Privacy Policy

Last updated: 20.10.2025

This Privacy Policy describes how “Kruta Para - European Stock Shoe Store” (“Kruta Para”) processes personal data of users of the website krutapara.com. The platform operator is “StaQable Solutions LLC” (“StaQable”), which provides the technological infrastructure.

3. Purposes and legal bases

As of the update date of this Policy, the draft Law of Ukraine “On Personal Data Protection” (reg. No. 5628) has not been adopted and was removed from consideration on 16.08.2022 (see official card: No. 5628). Until new legislation is adopted, we process personal data in accordance with current Ukrainian law, while applying principles aligned with GDPR as an industry best practice and preparation for future harmonization.

Below are the processing purposes with indicative GDPR bases (for reference):

• Providing the service and performance of the purchase agreement (indicatively: Art. 6(1)(b) GDPR).
• Processing payments and logistics via subcontractors (indicatively: Art. 6(1)(b) and 6(1)(f) GDPR).
• Support, communication, handling requests (indicatively: Art. 6(1)(b) and 6(1)(f) GDPR).
• Marketing (with consent) — newsletters, personalization (indicatively: Art. 6(1)(a) GDPR).
• Analytics and security (legitimate interest) (indicatively: Art. 6(1)(f) GDPR).

4. Data sharing

Data may be processed under data processing agreements by the following categories of recipients:

• Payment providers and banks.
• Logistics/postal services (e.g., “Nova Poshta”).
• IT infrastructure providers (hosting, CDN, analytics).
• Customer service partners (chat, call center).
• Platform operator StaQable (development, support, security).

5. Storage and processing location

Personal data is stored encrypted in the European Union (Frankfurt, Germany). Where necessary and based on lawful requests or for contract performance, data may be provided/transferred to Ukraine in compliance with applicable law and appropriate technical and organizational security measures.

6. Data retention

We retain data only as long as necessary for the purposes of processing and legal requirements. Indicative terms: order data — up to 5 years; account data — while the account is active; marketing — until consent is withdrawn.

7. Cookies and similar technologies

We use cookies for authorization, preference storage, analytics and marketing. Cookie management is available via browser settings and a consent banner (where applicable).

8. Data subject rights

• Access, rectification, deletion.
• Restriction of processing and objection.
• Data portability.
• Withdrawal of consent (for consent-based processing).
• Complaint to a supervisory authority.

To exercise your rights — contact: support@krutapara.com.

9. GDPR status in Ukraine and readiness

As of the update date of this Policy, the draft Law of Ukraine “On Personal Data Protection” (reg. No. 5628) has not been adopted and was rejected/removed on 16.08.2022. Details and chronology are available on the Verkhovna Rada of Ukraine website (bill card No. 5628). Meanwhile, we align our data protection approach with EU requirements (including GDPR) to be prepared for future changes in Ukrainian law.

10. Security

We apply technical and organizational security measures (encryption, access control, monitoring). However, no internet service can guarantee absolute security.

11. Children

Our services are not intended for persons under 16. We do not knowingly collect personal data of children.

12. Policy changes

We may update this Policy from time to time. The current version is available on this page; the update date is shown above.

13. Contacts

For privacy questions: support@krutapara.com. Platform operator: StaQable Solutions LLC.