This Privacy Policy sets out how the TrueTool online store at https://truetool.com.ua (the "Website") processes and protects users' personal data. It is based on the Constitution of Ukraine, the Law of Ukraine "On Personal Data Protection" No. 2297-VI of 01.06.2010, the Law of Ukraine "On Electronic Commerce" and the Law of Ukraine "On Consumer Rights Protection".

1. Definitions

• Data controller (the "Controller", the "Store") — the business entity selling goods through the Website; its name and EDRPOU / tax ID are given on the Contacts page and in the documents for the goods.
• User — an individual who visits the Website, registers on it or places an order.
• Personal data — information about an individual who is or can be identified.
• Processing — any action with personal data, including collection, recording, storage, alteration, use, disclosure, anonymisation and destruction.
• Processor — a party processing personal data on the Controller's behalf (delivery services, banks and payment services, order management services).

2. Consent

By placing an order, registering, posting a review, requesting a callback or sending any other request, the User gives the Controller voluntary consent to process their personal data for the purposes set out in this Policy, in accordance with Article 11 of the Law "On Personal Data Protection". Users who disagree with this Policy should not use the Website's forms.

3. Data we process

• full name;
• phone number and e-mail;
• city, address, branch or parcel locker for delivery;
• for companies and sole proprietors — name and EDRPOU / tax ID;
• order contents, purchase history, reviews and requests;
• account data (login, encrypted password);
• technical data: IP address, browser and device type, cookies, pages viewed.

We do not collect or process payment card details: the User enters them on the secure page of the bank or payment service, and the Store has no access to them.

4. Purposes

• accepting, processing, paying for, delivering and returning orders and contacting the User about them;
• fulfilling warranty obligations and consumer protection requirements;
• arranging installment payments and issuing invoices;
• running the account, reviews, wish list and product comparison;
• accounting and tax records;
• sending order status updates and, with separate consent, information and marketing messages;
• analysing traffic and improving the Website.

5. Sharing with third parties

Personal data is shared only to the extent needed for these purposes:

• delivery services — Nova Poshta LLC, Ukrposhta JSC (name, phone, delivery address or branch);
• banks and payment services — PrivatBank JSC CB (LiqPay, installments), Universal Bank JSC (monobank) — data needed to process the payment or installment plan;
• the order management (CRM) service the Store uses to process orders;
• public authorities — in cases and in the manner provided by the laws of Ukraine.

The Controller does not sell personal data or share it with third parties for their marketing purposes.

6. Storage and protection

Personal data is kept as long as needed for the purposes of processing, but no longer than 5 years from the last order or request, unless a longer period is required by law (e.g. for accounting). Account data is kept until the account is deleted.

The Controller takes organisational and technical measures to protect personal data from unlawful processing, loss, destruction or unauthorised access: data transfer on the Website is protected by HTTPS, passwords are stored encrypted, and access to data is limited to staff who need it for their duties.

7. User rights

Under Article 8 of the Law "On Personal Data Protection", the User has the right to:

• know the sources of collection and location of their personal data, the purpose of processing and the third parties it is shared with;
• access their personal data;
• request correction or deletion of personal data that is processed unlawfully or is inaccurate;
• withdraw consent to processing;
• object to processing and protect their data from unlawful processing;
• complain to the Ukrainian Parliament Commissioner for Human Rights or to a court.

You can change your data in your account. To request information about your data, withdraw consent or delete your data, write or call us using the details on the Contacts page. We will reply within 30 calendar days.

8. Cookies

The Website uses cookies — small text files stored in the browser. They are needed for the cart, login, remembering the language and viewed products, and for traffic analysis. You can delete or block cookies in your browser settings, but some features may not work correctly.

9. Minors

The Website is not intended to collect data from persons under 14. If you learn that such data was provided without the consent of a parent or legal guardian, let us know and we will delete it.

10. Changes

The Controller may change this Policy. The new version takes effect when published on this page. We recommend reviewing the Policy periodically.

Version of 7 November 2026.