertising profiling and do not share it with ad networks.

3.9. To improve product selection (recommendations) based on your browsing history within the website.

3.10. To understand where buyers come from — search, social media, an advertising link — so we know which ways of telling people about the shop work and which do not. This is our own statistics: it does not build a profile of you, is not used for advertising and is not shared with anyone.

4. Legal basis

4.1. The basis for processing is your consent provided when placing an order or registering, as well as the necessity to perform the contract to which you are a party (Article 11 of the Law of Ukraine "On Personal Data Protection").

4.2. By placing an order, you confirm that you have read this Policy and the Public Offer Agreement.

5. Who we share your data with

5.1. Delivery services — Nova Poshta, Ukrposhta, Uklon: last name, first name, phone number, and delivery address — only what is necessary for the parcel to be sent.

5.2. Payment service RozetkaPay — order amount, order number, as well as first name, phone number, and email address to generate a billing document.

5.3. Hosting service provider — as part of data stored on the server.

5.4. Government authorities — only in cases and to the extent directly provided by law.

5.5. Search queries entered in the website search bar may be processed by an external text recognition service to better find the required spare part. Your name, contacts, or order history are not transmitted with the query.

5.6. Google Ireland Limited (Google Analytics 4) — anonymized visit statistics: which pages you viewed, where you came from, device and browser type, approximate city, as well as product actions (view, add to cart, checkout, purchase) and order amounts. Transmitted only with your consent (section 7) and does not contain your name, phone number, address, or payment information.

5.7. We do not sell personal data and do not share it with third parties for marketing purposes.

5.8. Google LLC (Google Customer Reviews) — the order number, email address, country and estimated delivery date, so that Google can invite you to rate your purchase. Passed only with your cookie consent (section 7.9.6).

5.9. Nova Poshta — branch and parcel locker map — only if you click “Choose on the map” at checkout. The page then loads the map from Nova Poshta’s servers (novapost.com), and the map itself is displayed via Google Maps, so they receive your IP address, technical browser data and the name of the selected city. The map does not receive your name, phone number, email address or order contents from us — it only returns the selected point to the page. Until you open the map, the website does not contact these services.

5.10. Telegram — the shop managers’ work chat. It receives details of new and unfinished orders — name, phone number, email address, contents and amount — so that a manager can contact you quickly. Only shop staff have access to the chat.

6. Payment data

6.1. Card payments are processed on the RozetkaPay payment service side. Card number, expiration date, and CVV/CVC code are entered on the payment service page and do not reach us — we do not receive, process, or store them.

6.2. We only see the result of the transaction: whether it was successful, its amount, time, and the last four digits of the card in masked form.

6.3. Data transmission occurs over a secure connection. The payment service operates in accordance with international payment system requirements and PCI DSS security standards, and transactions are confirmed using Visa Secure, Mastercard ID Check, and PROSTIR e-Secure technologies.

7. Cookies

7.1. Cookies are small files that a website stores in your browser.

7.2. Essential cookies are needed for the website to work: they remember your cart contents, login status, chosen language, and your choice regarding cookies themselves. Without them, it is impossible to place an order.

7.3. We ask for consent to non-essential cookies separately via a banner on your first visit. Until you give consent, such cookies are not set.

7.4. You can withdraw consent at any time by clearing the website's cookies in your browser settings. Disabling essential cookies will make it impossible to place an order.

7.5. With your consent, the website uses Google Analytics 4 (Google Ireland Limited) — a service for visit statistics. It stores its own cookies (_ga and similar) and assigns a random identifier to your browser.

7.6. Without your consent, the counter does not load at all — it not only does not store cookies but also does not contact Google servers.

7.7. Google receives anonymized data about page views and product actions. Google does not receive your name, phone number, email address, delivery address, or payment information. The IP address is used only for approximate city identification and is not stored in reports. Event retention period is two months; only summary reports remain after that.

7.8. You can withdraw consent using the "Reject" button in the banner, by clearing the website's cookies in your browser settings, or by using Google's official Analytics opt-out extension. Data processing on Google's side is described in Google's Privacy Policy.

