Privacy Policy

 

This Privacy Policy describes how FOP Sakhman Vasyl Stepanovich ("we", "us", "our") collects, uses, processes, stores, and protects personal data of users ("User", "you") when you access or use the website of the online store https://granitlegion.com (the "Website").

This Privacy Policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR), UK GDPR and the Data Protection Act 2018, and applicable United States privacy laws, including the California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA).

1. Definitions

Administration / Data Controller — authorized representatives of the online store who act on behalf of the Company, determine the purposes and means of processing personal data, and are responsible for compliance with applicable data protection laws.

Personal Data — any information relating to an identified or identifiable natural person.

Processing — any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, organization, storage, use, disclosure, restriction, erasure, or destruction.

User — any individual who accesses the Website via the Internet and uses its services and functionality.

Cookies — small text files stored on the User’s device to ensure proper functioning of the Website and for analytics purposes.

IP Address — a unique network identifier assigned to a device connected to the Internet.

2. General Provisions

By accessing or using the Website, the User confirms that they have read, understood, and agreed to this Privacy Policy and to the processing of their Personal Data.

If the User does not agree with this Privacy Policy, they must discontinue use of the Website.

This Privacy Policy applies solely to this Website. We are not responsible for the privacy practices of third-party websites accessible via external links.

3. Categories of Personal Data

We may collect and process the following Personal Data provided by the User:

  • Full name;
  • Telephone number;
  • Email address;
  • Billing and delivery address;
  • Place of residence.

We may also automatically collect technical data, including IP address, cookies, browser type, device information, and access time.

4. Legal Basis for Processing (EU & UK)

Personal Data is processed only where one or more of the following legal bases apply:

  • User consent;
  • Performance of a contract;
  • Compliance with legal obligations;
  • Legitimate interests, provided they do not override User rights.

The User may withdraw consent at any time.

5. Purposes of Processing

  • User registration and account management;
  • Order processing and fulfillment;
  • Processing card payments via third-party providers, including LiqPay;
  • Delivery of goods;
  • Customer support and communication;
  • Fraud prevention and security;
  • Transactional notifications;
  • Marketing communications (subject to consent);
  • Analytics and Website improvement;
  • Compliance with legal requirements.

6. Cookies

We use cookies and similar technologies to ensure Website functionality, analyze usage, and improve user experience. Users may control cookies through browser settings or consent tools.

7. Data Sharing

We do not sell Personal Data.

Personal Data may be shared with:

  • Payment service providers, including LiqPay;
  • Hosting, IT, analytics, and delivery service providers;
  • Courier and postal services;
  • Government authorities, where required by law;
  • Third parties in connection with corporate transactions.

8. International Data Transfers

Personal Data may be transferred outside the User’s country of residence, including outside the EU or UK. In such cases, appropriate safeguards such as Standard Contractual Clauses are applied.

9. Data Retention

Personal Data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

10. User Rights

EU & UK Users have the right to access, rectify, erase, restrict, or object to processing of their Personal Data, as well as data portability and the right to lodge a complaint with a supervisory authority.

US Users may have the right to know what data is collected, request deletion, opt out of data sharing, and not be discriminated against for exercising privacy rights.

11. Data Security

We apply appropriate technical and organizational measures to protect Personal Data. Payment transactions are processed securely via certified providers (including LiqPay). We do not store full card numbers or CVV codes.

12. Children’s Privacy

The Website is not intended for children under 13 (or under 16 in the EU/UK). We do not knowingly collect Personal Data from children.

13. Limitation of Liability

To the maximum extent permitted by law, we are not liable for indirect or consequential damages arising from the use of the Website.

14. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes become effective upon publication on the Website.

15. Contact Information

If you have questions regarding this Privacy Policy, please contact us at:

Email: granitlegion@gmail.com