Privacy Policy

Privacy Policy & International Data Protection Standards

Effective Date: October 2026

At KateDeal (katedeal.com), safeguarding the personal privacy, data confidentiality, and transactional integrity of our global visitors and customers is a core organizational commitment. This Privacy Policy details our practices regarding the collection, processing, protection, and storage of your information in strict accordance with the European Union General Data Protection Regulation (EU GDPR 2016/679) and applicable international data privacy standards.

For data protection inquiries, the Data Controller responsible for your personal information is the KateDeal Marketplace Platform Administration, operating via the KateDeal Logistics & Operational Hub, Uzhhorod, Zakarpattia Oblast, Ukraine (Contact: [email protected]).

1. Core Principles of Data Governance

We process all user records according to five foundational principles:

  • Lawfulness, Fairness & Transparency: Data is handled strictly with your informed consent or for the legitimate performance of a commercial sales contract.
  • Data Minimization: We request and process only the minimal data points necessary to process transactions, dispatch consignments, and provide technical assistance.
  • Purpose Limitation: Collected data is never sold, leased, or repurposed for unrelated third-party activities.
  • Storage Limitation: Personal identifiers are retained only as long as necessary for tax compliance, statutory warranty coverage, and dispute resolution.
  • Integrity & Confidentiality: All data transmissions are encrypted using industry-standard TLS/SSL protocols.

2. Categories of Information We Collect

  • Customer Identity & Order Fulfillment Data: Full name, shipping address, billing address, contact telephone number, and email address collected during checkout to execute delivery.
  • Financial & Payment Transaction Records: When you purchase goods, transaction tokens, transaction IDs, payment method types (e.g., Visa ending in 1234), and clearance timestamps are stored. Crucial Note: Raw credit card numbers, expiration dates, and CVV security codes are handled directly by PCI-DSS Level 1 certified gateways and are NEVER stored on KateDeal servers.
  • Technical & Browsing Telemetry: Anonymized IP addresses, browser types, device operating systems, referral sources, and page interaction timestamps recorded via server logs to prevent cyberattacks and optimize user experience.
  • Customer Service Communications: Records of support inquiries, warranty requests, and RMA communications transmitted via email or contact forms.

3. Legal Grounds for Processing (GDPR Article 6)

KateDeal processes your personal information on the following legal bases:

  • Contractual Performance (Art. 6(1)(b)): Necessary to generate commercial invoices, pick and pack items, route consignments via postal carriers, and deliver orders.
  • Legal & Statutory Obligations (Art. 6(1)(c)): Fulfilling accounting, customs export declaration, tax auditing, and product safety reporting duties.
  • Legitimate Commercial Interests (Art. 6(1)(f)): Monitoring platform health, fraud detection, preventing chargeback abuse, and ensuring cybersecurity.
  • Explicit Consent (Art. 6(1)(a)): For subscription to optional newsletters or analytical cookies, which may be withdrawn at any time.

4. Third-Party Data Disclosures & International Transfers

To deliver goods internationally, KateDeal shares strictly delimited data with trusted operational service providers:

  • Logistics & Postal Carriers: Licensed carriers (e.g., Nova Poshta, Ukrposhta, DPD, DHL, USPS) receive recipient names, destination addresses, and telephone numbers strictly for physical parcel delivery.
  • Licensed Payment Processors: Gateways (e.g., Stripe, PayPal, local acquiring banks) to authorize transactions securely.
  • Customs Authorities: Required export declaration documents (CN22/CN23) submitted to border customs authorities.

All third-party partners operate under formal Data Processing Agreements (DPAs) binding them to high security standards.

5. Cookies & Tracking Technologies

katedeal.com utilizes cookies to maintain operational functionality:

  • Essential / Strictly Necessary Cookies: Required for shopping cart persistence, session authorization, and security nonces. These cannot be disabled.
  • Functional Cookies: Retain selected language, currency preferences, and interface settings.
  • Analytical Cookies: Anonymized performance telemetry helping us measure page loading velocity and navigation patterns. Users may configure their browser preferences to reject non-essential cookies.

6. Your Statutory Rights Under GDPR

Regardless of your geographic location, KateDeal affords all users standard statutory data rights:

  • Right of Access: Request a digital copy of all personal records maintained in our systems.
  • Right to Rectification: Request correction of inaccurate or incomplete shipping or identity details.
  • Right to Erasure (“Right to be Forgotten”): Request complete deletion of your personal profile, subject to statutory tax and accounting retention requirements.
  • Right to Restrict or Object to Processing: Limit or object to specific processing activities.
  • Right to Data Portability: Obtain your records in a structured, commonly used, machine-readable format (JSON/CSV).

To exercise any of these rights, contact our Data Protection Officer at [email protected]. We process requests free of charge within 30 calendar days.

7. Data Security Safeguards

We deploy modern cybersecurity protocols, including end-to-end 256-bit TLS/SSL certificate encryption, web application firewalls (WAF), daily security patches, and strict administrative access controls restricted to authorized personnel.