PRIVACY POLICY — PERSONAL DATA PROCESSING AND PROTECTION

1. General Provisions

This Policy outlines how personal data is collected, processed, stored and protected by the Seller — owner of the website https://tajmahal-shop.com.ua, in compliance with the Law of Ukraine “On Personal Data Protection” and Google Ads requirements.

Key Definitions:

  • Personal Data — information about an identified or identifiable person;

  • Processing — any operation with data (collection, storage, use, transfer, etc.);

  • Data Subject — individual whose data is being processed;

  • Data Controller — entity defining the purpose and scope of data processing;

  • Consent — documented permission given voluntarily by the user.

2. List of Data Repositories

The Seller holds the following data sets:

  • Personal data of clients and contractors.

3. Purpose of Data Processing

We process data to:

  • fulfill orders;

  • handle payment transactions;

  • provide customer support;

  • meet accounting and tax regulations;

  • conduct marketing activities (only with explicit consent).

4. Processing Procedure

  • Data is collected only upon user’s consent;

  • Consent can be written or electronic (checkbox, “Agree” button, etc.);

  • User is informed about purpose, scope, and method of processing;

  • Special categories of data (health, religion, etc.) are not processed.

5. Data Storage Location

Data is stored at the seller’s business address and/or on secure hosting servers.

6. Third-Party Disclosure

  • Data may be shared with third parties only for:

    • payment and delivery services;

    • compliance with legal requirements;

  • All parties must ensure proper data protection.

7. Data Security

  • Technical and organizational safeguards applied (SSL, limited access, backups);

  • A responsible data officer is appointed;

  • Staff must follow internal data privacy procedures;

  • Data retention is limited to the time needed for the intended purpose.

8. Data Subject Rights

Users have the right to:

  • know what data is collected and stored;

  • request data correction or deletion;

  • object to data processing;

  • file complaints with supervisory authorities.

9. Handling Requests

  • Requests are reviewed within 10 business days;

  • Full response is given within 30 calendar days;

  • Denial is possible only on legal grounds.

10. Data Registry

If required, data is registered with official authorities per Ukrainian legislation.