Privacy policy

Last updated: 10 July 2026.

VDOMA operates this store and website, including all information, content, features, tools, products and services connected with them, in order to give you, the customer, a carefully curated shopping experience (the "Services"). Our brand marketplace is based in Ukraine: the products come from Ukrainian brands and boutiques, and orders are dispatched to you from there. This Privacy Policy describes how we collect, use and disclose your personal data when you visit the site, use the Services, make a purchase or another transaction, or otherwise contact us. In the event of any conflict between our Terms of Use and this Privacy Policy, this Policy prevails in respect of the collection, processing and disclosure of personal data.

Please read this Privacy Policy carefully. By accessing and using the Services, you confirm that you have read this Policy and understand how your information is collected, used and disclosed.

We process personal data in accordance with the personal data protection legislation of Ukraine and, for customers located in the European Union and the European Economic Area, also in accordance with the General Data Protection Regulation (GDPR).

WHAT PERSONAL DATA WE COLLECT AND PROCESS

When we use the term "personal data", we mean information that identifies you or another person, or that can reasonably be linked to them. The scope of the data depends on how exactly you use the Services.

• Contact and account details: first name and surname, email address, telephone number, date of birth, gender, and also your body measurements and size preferences if you have entered them in your profile.

• Order data: delivery address, the contents and value of the order, the delivery and payment methods chosen, order history, the contents of your bag and wishlist, and return and exchange enquiries.

• Payment data: the amount, identifier and outcome of the transaction. We do not collect or store your card details — you enter them on the payment provider's side.

• Subscription data: email address, newsletter language, and the date and IP address from which consent was given.

• Enquiry data: the content of your correspondence with our support team, including any attached files and photographs of the product.

• Referral programme data: details of the invitations you have sent to friends and whether they have taken up the invitation. If you give us another person's contact details, please make sure they do not mind receiving an email from us.

• Technical data: IP address, browser and device type and version, operating system, interface language, pages viewed, date and time of visit, cookie identifiers.

We do not collect special categories of data — concerning health, religious beliefs, political opinions and the like — and we ask you not to include them in your enquiries to us.

WHERE THIS DATA COMES FROM

• Directly from you: when you create an account, place an order, complete your profile, subscribe to the newsletter or contact support.

• Automatically: when you browse pages — through cookies and server logs.

• From those who help us fulfil your order: payment providers tell us the outcome of the payment, delivery services tell us the status of the shipment, and partner brands tell us about product availability and dispatch.

HOW WE USE YOUR DATA

We use data only where we have a legal basis for doing so. The purposes and the legal basis for each of them are set out below.

• Registration, signing in to your account and maintaining your profile. Legal basis — performance of a contract with you.

• Placing, processing and delivering orders and informing you of their status. Legal basis — performance of a contract with you.

• Taking payment and refunding money. Legal basis — performance of a contract with you.

• Customer support and the handling of returns, exchanges and complaints. Legal basis — performance of a contract with you and our legitimate interest in providing a quality service.

• Accounting and tax records and the issuing of settlement documents. Legal basis — compliance with the requirements of the law.

• Sending news, promotions and personalised offers. Legal basis — your consent, which you may withdraw at any time.

• Traffic analytics, improving how the site works and fixing errors. Legal basis — our legitimate interest in developing the service and, for optional cookies, your consent.

• Personalising the storefront, recommendations and advertising. Legal basis — your consent given in the cookie settings.

• Operating the referral programme: sending invitations and crediting discounts to you and your friends. Legal basis — your consent and performance of a contract with you.

• Ensuring security and preventing fraud and abuse. Legal basis — our legitimate interest in protecting customers and the Services.

We do not take decisions in relation to you that produce legal effects and are based solely on automated processing of data.

WHO WE DISCLOSE DATA TO

We do not sell your personal data. We disclose it only to those without whom an order cannot be fulfilled or the Services cannot be operated, and only to the extent necessary:

• Partner brands and boutiques whose warehouses hold the product ordered. It is the partner who dispatches the order, so we pass on your name, contact details, delivery address and the contents of the order. The partner is not entitled to use this data for its own purposes — only to dispatch your order.

• Delivery services and logistics companies — to dispatch, track and deliver the parcel, and to arrange returns.

• Payment providers and banks — to process payments and refunds.

• Email and notification services — for order emails, service messages and the newsletters you have subscribed to.

• Hosting, cloud storage and analytics providers — to host the site, create backups and assess how it is performing.

• The referral programme provider — if you use the programme: it processes invitation data and sends emails on behalf of the programme.

• Public authorities, courts and law enforcement bodies — solely in the cases and in the manner expressly provided for by law.

• Legal successors — in the event of a reorganisation or sale of the business, with the terms of this Policy preserved.

With every contractor that processes data on our instructions we enter into agreements requiring them to maintain confidentiality and to use the data only for the agreed purposes.