7.9. With your consent, the website uses Google Ads (Google Ireland Limited) — an advertising service from the same provider. The ads tag is loaded by the same script and under the same consent as Analytics: until you consent, it does not load at all.

7.9.1. The tag reports to Google the fact of an order, its amount, currency and number — so that we can see which advertising brought the customer. Google does not receive your name, phone number, delivery address or payment details.

7.9.2. Google may also show you our ads on other websites and in its own services because you visited our website (remarketing). We do not pass any of your contact details to ad networks and do not build profiles beyond this display.

7.9.3. You can withdraw consent the same way as for Analytics (section 7.8). Ad personalisation can be turned off separately in Google ad settings.

7.9.4. Separately from the tag, we store an ad click identifier (gclid) in your order — a string that Google itself appends to the page address when you arrive from its ad. It contains no name, contact details or payment data and marks only the click itself.

7.9.5. If you consented to cookies, we may pass this identifier to Google together with the fact, time and amount of the order — the same data the tag reports, but in a file that Google Ads collects from our website daily. This is needed when the tag did not fire: you did not return to the website after payment, an ad blocker, a script error, or a closed tab. An order the tag has already reported is not passed again. If consent was not given, the identifier is never passed on and stays only in our database.

7.9.6. Google Customer Reviews. If you consented to cookies, Google may show a window on the thank-you page after checkout inviting you to rate your purchase. For this, the page passes to Google (Google LLC) information about a purchase made on our website: the order number, email address, country and estimated delivery date. Google sends the survey email only if you agree in that window; if you close it or decline, there will be no survey. For the programme to work, Google and other third parties may place and read cookies in your browser or use web beacons and similar technologies. You can manage cookies yourself — via the website banner (section 7.8) and in your browser settings. Google processes answers and ratings under its Privacy Policy.

7.10. Cookie sr_vid — first-party anonymized identifier for recommendations. It is not linked to your name, phone number, or email and is not shared with third parties. Set only after you consent via the banner; before consent — not created. You can delete it by clearing the website's cookies and localStorage.

7.11. The referral source record (section 2.9) works without cookies and does not depend on banner consent: it stores nothing in your browser beyond the same technical session without which the cart does not work, and it contacts no third-party service. By contrast, Google Analytics (section 7.5) and recommendations (section 7.10) are enabled only after your consent.

8. How long we store data

8.1. Order data is stored for the period established by law for accounting documents, and no less than the warranty period for the purchased goods.

8.2. Account data is stored as long as the account exists.

8.3. Server technical logs are stored for a limited time and are needed to investigate failures and security incidents.

9. Your rights

9.1. In accordance with Article 8 of the Law of Ukraine "On Personal Data Protection", you have the right to:

9.1.1. know exactly what data we process, for what purpose, and who we share it with;

9.1.2. access your data;

9.1.3. request correction of inaccurate or incomplete data;

9.1.4. request deletion of data, except those we are required to keep by law;

9.1.5. withdraw consent to processing;

9.1.6. file a complaint with the Ombudsman of the Verkhovna Rada of Ukraine.

9.2. You can change some data yourself in your personal account. For the rest, write to us at info@sklorepair.ua — we will respond within thirty calendar days.

9.3. Deletion of data required to fulfill an already placed order is possible after its completion.

10. Protection and storage location

10.1. Data is stored on servers in Ukraine. Only employees who need access for their work have access to it.

10.2. The website operates over a secure HTTPS connection. Passwords are stored as irreversible hashes.

10.3. We take organizational and technical measures to protect data, but no method of transmitting information over the internet is absolutely secure, and we cannot guarantee absolute protection.

11. Children

11.1. The website is intended for adults and professional repair shops. We deliberately do not collect data from persons under 18 years of age. If you discover that a child has provided us with their data, please write to us — we will delete it.

12. Changes to the Policy

12.1. We may update this Policy. The new edition is posted on this page and takes effect from the moment of posting. The date of the current edition is indicated at the beginning of the page.

13. Contacts