Privacy Policy

We respect your privacy and protect your personal data. As part of our commitment to trust and transparency, we collect and process your information only in accordance with this Privacy Policy. We comply with all relevant data protection laws (such as the EU’s GDPR and Ukraine’s data protection regulations) to ensure your data is safe and used fairly.

Data We Collect:

Personal Identifiers: When you create an account or place an order, we collect your name, billing/shipping address, email address, and phone number. This information is necessary to process transactions and deliver products.

Payment Information: We collect only the data needed to complete payments (e.g. credit card details). We do not store full payment card numbers on our servers. Payment processing is handled securely through trusted payment gateways.

Order History: We record details of your purchases (items, dates, prices) to manage orders, returns, and customer support. This also helps us recognize you as a returning customer.

Technical Data: When you visit our website, we collect usage data such as IP address, browser type, device information, and browsing behavior (pages viewed, time spent). This helps us optimize our site and personalize your experience.

Cookies and Tracking: We use cookies and similar technologies (see Cookie Policy below) to remember your preferences, login status, and shopping cart, and to provide a smoother experience. You can disable cookies if you wish (though the site may be less convenient).

Marketing Preferences: If you choose to receive our newsletters or offers, we’ll keep records of your communication preferences. You may opt out at any time.

How We Use Your Data:

Order Fulfillment: Your data is used to process and ship your orders. For example, we use your address for delivery and your email to send order confirmations.

Customer Support: We use your data to handle service requests, returns, or complaints. Having your history and contact details lets us serve you efficiently.

Website Improvements: Technical and usage data help us analyze site performance, troubleshoot issues, and enhance user experience.

Marketing (with Consent): If you opted in, we may send you promotional offers or newsletters. You can unsubscribe at any time. We never sell your data to outside marketers.

Legal Compliance: We may use your information to comply with legal obligations (e.g. tax records, regulatory requirements).

Data Sharing:
We do not share your personal information with unaffiliated third parties. We only disclose data to:

Service Providers: Trusted third parties who help us operate (e.g. payment processors, shipping couriers, IT services). They only receive the information necessary to perform their function, and are contractually bound to protect it.

Legal Authorities: When required by law, we may share data with government authorities (e.g. in response to a subpoena or investigation).

Group Companies: We may share information within our corporate family for legitimate business purposes (like shared customer support teams), with safeguards in place.

Your Rights:
In line with data protection laws, you have rights regarding your personal data:

Access & Portability: You can request a copy of your data or have it transferred to another provider.

Correction: If any of your data is incorrect, let us know and we will update it.

Deletion: You can ask for your personal data to be erased (with limited exceptions).

Restriction or Objection: You can request that we stop processing your data for certain purposes (like marketing).

Withdraw Consent: If you have given consent for specific uses (e.g. newsletters), you can withdraw it anytime.

Right to Lodge Complaint: If you believe we mishandled your data, you may contact us or a data protection authority to complain.

To exercise any of these rights, please contact our Data Protection Officer at privacy@luxdutyfree.ua. We aim to respond to all legitimate requests promptly.

Security: We implement industry-standard security measures (encryption, firewalls, access controls) to protect your data. Our websites use HTTPS to secure data in transit. Only authorized personnel may access personal data, and we monitor for unauthorized activity. We strive to retain data only as long as necessary (usually 3–5 years after last interaction) and then securely delete it.

For more details, you can request our full Privacy Notice. By shopping with us or using our website, you consent to the data practices described here. You agree to the collection and use of your data under this Privacy Policy.