Privacy Policy

This Privacy Policy explains what personal data Sole proprietor Oleh Kreminskyi (“we”, the “Controller”) collects on biotonika.com.ua and in the NSP online shop, why and how we process it, and what rights you have. Processing follows the Law of Ukraine “On Personal Data Protection”.

1. What we collect

• Orders: name, phone, e-mail (optional), city and branch/delivery address, order contents, payment method, comment.
• Product-selection quiz: your answers, including any well-being or health details you choose to give. We process them only with your separate consent in the quiz form and pass them only to the product consultant.
• Enquiries: site chat messages, consultation requests, e-mails and calls.
• Technical data: IP address, device and browser type, pages viewed, traffic source (ad campaign), cookies.
• Customer account: your phone number — to sign in with an SMS code or through Telegram (we store no passwords) and to find your orders; name, e-mail, default city and branch — if you choose to add them; date of birth — optional, used only for a birthday promo code; the id of your chat with our Telegram bot — only if you connected it for order notifications (/stop in the bot ends mailings). The account and profile are deleted at your request; order records are then anonymised and kept as primary documents (section 6).

2. Why

• performing the sale agreement: order processing and delivery, payment, fiscal receipt, status notifications (SMS, e-mail);
• consultation and product selection at your request;
• answering enquiries, support;
• accounting and reporting required by law;
• traffic analytics and ad measurement — with your cookie consent.

3. Legal basis

Conclusion and performance of a contract (orders), your consent (quiz, cookies and marketing technologies), our legal obligations (tax and accounting records).

4. Who receives data

Only parties without whom an order or request cannot be fulfilled: Nova Poshta (delivery: name, phone, branch/address), NovaPay (card payments; we never receive card data), Checkbox (fiscal receipts), TurboSMS (status SMS), the telecom and e-mail providers, the NSP warehouse (order number and parcel contents), and Meta, Google, TikTok — anonymised technical data for analytics and advertising with your cookie consent. We do not sell personal data.

5. Cookies and tracking

The Site uses necessary cookies (cart, language, cookie consent) and, with your consent, analytics and advertising ones: Google Analytics and Google Ads (_ga, _gcl_*), Meta Pixel (_fbp), TikTok Pixel (_ttp), and a traffic-source cookie (bt_src). You can withdraw consent by clearing browser cookies or changing your choice in the banner; refusing does not affect ordering.

6. Retention

Order data is kept for the periods required for primary documents and tax records (3 years from the order), quiz answers and correspondence up to 1 year after the last contact, technical logs up to 90 days, unless the law requires otherwise.

7. Where data is stored

The Site and its database are hosted on servers in the European Union (Germany). Only the Controller and authorised staff (manager, consultant) have access within their duties; access is protected by passwords and HTTPS encryption.

8. Your rights

You may know what data we process, obtain a copy, request correction or deletion, withdraw consent, object to processing, and complain to the Ukrainian Parliament Commissioner for Human Rights. Write to [email protected] or call 0 800 339 015. We reply within 30 days.

9. Children

The Site is not intended for persons under 18; we do not knowingly collect their data.

10. Changes

We may update this Policy; the new edition is published on this page with its date.