Privacy Policy

This Privacy Policy explains how personal data is collected, used, and shared when visitors interact with the website http://soywaxcraft.online and its services.​

Data controller and contact
The data controller for this website is Artem Bondarenko, operating the Soy Wax Candle Making Workshop project.​
Contact details for all privacy-related inquiries:

Email: [email protected]

Phone: +380665111608​

Address: Vladyslava Zaremby Lane, 40, Kyiv, Ukraine, 02000.​

Information collected
The website may collect the following categories of information:

Contact details that you voluntarily provide via forms, such as your name, email address, country, and message content.​

Technical and usage data such as IP address, browser type, device information, pages visited, time and date of visits, and referring URLs, which may be collected through cookies and similar technologies.​

Transaction-related data if the site offers paid products or services (such as workshop tiers or bundles), including information about selected products, currency, and order details; payment data is typically processed by third-party payment providers and not stored directly on this website.​

Use of information
Personal data may be used for the following purposes:

To respond to inquiries, provide customer support, and communicate about workshops, products, or services requested by you.​

To operate, maintain, and improve the website, content, and user experience, including monitoring usage patterns and troubleshooting technical issues.​

To manage orders, bookings, and access to any paid or restricted content, including administrative messages related to transactions where applicable.​

To comply with legal obligations, enforce terms, and protect rights, property, and safety.​

Cookies and similar technologies
The website may use cookies and similar tracking technologies to:

Enable core site functionality, such as navigation, form submission, and security.​

Analyze traffic and usage to understand how visitors interact with the website and to improve content and services.​

Support advertising or measurement tools from Google or other partners if implemented in the future; in such cases, additional notices, consent mechanisms, and opt-out options will be provided where required by law.​

You can manage or disable cookies through your browser settings, but some parts of the website may not function properly if certain cookies are disabled.​

Use of Google services
If Google services such as Google Analytics, Google Ads (including AdSense), or other Google products are implemented on this website, they may collect and process certain data as described in their own policies.​

Google may use cookies and identifiers to provide measurement services and serve ads, subject to its policies and applicable law.​

You can learn how Google uses data from sites and apps that use its services by visiting the page “How Google uses information from sites or apps that use our services.”​

Where required (for example under the GDPR, ePrivacy rules, or the Google EU User Consent Policy), the website will:

Obtain valid consent for the use of cookies or local storage and for the collection, sharing, and use of personal data for personalization of ads or analytics where applicable.​

Provide users with clear information about how cookies and personal data are used and how to withdraw consent.​

Legal bases for processing
Where applicable data protection laws require a legal basis, personal data may be processed on one or more of the following grounds:

Performance of a contract or steps taken at your request prior to entering into a contract (for example, when you book a workshop or purchase a bundle).​

Legitimate interests, such as improving the website, communicating with users, and preventing misuse, provided such interests are not overridden by your rights.​

Compliance with legal obligations to which the data controller is subject.​

Consent, where required for specific processing activities such as certain cookies, analytics, or marketing communications; when processing is based on consent, you may withdraw it at any time without affecting lawfulness before withdrawal.​

Data sharing and disclosure
Personal data may be shared with:

Service providers and technical partners who help operate the website, host content, process payments, provide analytics, or deliver communications, bound by appropriate data protection obligations.​

Professional advisers, authorities, or regulators where necessary to comply with law, respond to legal requests, or protect rights and safety.​

Personal data is not sold to third parties. If advertising or analytics services from third parties (including Google) are used, they may independently collect or receive information from the website and other sites and use that information as described in their own privacy policies.​

International data transfers
Depending on the hosting provider, email service, and external tools used, personal data may be transferred to and processed in countries other than your country of residence, including countries that may not provide the same level of data protection.​
Appropriate safeguards will be used where required by law, such as standard contractual clauses or similar mechanisms, and data will be protected in line with this Privacy Policy.​

Data retention
Personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:

Keeping contact and communication records for a reasonable period after the last interaction to handle follow-up questions or disputes.​

Retaining transaction-related information for as long as required by accounting, tax, or other applicable laws.​

When personal data is no longer needed, it will be deleted or anonymized in a secure manner where technically feasible.​

Your rights
Depending on your location and applicable laws, you may have some or all of the following rights regarding your personal data:

Right to access, rectification, and erasure of personal data.

Right to restrict or object to certain processing activities.

Right to data portability, where applicable.

Right to withdraw consent at any time where processing is based on consent.

Right to lodge a complaint with a competent data protection authority.​

To exercise any of these rights, contact the data controller using the contact details provided in this Privacy Policy.​

Children’s privacy
This website and its services are not directed to children under the age at which they can lawfully provide consent to data processing in their jurisdiction.​
The intention is not to knowingly collect personal data from children; if such data is discovered, reasonable steps will be taken to delete it as soon as practicable.​

Security
Reasonable technical and organizational measures are implemented to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.​
However, no method of transmission over the internet or electronic storage is completely secure, and absolute security cannot be guaranteed.​

Third-party links
The website may contain links to third-party sites, tools, or services (including payment processors, social media platforms, or external content providers) that are not controlled by this website.​
This Privacy Policy does not apply to those third parties, and visitors are encouraged to review the privacy policies of any external sites they visit.​

Changes to this Privacy Policy
This Privacy Policy may be updated from time to time to reflect changes in legal requirements, technologies, or the services offered through the website.​
The “last updated” date may be revised when changes are made, and continued use of the website after the posting of an updated Privacy Policy will constitute acceptance of those changes.​

Contact
For questions about this Privacy Policy or the handling of personal data, contact:

Email: [email protected]

Phone: +380665111608

Address: Vladyslava Zaremby Lane, 40, Kyiv, Ukraine, 02000.​