DELIYA Jewelry

Privacy Policy

Last updated: 22 October 2026

We collect only what we need to make and deliver your order. We never sell your data.

1. Who is responsible

The controller of your personal data is Kostiantyn Denysov, Ukrainian sole proprietor (FOP), vul. Kulisha 3a, apt. 128, 73000 Kherson, Ukraine. For any privacy question write to deliyajewelry@gmail.com.

2. What we collect and why

  • Order details — name, email, delivery address, optional phone and note, the pieces you bought. We need them to process, ship and support your order (performance of a contract, GDPR Art. 6(1)(b)) and to keep sales records required by accounting and tax law (Art. 6(1)(c)).
  • Payment — handled by PayPal. We receive the transaction ID, status and the payer details PayPal shares with sellers. We never see your card number.
  • Emails you send us — to answer you (Art. 6(1)(b) or our legitimate interest in replying, Art. 6(1)(f)).
  • Technical data — your IP address is saved with an order, and our server keeps short technical logs, to prevent fraud and keep the shop secure (legitimate interests, Art. 6(1)(f)).

3. Cookies

The shop needs these cookies to work; they are always on:

  • deliya — keeps your cart and checkout session; set only when you add something to the cart; expires after 30 days.
  • cart_count — the number of items shown on the cart icon; 30 days.

With your consent only, we also use Google Analytics 4 (Google Ireland Limited) to understand how visitors use the shop — pages viewed, products added to the cart, completed orders. It sets the cookies _ga and _ga_* (up to 2 years). We do not use advertising features. The legal basis is your consent (GDPR Art. 6(1)(a)); you can change your choice at any time via Cookie settings at the bottom of every page. Google may process data in the United States under the EU–US Data Privacy Framework.

4. Who receives your data

  • PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A. and its group) — to process your payment, as an independent controller under its own privacy policy.
  • Hetzner Online GmbH, Germany — hosts our website and database.
  • Postal and courier services — receive your name, address and, if given, phone to deliver your parcel.
  • Google (Gmail) — our mailbox, where your messages to us are stored; and Google Analytics, only if you accept analytics cookies.
  • Authorities, only where the law requires it.

We are a small business registered in Ukraine. Where your data is handled by us outside the European Economic Area, this is necessary to perform our contract with you (GDPR Art. 49(1)(b)).

5. How long we keep it

  • Order and sales records — as long as accounting and tax law requires (usually several years after the order).
  • Emails — up to 2 years after our last conversation, unless they are part of order records.
  • Unpaid checkouts — deleted within 90 days.
  • Server logs — a few weeks.

6. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Just email us — we answer within one month. You can also complain to the data protection authority in your country.

7. Changes

We will update this page when the way we handle data changes. The date at the top shows the latest version.