Privacy Policy
Last Updated: March 16, 2026
Welcome to the English version of savchook.com (“we,” “us,” or “our”). We are committed to protecting your privacy and ensuring that your personal data is handled in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit our website (savchook.com/en/) and use our services.
1. Data Controller Identity
For the purposes of the GDPR, the Data Controller responsible for your personal information is:
- Company/Entity Name: FOP Savchook Oleksandr Olehovych
- Registered Address: 14 Alchevskykh St., Kharkiv, Ukraine
- Contact Email: savchook.buy@gmail.com
- Contact Phone: +38 (066) 212-84-27
2. Information We Collect and Our Legal Basis for Processing
Under the GDPR, we must have a valid legal basis to process your data. We collect personal information directly from you for the following purposes and on the following legal grounds:
A. Data Collected at Checkout
When you place an order, we collect:
- First name, last name, email address, and phone number.
- Billing and shipping address (including country, city, and specific delivery details).
- Order contents, quantities, total amount, and selected payment/delivery methods.
(Note: The English version of our site utilizes a simplified checkout process with weight-based shipping handled exclusively by Ukrposhta. This differs from our primary Ukrainian site, where customers can choose between Nova Poshta and Ukrposhta).
- Purpose: To process your order, deliver your goods via Ukrposhta, and contact you regarding your purchase.
- Legal Basis: Performance of a Contract (Art. 6(1)(b) GDPR). We need this data to fulfill our side of the sales agreement with you.
B. Data Collected via Forms
- Contact Form: Name, email address, and message.
- Book Publishing Inquiry Form: Name (optional), phone number (required), and notes (optional).
- Pre-order Popup Form: First name, surname, phone number, and requested quantity.
- Purpose: To respond to your inquiries, provide customer support, and manage pre-orders.
- Legal Basis: Legitimate Interests (Art. 6(1)(f) GDPR) for general inquiries, and Performance of a Contract / Steps prior to entering a contract (Art. 6(1)(b) GDPR) for pre-orders.
- Storage Note: Form submissions are not stored in our website database; they are securely transmitted directly to our site administrator via email.
C. Financial and Accounting Data
- Purpose: To issue fiscal receipts and maintain proper accounting records as required by Ukrainian law.
- Legal Basis: Legal Obligation (Art. 6(1)(c) GDPR).
3. Third-Party Services and Data Sharing
We do not sell your personal data. We only share necessary information with trusted third-party service providers to facilitate our business operations:
| Service Provider | Data Shared | Purpose of Processing | Legal Basis |
|---|---|---|---|
| LiqPay (liqpay.ua) | Order ID, amount, currency, phone number | Secure payment processing | Performance of a Contract |
| Ukrposhta (ukrposhta.ua) | Full name, address, phone number, order weight | International shipping and delivery | Performance of a Contract |
| Checkbox (checkbox.ua) | Full order details, payment method | Generating fiscal receipts | Legal Obligation |
| Google Analytics | Page views, session data, user behavior | Website traffic analytics | Consent |
| Meta Pixel | Page views, conversions, user interactions | Advertising and remarketing | Consent |
| Google Tag Manager | E-commerce events, order tracking | Analytics and tag orchestration | Consent |
Privacy by Design:
- Google Fonts: Self-hosted locally; no requests are sent to Google Fonts Content Delivery Networks.
- Product Recommendations: Powered by our self-hosted service (
recommendation-service.savchook.com); no external data sharing. - Custom Fields/Themes: Stored strictly locally on our servers.
4. International Data Transfers
As we are a publisher based in Ukraine, your data is processed outside the European Economic Area (EEA). Furthermore, some of our analytics and advertising partners (such as Google and Meta) may process data on servers located in the United States.
When your personal data is transferred outside the EEA, we ensure it is protected by relying on recognized legal safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or by ensuring the third party is certified under relevant data privacy frameworks.
5. Cookies and Tracking Technologies
We use cookies to ensure basic website functionality, process your orders, and analyze site traffic.
| Cookie Source | Purpose | Legal Basis |
|---|---|---|
| WooCommerce | Maintains shopping cart sessions and remembers checkout preferences. | Legitimate Interest (Strictly Necessary) |
| WordPress | Handles authentication for administrative users only. | Legitimate Interest (Strictly Necessary) |
| Google Analytics | Collects anonymous usage statistics and traffic analysis. | Consent |
| Meta Pixel | Tracks conversions and builds remarketing audiences. | Consent |
You can manage or withdraw your consent for non-essential cookies at any time using our website’s cookie consent banner or your browser settings.
6. Data Storage, Retention, and Security
We retain your data only for as long as necessary to fulfill the purposes outlined in this policy.
- Order Data: Retained indefinitely strictly as required for legal, tax, and accounting compliance.
- Server Access Logs: (Including IP addresses) Auto-rotated and deleted after approximately 3 weeks.
- Form Submissions: Governed by our email provider’s standard retention policies.
- Analytics Data: Governed by Google/Meta user retention settings.
Security Measures:
We enforce HTTPS with Strict-Transport-Security (HSTS) across the site. Payment details are handled entirely by LiqPay (a PCI-compliant gateway); we never store your credit card data. Form inputs are strictly sanitized server-side, and internal error messages are never displayed to end users.
7. Your GDPR Rights
If you are a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request the deletion of your data, subject to legal retention requirements.
- Right to Object: Object to our processing of your data based on legitimate interests.
- Right to Withdraw Consent: If we process your data based on your consent (e.g., marketing cookies), you can withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to Data Portability: Request your data in a structured, commonly used, and machine-readable format.
- Right to Lodge a Complaint: You have the right to file a complaint with a supervisory data protection authority in your country of residence.
8. Contact Us
To exercise any of your rights or if you have questions about this Privacy Policy, please contact us at:
- Email: savchook.buy@gmail.com
- Phone: +38 (066) 212-84-27
- Address: 14 Alchevskykh St., Kharkiv, Ukraine