About us
Payment & Shipping
News
Wholesale
Contacts
Last updated: 25.09.2026.
This page explains what data we receive when you use abrisart.com and buy from us, why we need it, who we share it with and how you can control it. Plain language, legal formulas only where they are genuinely needed.
1. Who processes your data
abrisart.com belongs to the Abris Art brand. Address: 15 Berehivska-Bichna St., Mukachevo, Ukraine. For any question about your data, write to [email protected] with "Personal data" in the subject line, or call +380 93 972 23 07.
2. What data we receive and why
| Data | Why |
|---|---|
| Name, phone, e-mail, delivery address or carrier branch, order comment | To process and deliver your order and contact you about it |
| Account: e-mail, password (stored encrypted only), order history | Signing in, purchase history, faster checkout |
| Payment data: amount, status, payment number | To take payment and make refunds. We never see or store your card number: the payment provider handles it |
| Enquiries: e-mails, website chat, calls, messenger messages | To answer your questions and handle requests |
| Newsletter subscription: e-mail | To send news and offers, only if you subscribed |
| Technical data: IP address, device and browser type, pages viewed, where you came from (including ad parameters such as gclid, fbclid, utm) | Site security, spam and fraud protection, stable operation, understanding which ads bring customers |
| Analytics and advertising data (see sections 9 and 10) | Statistics, improving the site, measuring advertising |
3. Legal basis
- Contract. Without your name, phone and address we cannot deliver your order.
- Law. We are required to keep accounting and tax records.
- Your consent. Newsletters. You can withdraw consent at any time; this does not affect anything done before.
- Legitimate interest. Protecting the site from abuse, analytics, measuring advertising, messages about your orders. We do this within reasonable limits and with respect for your privacy.
4. E-mail
We use the address you give when registering or ordering for service e-mails: order confirmation, payment and delivery information, sign-in details and password recovery.
We may also send other messages related to your orders and service, such as a reminder about an unfinished order or a request to rate your purchase. You can opt out of these at any time by writing to us. News and offers go only to newsletter subscribers; you can unsubscribe through the link in any e-mail.
To deliver e-mails we use mail services (Google) that process your address for this purpose only.
5. Who we share data with
Only with those who help us fulfil orders, run the site and measure advertising, and only as much as needed. We do not sell your data.
| Who | What for |
|---|---|
| Nova Poshta, Ukrposhta, other carriers for international parcels | Delivery: recipient's name, phone and address |
| WayForPay | Card payments, Apple Pay, Google Pay |
| Hetzner (Germany) | The server the site runs on |
| Cloudflare | Site protection and speed, backups |
| Google (Gmail / Workspace) | Sending e-mails |
| MoySklad | Order and stock management |
| HelpCrunch | Support chat on the site |
| Google (Analytics, Tag Manager, Ads) | Visit statistics, measuring advertising |
| Meta (Facebook, Instagram) | Measuring advertising effectiveness |
| Microsoft Clarity | Usability analysis |
| The marketing agency that sets up our advertising and analytics | Sending purchase data to ad platforms (see section 10), under contract and for this purpose only |
| State authorities | Only when the law requires it |
6. Transfers outside the EU
Some of these services (including Google, Meta, Microsoft, Cloudflare and HelpCrunch) may process data in the USA or other countries outside the EU. Our team, accounting and warehouse are in Ukraine. We only use services that apply safeguards recognised in the EU, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
7. How long we keep data
- Orders, payments and accounting records: up to 10 years, as accounting and tax rules require.
- Account: while it is active and up to 3 years after your last activity; then we delete or anonymise it. You can ask us to delete it earlier.
- Enquiries and correspondence: up to 3 years after the last contact.
- Newsletter subscription: until you unsubscribe.
- Analytics data: up to 26 months.
- Server logs and backups: for the limited time needed for security and recovery, usually up to 12 months.
8. Your rights
You can:
- find out what data we hold about you and get a copy;
- correct inaccurate data (much of it you can edit yourself in your account);
- ask us to delete your data, except what the law requires us to keep;
- restrict or object to processing, including the use of your data to measure advertising;
- receive your data in a convenient machine-readable format;
- unsubscribe from the newsletter at any time.
Write to [email protected] and we will reply within 30 days. To protect your data we may ask you to confirm that the request really comes from you. You also have the right to complain to the data protection authority in your country.
9. Cookies
Cookies are small files a website stores in your browser. Necessary cookies keep your basket, your sign-in and your chosen language and currency. Analytics and marketing cookies help us count visits and understand which advertising works. You can block or delete cookies in your browser settings; without the necessary cookies the basket and sign-in will not work properly.
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
| OCSESSID | Necessary | Basket, sign-in, checkout | until the browser is closed |
| language, currency | Necessary | Chosen language and currency | 30 days |
| utm_*, first_referrer, last_referrer, remarketing_cid, sp_remarketing_bot | Order analytics | Where you came from, to link an order to its source | 1 day to 12 months |
| _ga, _ga_* | Analytics (Google) | Visit statistics | up to 13 months |
| _gcl_au, _gcl_aw | Marketing (Google Ads) | Measuring advertising | up to 90 days |
| _fbp, _fbc | Marketing (Meta) | Measuring advertising | up to 90 days |
| _clck, _clsk, MUID | Analytics (Microsoft Clarity) | Usability analysis | up to 13 months |
| helpcrunch* | Functional (HelpCrunch) | Support chat and conversation history | up to 12 months |
10. Analytics and advertising
Microsoft Clarity shows how visitors use the site: page views, clicks, scrolling, technical errors and session recordings. Input fields and checkout data are masked and are not sent to Clarity.
Google Analytics 4 and Google Ads receive technical and behavioural events about site use and purchases: pages, products, amount, currency and order number. We use this data for statistics and to evaluate advertising channels.
Meta Pixel and Conversions API. Meta may receive events for product views, adding to basket, checkout and purchase.
Server-side purchase data. So that Meta and Google Ads can see purchases even when the browser did not report them (an ad blocker, a closed tab), data about retail purchases is also sent from our server. Along with products, amount, currency and order number, this may include advertising identifiers (such as gclid, _fbp, _fbc), the IP address and browser type at the time of the order, and your e-mail and phone number in hashed (SHA-256) form. A hash is a one-way code: your address or number cannot be recovered from it; it is used only to match a purchase with the advertising you saw. Your plain e-mail and phone are never sent to ad platforms. You can object to this processing by writing to us (section 8).
11. Children
The site is not intended for anyone under 16, and we do not knowingly collect their data. If you believe a child has given us their data, write to us and we will delete it.
12. Security
We transfer data only over an encrypted connection (HTTPS), store passwords encrypted, limit access to the staff who need it for their work, and make regular backups.
13. Changes to this policy
We may update this policy. The current version is always on this page, with the update date at the top.