Privacy Policy

This English version is a translation provided for convenience only. In the event of any discrepancy between this translation and the Ukrainian version, the Ukrainian version shall prevail.

This Policy describes how Thermera (hereinafter "Thermera", "we", "the Operator") processes the personal data of visitors to and customers of the website thermera.com.ua (hereinafter the "Website"). The Policy applies to all pages of the Website, request forms, the personal account, the order tracking service and the e-mail newsletter.

We process personal data in accordance with the Constitution of Ukraine, the Law of Ukraine "On Personal Data Protection", the Law of Ukraine "On Electronic Commerce" and other legislative acts of Ukraine. For users from EU countries, we comply with the principles of Regulation (EU) 2016/679 (GDPR) to the extent applicable.

1. Who processes your data

• Personal data controller: an individual entrepreneur (sole proprietor, FOP) selling through the Website (details are stated in the invoice and on the "Contacts" page).
• Address: stated on the "Contacts" page.
• E-mail for personal data enquiries: [email protected].
• Phone: +380 (97) 062-32-37.

2. What data we collect

Data you enter yourself:

• Request, order, callback and wholesale enquiry forms: name, phone number, e-mail, city or region of delivery, address or carrier branch, preferred time for a call, comment; for wholesale customers also the company or sole proprietor (FOP) name, fuel type, volume and region.
• Orders: product, packaging, quantity, price and total, payment and delivery method, recipient details, consignment note (waybill, TTN) number, order status, history of correspondence with the manager.
• Personal account: e-mail or phone number as login, password (stored only as a cryptographic hash), saved delivery addresses, order history, subscription settings.
• E-mail newsletter: e-mail address, date, time and source of subscription, the fact that consent was given.
• Reviews: name, review text, rating, photos (if you add them).

Data collected automatically: IP address, device and browser type, language, pages you viewed, referral source (including UTM tags), date and time of the visit, cookie identifiers. See section 6 for details.

What we do not collect: payment card data (processed by the bank or payment service), passport data, or information about racial or ethnic origin, political opinions, religious beliefs, health and other special categories of data. Please do not include such information in comments.

Details of legal entities (name, EDRPOU code, IBAN) are not personal data, but we protect the data of a company's contact person in the same way as the data of individuals.

3. Why we use data and on what legal basis

• Processing requests and orders, calculating costs, delivery, consultations - to conclude and perform a contract with you.
• Personal account and order tracking (status, waybill number, purchase history, repeat orders) - to perform the contract and provide the service you use.
• Service notifications (order confirmation, status change, waybill number, collection reminder) by phone, SMS, Viber, Telegram or e-mail - to perform the contract. This is not advertising: such notifications are sent only in connection with your orders.
• E-mail newsletter with prices, promotions, seasonal offers and useful materials - only with your separate consent. You may withdraw your consent at any time.
• Analytics and improvement of the Website - with your consent to analytics cookies.
• Advertising and remarketing (Google Ads, Meta) - with your consent to marketing cookies.
• Accounting and tax records, responses to requests from public authorities - to comply with legal requirements.
• Website security, protection against spam and fraud, protection of our rights in disputes - our legitimate interest.

We do not use data for purposes incompatible with those for which it was obtained, and we do not make decisions about you based solely on automated processing.

4. Who we share data with

We do not sell personal data. Access to it is granted only to those without whom an order cannot be fulfilled or the Website cannot operate, and only to the extent necessary:

• Carriers - Nova Poshta LLC and other delivery services, as well as carriers delivering pallets, big bags or bulk loads: name, phone number, address or branch, description of the cargo, cash-on-delivery amount. We receive shipment tracking data by waybill number from the carrier in order to display the status in your personal account.
• Banks and payment services - to accept payments and process refunds.
• E-mail newsletter service - e-mail address, name, subscription settings.
• Google (Google Analytics, Google Tag Manager, Google Ads, Google Merchant Center) and Meta (Meta Pixel) - anonymised or pseudonymised visit data, if you have consented to the relevant cookies.
• Hosting provider and contractors who maintain the Website, accounting and CRM systems - subject to confidentiality obligations.
• Public authorities - only in the cases and in the manner expressly provided for by law.

Some services (Google, Meta, the newsletter service) may store data on servers outside Ukraine, including in the EU and the USA. Such transfers are made with your consent or on terms that ensure an adequate level of data protection.

5. How long we keep data

• Requests that did not result in an order - up to 12 months from the date of the last contact.
• Orders, primary and payment documents - for the periods established by tax and accounting legislation (as a rule, at least 1095 days).
• Personal account - for as long as you use it. After the account is deleted, profile data is deleted within 30 days, and order data is retained only to the extent required for accounting.
• Newsletter data - until consent is withdrawn (unsubscription).
• Analytics data - up to 14 months; advertising data - in accordance with Google and Meta settings.

6. Cookies and similar technologies

Cookies are small files that your browser stores on your device. We use:

• Strictly necessary cookies - session, cart, personal account login, form spam protection, storing your cookie preferences. Without them the Website does not work properly, so they are set without separate consent.
• Analytics cookies - Google Analytics via Google Tag Manager: which pages are popular, where visitors come from, where errors occur.
• Marketing cookies - Google Ads and Meta Pixel: measuring advertising performance and showing ads to people who have already visited the Website.

Analytics and marketing cookies are enabled only after you give consent in the cookie banner. You can change your choice at any time via the "Cookie settings" link at the bottom of the page or in your browser settings. Refusing these cookies does not affect your ability to place an order.

7. Your rights

Under Article 8 of the Law of Ukraine "On Personal Data Protection", you have the right to:

• know which of your data we process, for what purpose, where it was obtained from and to whom it is transferred;
• obtain a copy of your data;
• require the correction of inaccurate or outdated data;
• require the deletion of data or restriction of its processing if it is processed unlawfully or is no longer needed;
• object to the processing of data, including for marketing purposes;
• withdraw consent to processing at any time (this does not affect the lawfulness of processing before withdrawal);
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (Уповноважений Верховної Ради України з прав людини) or with a court.

You can change most profile data yourself in your personal account. For other requests, write to [email protected] from the same e-mail address, or state the same phone number, that you used on the Website. We will reply within 30 calendar days, and to a data access request within the time limits established by law.

8. E-mail newsletter

We send promotional e-mails only to those who have separately agreed to receive the newsletter by ticking the corresponding box in a form or in their personal account. The box is never ticked by default. Every e-mail contains an "Unsubscribe" link; you can also unsubscribe in your personal account or by writing to our e-mail. After unsubscribing, you will continue to receive only service notifications about your orders.

9. How we protect data

• the connection to the Website is encrypted using the HTTPS protocol;
• passwords are stored only as a hash, and we never see them in plain text;
• only employees and contractors who need data for their work have access to it, using individual accounts;
• we regularly update software and make backups.

Please do not share your personal account password or order tracking link with anyone. We never ask for a card CVV code or passwords from bank SMS messages in phone calls or messages. In the event of a data breach that may harm you, we will notify you and, where required by law, the Ukrainian Parliament Commissioner for Human Rights.

10. Children

The Website is not intended for persons under the age of 14, and we do not knowingly collect their data. If you believe that a child has provided us with their data, please contact us and we will delete it.

11. Changes to this Policy

We may update this Policy, for example after launching new personal account features or connecting new services. The current version is always available on this page, and the date of the version is stated at the top. We will notify registered users of material changes by e-mail or in their personal account.

12. Contacts

For any questions regarding personal data: [email protected], phone +380 (97) 062-32-37.

See also: Public Offer · Website Terms of Use.