Privacy policy

Last updated: February 26, 2026

Hiddo Space (“Company”, “we”, “us”, “our”) operates this website and online store (the “Services”). We are committed to protecting your personal data and respecting your privacy rights.

This Privacy Policy explains how we collect, use, process, store, and disclose your Personal Data when you access or use our Services.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

Data Controller

For the purposes of applicable data protection laws, Hiddo Space acts as the Data Controller of your Personal Data.

Business address:
Volodymyra Stelmakha Street, Rivne, 33019, Ukraine

Email: hiddoservice@gmail.com

We determine the purposes and means of processing your Personal Data.

Relationship with Shopify

Our store is powered by Shopify Inc., which provides us with the e-commerce platform to sell our products.

In connection with the provision of our Services:

  • Shopify acts as a Data Processor in relation to certain categories of Personal Data.
  • Some data is processed directly by Shopify and its infrastructure providers.
  • Shopify may process Personal Data in countries other than your country of residence.

For more information about how Shopify processes Personal Data, please review:
https://privacy.shopify.com

Where Shopify processes Personal Data for its own business purposes (e.g., enhanced analytics or fraud prevention), Shopify acts as an independent controller.

Categories of Personal Data We Collect

We may collect the following categories of Personal Data:

Information You Provide Directly

  • Full name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information (processed securely via payment providers)
  • Account login credentials (if applicable)
  • Communications and support inquiries
  • Order details and transaction history

Information Collected Automatically

  • IP address
  • Device type and browser type
  • Operating system
  • Usage data (pages viewed, time spent, interaction patterns)
  • Cookies and similar tracking technologies

Information from Third Parties

  • Payment processors
  • Shipping carriers
  • Marketing and advertising partners
  • Shopify infrastructure

We do not knowingly collect personal data from children under 16 years of age.

Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the UK, we process your Personal Data under the following legal bases:

Contractual Necessity (Article 6(1)(b))

To:

  • Process and fulfill orders
  • Arrange delivery
  • Handle returns and refunds
  • Provide customer support

Legitimate Interests (Article 6(1)(f))

To:

  • Improve our Services
  • Prevent fraud
  • Secure our platform
  • Analyze website usage

We carefully balance our legitimate interests against your rights.

Consent (Article 6(1)(a))

Where required (e.g., marketing communications).
You may withdraw consent at any time.

Legal Obligation (Article 6(1)(c))

To comply with tax, accounting, and legal requirements.

How We Use Your Personal Data

We may use your Personal Data to:

  • Process payments and fulfill orders
  • Provide shipping and tracking
  • Communicate with you about your order
  • Respond to customer support requests
  • Prevent fraud and unauthorized activity
  • Comply with legal obligations
  • Improve our website and services

  • Send marketing communications (if consent provided)

We do not sell your Personal Data.

Disclosure of Personal Data

We may share your Personal Data with:

  • Shopify
  • Payment processors
  • Shipping and logistics providers
  • IT and hosting providers
  • Analytics providers
  • Marketing partners
  • Government or regulatory authorities where required by law

We may also disclose Personal Data in connection with:

  • Legal claims
  • Court orders
  • Mergers, restructuring, or business transfers

All third parties are required to process Personal Data in accordance with applicable data protection laws.

International Data Transfers

Your Personal Data may be transferred and processed outside your country of residence.

Where required by law, we rely on:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other legally recognized safeguards

Data Retention

We retain Personal Data only for as long as necessary to:

  • Fulfill orders
  • Comply with legal obligations
  • Resolve disputes
  • Enforce agreements

Retention periods depend on:

  • Legal requirements
  • Tax regulations
  • Warranty periods
  • Fraud prevention needs

Once data is no longer required, it is securely deleted or anonymized.

Data Security

We implement appropriate technical and organizational measures to protect Personal Data, including:

  • HTTPS encryption
  • Secure hosting via Shopify infrastructure
  • Restricted access on a need-to-know basis
  • Role-based access control

However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Privacy Rights

Depending on your location, you may have the following rights:

  • Right to access
  • Right to correction
  • Right to deletion
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent
  • Right to opt-out of targeted advertising (where applicable)

To exercise your rights, please contact:
hiddoservice@gmail.com

We may request identity verification before processing your request. We will respond within the timeframe required by applicable law.

Marketing Communications

You may opt out of promotional emails at any time by:

  • Clicking the “Unsubscribe” link in emails
  • Contacting us directly

Transactional communications (e.g., order confirmations) cannot be opted out of.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable website functionality
  • Analyze traffic
  • Improve user experience
  • Provide advertising

You can manage cookie preferences via your browser settings.

Children's Data

Our Services are not intended for individuals under the age of 16.
We do not knowingly collect Personal Data from children.

If you believe a child has provided Personal Data, please contact us.

Complaints

If you are located in the EEA or UK and believe we have not addressed your concerns, you have the right to lodge a complaint with your local data protection authority.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

The updated version will be posted on our website with a revised “Last updated” date.

Contact Information

Hiddo Space
Business address: Volodymyra Stelmakha Street, Rivne, 33019, Ukraine
Email: hiddoservice@gmail.com