PERSONAL DATA PROCESSING POLICY
Last updated: 28 August 2026
1. Who we are
This Policy is issued by UATAC LLC (Company ID / EDRPOU: 44716892), registered at 43, Demiivska St., Kyiv, Ukraine, 03040 (“UATAC”, “we”, “us”). UATAC LLC is the controller of personal data collected through uatac.shop.
Contact for data matters: info@uatac.shop · +380 63 784 1715 · 43, Demiivska St., Kyiv, Ukraine, 03040.
2. Scope and relationship to our Privacy Policy
This Policy explains how UATAC LLC processes personal data under Ukrainian law, including the Law of Ukraine “On Personal Data Protection”. It applies to customers, website visitors, business partners, and to our own personnel who handle personal data.
This Policy supplements our Privacy Policy, which describes in detail what data is collected through the website and how it is used. If there is any conflict between the two documents, the Privacy Policy prevails in respect of website visitors and customers.
3. Definitions
Personal data — information relating to an identified or identifiable natural person.
Data subject — the natural person to whom the personal data relates.
Controller — the party that determines the purposes and means of processing. For uatac.shop this is UATAC LLC.
Processor — a party that processes personal data on behalf of the controller under a written agreement.
Processing — any operation performed on personal data, including collection, storage, use, transfer, correction and deletion.
Special categories of data — data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sex life.
4. What personal data we process and why
Customers and website visitors. Name, email address, telephone number, delivery and billing address, order contents and value, payment confirmation details, correspondence with our support team, and technical data such as IP address and device information. We process this data in order to accept and fulfil orders, arrange delivery, process payments and refunds, provide customer support, handle returns and warranty claims, and comply with accounting and tax obligations under the Tax Code of Ukraine and the Law of Ukraine “On Accounting and Financial Reporting in Ukraine”.
Marketing subscribers. Name and email address, where you have given consent, for the purpose of sending newsletters and offers. You may withdraw this consent at any time.
Business partners and dealers. Company details, contact person name, business email and telephone, and contract data, for the purpose of performing our contractual obligations.
We do not sell personal data, and we do not use it for automated decision-making that produces legal effects.
5. Legal grounds for processing
We process personal data on one or more of the following grounds: performance of a contract to which you are a party; compliance with a legal obligation; your consent, where consent is required; and our legitimate interests in operating and securing the website, preventing fraud and improving our products.
6. Special categories of data
We do not collect and do not process special categories of personal data. Please do not include such information in reviews, order notes or correspondence.
7. Who processes data on our behalf
We share personal data only with parties that need it to deliver our service to you, and only under data processing agreements. These include:
• Shopify Inc. — the e-commerce platform that hosts uatac.shop and stores order and customer records.
• Western Bid, Inc. (USA) — our authorized payment processing and logistics partner, which acts as Merchant of Record for payments. Card data is handled by the payment processor; UATAC LLC does not store full card numbers.
• Delivery carriers — including FedEx, UPS, DPD and Nova Global, which receive the recipient name, address and telephone number necessary for delivery.
• Service providers for email, reviews, analytics and customer support, acting strictly on our instructions.
• Public authorities — where disclosure is required by law.
8. International transfers and storage location
Because our store operates on the Shopify platform and serves customers worldwide, personal data is stored and processed on servers operated by Shopify and our other service providers, which may be located outside Ukraine, including in the European Union and the United States. Where data is transferred internationally, we rely on the safeguards offered by those providers, including standard contractual clauses where applicable. Our own internal accounting records are kept in Ukraine.
9. Retention
We keep personal data only for as long as necessary for the purposes described in this Policy, and thereafter for the periods required by Ukrainian accounting and tax legislation. Marketing data is kept until you withdraw consent.
10. Security measures
We apply organizational and technical measures appropriate to the risk, including encrypted connections (HTTPS), access control on a need-to-know basis, authentication requirements for staff accounts, confidentiality obligations for personnel with access to personal data, and regular review of access rights and software updates.
11. Your rights
You have the right to: obtain confirmation of whether we process your personal data and to access it; have inaccurate data corrected and incomplete data completed; request deletion of your data; restrict or object to processing; receive your data in a portable format; withdraw consent at any time, without affecting processing carried out before withdrawal; and lodge a complaint with a supervisory authority. In Ukraine this is the Ukrainian Parliament Commissioner for Human Rights; customers resident in the European Union may complain to the supervisory authority of their country of residence.
12. How to exercise your rights
Send your request to info@uatac.shop or to our postal address above. We will respond within 30 calendar days. We may ask you to confirm your identity before acting on a request, in order to protect your data from disclosure to third parties.
13. Changes to this Policy
We may update this Policy from time to time. The current version is always published on this page, with the date of the last update shown at the top. Material changes will be communicated through the website.