COOKIES

We use cookies so that the Services work correctly, remember your settings and become more convenient. On the "Cookie preferences" page they are divided into four groups: strictly necessary — responsible for signing in, the bag and session security; performance — collecting anonymised statistics on visits and errors; functional — remembering your country, language and search settings; advertising — making advertising more relevant.

You can manage the optional groups at any time on the "Cookie preferences" page at the bottom of the site, and also by clearing or blocking cookies in your browser settings. Refusing optional cookies does not stop you browsing the catalogue and placing orders, but some features may work less conveniently.

THIRD-PARTY SITES AND LINKS

Our pages may contain links to the sites of partner brands, delivery services and other third parties. This Policy does not apply to them: we do not control such sites and are not responsible for how they process data. Before giving them any information, please read their own privacy policies.

CHILDREN'S DATA

Our Services are not intended for children. We do not knowingly collect data about persons under 18 and do not allow them to place orders. If you believe that a child has given us their data, write to privacy@vdoma.store — we will delete it as soon as possible.

SECURITY AND RETENTION PERIODS

We take organisational and technical measures to protect data against unauthorised access, loss and alteration: the connection is encrypted using HTTPS, passwords are stored only as an irreversible hash, data is accessible only to those who need it for their work, we make regular backups and we keep track of security updates.

At the same time, no method of transmitting data over the internet is completely secure. Please use a strong, unique password, do not share it with third parties and log out on devices that are not your own. If a data breach occurs that may create a risk to your rights, we will notify you and the supervisory authority as soon as possible, in the manner prescribed by law.

We keep data for as long as is necessary for the purposes for which it was collected, or for as long as the law requires:

• account data — for as long as the account exists, and for up to 3 years after your last activity, unless you have deleted it sooner;

• order data and settlement documents — for the periods laid down by tax legislation and consumer protection legislation;

• subscription data — until consent is withdrawn, and the record of that consent itself — for up to a further 3 years after withdrawal;

• correspondence with support — for up to 3 years from the closing of the enquiry;

• cookies — for the lifetime of each file; your choice in the cookie settings is kept for up to 12 months.

Once these periods expire, data is deleted or anonymised so that no particular individual can be identified from it. Anonymised statistics may be kept by us indefinitely.

YOUR RIGHTS AND CHOICES

In relation to your personal data you have the right:

• to know whether we process your data, to obtain access to it and a copy in a convenient format;

• to request the correction of inaccurate or incomplete data;

• to request the erasure of data if it is no longer needed for the purposes of processing or is being processed unlawfully;

• to request the restriction of processing — for example, while we examine your objection;

• to object to processing based on our legitimate interest and to object to direct marketing;

• to withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal;

• to receive your data in a structured, machine-readable format and to transfer it to another controller.

Some of this you can do yourself: correct your profile data in the "Personal details and security" section of your account, unsubscribe from the newsletter using the link at the end of any email, and change your cookie settings on the "Cookie preferences" page.

To delete your account, or for any other request, write to privacy@vdoma.store. We may ask you to confirm your identity so that we do not disclose data to someone else. We provide a response within 30 calendar days.

IF YOU ARE IN THE EU OR EEA

The GDPR additionally applies to the processing of your data, and you are guaranteed the following terms.

• The legal bases for processing are listed above and correspond to Article 6 of the GDPR: performance of a contract, your consent, compliance with a legal obligation and our legitimate interest.

• You exercise your rights to the extent provided by Articles 15–22 of the GDPR. We provide a response to a request within one month; in complex cases the period may be extended by a further two months, of which we will notify you.

• You may lodge a complaint with the data protection supervisory authority of the country of your residence, of your place of work or of the alleged infringement.

INTERNATIONAL TRANSFERS OF DATA

We deliver orders to European Union countries and to other states, and some of our contractors are located outside Ukraine, so your data may be transferred to recipients in other countries.

• For transfers to EU and EEA countries, and to countries recognised as providing an adequate level of protection, no additional conditions are required.

• For transfers to all other countries we rely on the standard contractual clauses approved by the European Commission, or on the transfer being necessary for the performance of a contract with you — for example, in order to deliver an order to the address you have given.

You can request information about the safeguards that apply to transfers of your data by writing to privacy@vdoma.store.

COMPLAINTS

If you believe that we have processed your data unlawfully, write to us first at privacy@vdoma.store — we will look into it. If our response does not satisfy you, you may lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, who supervises compliance with personal data protection legislation, or, if you are in the EU or EEA, with the supervisory authority of your own country.

CHANGES TO THIS POLICY

We may update this Policy — for example, if the law, our services or our range of contractors changes. The current version is always published on this page, and the date of the last update is given at the beginning of the document. We will inform you of material changes by email or by a notice on the site. If the changes concern processing based on your consent, we will ask for your consent again.

CONTACT US

For questions about the processing of personal data and to exercise your rights, write to privacy@vdoma.store. For questions about orders, delivery and returns — customerservice@vdoma.store.