Privacy policy
This Privacy Policy describes how CORSIS collects, uses, stores, and shares users’ personal data when they visit corsis.com.ua, place orders, use website features, or otherwise interact with us.
The owner and controller of personal data is:
LIMITED LIABILITY COMPANY “CORSIS BRAND”
EDRPOU Code: 46317817
Address: 17 Kurenivskyi Lane, Kyiv, 04073, Ukraine
Email: info@corsis.com.ua
CORSIS Contact Page
Personal data is processed in accordance with applicable Ukrainian legislation, including the Law of Ukraine “On Personal Data Protection” and, where applicable, the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
1. Personal Data We Collect
The amount and type of data we collect depends on how you interact with CORSIS.
We may collect the following categories of information:
first and last name;
phone number;
email address;
country, city, delivery address, postal code;
information about the selected delivery branch or parcel locker;
information about orders, purchased products, order amounts, and order history;
information required for payment and payment confirmation;
information about returns, exchanges, and customer support requests;
information you voluntarily provide to us through correspondence or forms on the website.
We may also automatically receive technical information when you use the website, including:
IP address;
device type;
browser type and version;
operating system;
approximate location determined from technical data;
information about pages visited and interactions with the website;
cookies and similar identifiers.
2. Sources of Personal Data
We may obtain personal data:
directly from you when you place an order or contact us;
automatically when you use the website;
from Shopify and other technology providers that support the operation of the website;
from payment providers;
from delivery services;
from analytics, advertising, and marketing services where their use is permitted under your privacy settings and applicable law.
3. How We Use Personal Data
We may process personal data for the following purposes:
Order Fulfillment
For:
accepting and processing orders;
confirming payments;
manufacturing and preparing products;
arranging delivery;
providing information about order status;
processing returns, exchanges, and refunds.
Customer Service
For:
responding to your inquiries;
resolving questions regarding products, orders, delivery, and returns;
maintaining necessary communication with customers.
Security and Fraud Prevention
For:
protecting the website and user accounts;
detecting suspicious or unlawful activity;
preventing fraudulent payments and abuse.
Compliance with Legal Obligations
For:
accounting and tax purposes;
complying with legal requirements;
handling claims and disputes;
responding to lawful requests from government authorities.
Marketing and Advertising
Where we have an appropriate legal basis, we may use your contact information and information about your interactions with the website for:
sending information about products, news, offers, and promotions;
personalizing marketing communications;
measuring the effectiveness of advertising campaigns.
You may unsubscribe from marketing emails at any time by using the unsubscribe link included in the message.
Unsubscribing from marketing communications does not affect service-related communications necessary to fulfill your order.
4. Legal Bases for Processing
Depending on the circumstances, we process personal data on the following legal bases:
the necessity to perform a contract with you or to take steps before entering into a contract;
compliance with legal obligations;
your consent, where required;
CORSIS’s legitimate interests, including ensuring security, providing customer support, and developing and improving the website, provided that such interests do not override your rights and freedoms.
For users to whom the GDPR applies, the relevant legal bases are determined, in particular, under Article 6 of the GDPR.
5. Shopify
Our online store operates on the Shopify platform.
Shopify provides us with the technological infrastructure necessary to operate the website, process orders, and provide other store functions and, in connection with these services, may process users’ personal data.
In certain circumstances, Shopify may act as our data processor and, in other circumstances, as an independent controller in accordance with its own terms and policies.
Additional information about Shopify’s processing of personal data can be found in Shopify’s privacy policies.
6. Payments
Payments for orders are processed through payment services available on the website during checkout.
To process a payment, the relevant payment provider may receive and process:
payment card details or other payment information;
payer’s name;
billing address;
payment amount and currency;
information necessary to verify and confirm the transaction.
CORSIS does not store full payment card details where such information is processed directly by the relevant payment provider.
7. Delivery
To fulfill an order, we may provide delivery services with the information necessary to transport and deliver the shipment, including:
first and last name;
phone number;
address or selected branch/parcel locker;
city, country, and postal code;
other information required by the relevant carrier.
Such delivery services may include Nova Poshta, Nova Post, Ukrposhta / EMS, and other carriers available during checkout.
8. Cookies and Tracking Technologies
CORSIS uses cookies and similar technologies for:
operating the website;
saving user preferences;
operating the shopping cart and checkout;
ensuring security;
analytics;
marketing and advertising, where permitted by the relevant privacy settings.
Some cookies are necessary for the website to function and cannot be disabled without affecting certain website functionality.
Optional analytics and marketing technologies are used in accordance with applicable law and your consent preferences.
You can also manage cookies through your browser settings and the privacy management tools available on the website.
9. Who We May Share Personal Data With
We may share personal data, only to the extent necessary for the relevant purpose, with the following categories of recipients:
Shopify and technology providers;
payment providers;
banks and financial institutions;
delivery services and logistics partners;
hosting, IT, and cloud service providers;
analytics services;
marketing and advertising platforms;
consultants, auditors, and other professional service providers;
government authorities where disclosure is required by law.
We do not disclose personal data to third parties without an appropriate legal basis.
10. International Data Transfers
Some of our service providers, including Shopify and other technology partners, may process data in other countries.
In such cases, personal data may be transferred outside your country of residence.
Where the GDPR applies to such transfers, we use or rely on legally recognized mechanisms for protecting international data transfers, including adequacy decisions, Standard Contractual Clauses, or other lawful mechanisms.
11. Retention of Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected, including:
fulfilling orders;
maintaining accounting and tax records;
complying with legal obligations;
resolving disputes;
protecting CORSIS’s legitimate interests.
Retention periods may vary depending on the category of data and applicable legal requirements.
After the applicable retention period expires, data is deleted, anonymized, or otherwise handled in accordance with applicable law.
12. Security
We implement reasonable organizational and technical measures to protect personal data against:
unauthorized access;
loss;
misuse;
alteration;
disclosure or destruction.
However, no method of transmitting or storing information can guarantee absolute security.
13. User Rights
Depending on applicable law, you may have the right to:
know the sources from which your personal data is collected and where it is stored;
receive information about the conditions for accessing your personal data;
access your personal data;
request correction of inaccurate or outdated data;
request deletion of data where provided by law;
request restriction of processing;
object to certain types of processing;
withdraw consent where processing is based on consent;
receive your data in a portable format where such a right is provided by applicable law;
lodge a complaint with the competent data protection authority.
The exercise of certain rights may be restricted where retaining or processing data is necessary to comply with our legal obligations or protect legitimate rights.
To exercise your rights, you may contact CORSIS Customer Support or email us at info@corsis.com.ua.
14. Marketing Communications
If you have consented to receive marketing communications, or where we have another appropriate legal basis, CORSIS may send you information about new products, offers, and other marketing materials.
You may unsubscribe from such communications at any time using the unsubscribe link or by contacting CORSIS Customer Support.
15. Children’s Data
The CORSIS website and products are not specifically intended for children.
We do not knowingly seek to collect personal data from children without an appropriate legal basis or the necessary consent of a parent or legal guardian where such consent is required by law.
If you believe that a child has improperly provided us with personal data, please contact CORSIS Customer Support or email us at info@corsis.com.ua.
16. Third-Party Websites
The website may contain links to third-party websites and services.
CORSIS does not control the privacy practices of such third-party resources. Before providing them with personal data, we recommend reviewing their respective privacy policies.
17. Changes to This Policy
We may periodically update this Privacy Policy due to changes in:
applicable laws;
website functionality;
our personal data processing practices;
the services and providers we use.
The current version will always be published on the website with the date of the latest update.
18. Contact Information
For any questions regarding this Privacy Policy, the processing of personal data, or the exercise of your rights, please contact:
LLC “CORSIS BRAND”
EDRPOU Code: 46317817
Address:
17 Kurenivskyi Lane, Kyiv, 04073, Ukraine
Email: info@corsis.com.ua