Menu
Feedback

Privacy Policy

Effective date: 13 October 2026

This Privacy Policy explains how Tsarskaya (“we”, “us”, “our”), the operator of the online store tsarskayacorset.com, collects and uses your personal data when you visit our website, place an order, contact us or subscribe to our news. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, the Swiss Federal Act on Data Protection and other applicable laws.

1. Who is responsible for your data

The controller of your personal data is Tsarskaya.
Address: Bulvarno-Kudriavska street 15, Kyiv, 02000, Ukraine
Email: [email protected]
Phone / WhatsApp: +1 (786) 209 18 77

For any question about this policy or your data, contact us at the email above.

2. What data we collect

  • Order and contact data: first and last name, email address, phone number, delivery and billing address, country, the products you order and your order history.
  • Measurements and tailoring details: body measurements and fitting preferences that you give us so that we can make your garment to measure.
  • Account data: login email and password (stored encrypted) if you create an account.
  • Payment data: payments are processed by Stripe, PayPal or WayForPay. We never see or store your full card number; we only receive the payment status and limited details such as the last four digits and card country.
  • Communication: messages you send us by email, WhatsApp, the contact form or the product question form, and reviews you publish on our website.
  • Technical data: IP address, approximate country (determined from your IP address), browser and device type, language, pages visited and the site from which you came.
  • Cookies and similar technologies: see section 6.

3. Why we use your data and on what legal basis

  • To take, make and deliver your order (including tailoring to your measurements, payment, shipping, order and tracking emails, returns and exchanges) — performance of a contract (Art. 6(1)(b) GDPR).
  • To keep accounting and tax records — compliance with legal obligations (Art. 6(1)(c) GDPR).
  • To run a secure, working website (shopping cart, language and currency, fraud prevention, showing the correct language, currency and delivery estimate for your country) — our legitimate interests (Art. 6(1)(f) GDPR).
  • To answer your questions and to send service messages such as a reminder about an unfinished order — our legitimate interests or steps prior to a contract.
  • Analytics and advertising cookies, and marketing emails — only with your consent (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers that help us run the store, and only to the extent necessary:

  • Payments: Stripe, PayPal, WayForPay.
  • Delivery: Nova Poshta / Nova Post, UPS, DHL.
  • Hosting and security: our hosting provider and Cloudflare (content delivery and protection against attacks).
  • Order management: KeyCRM (our order management system).
  • Email: our email providers and eSputnik (newsletters, only if you have agreed).
  • Analytics (only with your consent): Google Analytics, Microsoft Clarity.
  • Advertising (only with your consent): Google Ads, Meta (Facebook, Instagram), TikTok.
  • Reviews: Trustpilot (if you leave a review there) and DeepL (automatic translation of reviews published on our site).
  • Authorities when we are legally required to disclose data.

5. International transfers

We are based in Ukraine, and some of our service providers are located in the United States or other countries outside the European Economic Area, the UK and Switzerland. When your data is transferred there, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework, where applicable to the provider.

6. Cookies

We use three categories of cookies:

  • Necessary — required for the store to work: shopping cart, session, language, currency, security and saving your cookie choice. These are always active. Services: Cloudflare, Stripe, PayPal, WayForPay.
  • Analytics — help us understand how the website is used so that we can improve it. Services: Google Analytics, Microsoft Clarity.
  • Marketing — allow advertising partners to measure our ads and show you relevant offers. Services: Google Ads, Meta (Facebook, Instagram), TikTok, eSputnik.

Visitors from the European Economic Area, the United Kingdom and Switzerland (and visitors whose location cannot be determined) are asked for consent first: analytics and marketing tools are not loaded until you agree. If you decline, the website keeps working normally. We store your choice for 180 days. You can change or withdraw your consent at any time via the “Cookie settings” link at the bottom of every page. You can also delete cookies in your browser settings.

7. How long we keep your data

  • Order and invoice data: for as long as required by accounting and tax laws (usually up to 5 years after the order).
  • Account data: until you delete your account or ask us to delete it.
  • Measurements: for as long as needed to make, alter or repeat your order, and in any case no longer than 3 years after your last order unless you ask us to keep them.
  • Marketing data: until you unsubscribe or withdraw your consent.
  • Records of your cookie consent: up to 3 years, as proof of consent.
  • Messages and support requests: up to 3 years after the last contact.

8. Your rights

You have the right to:

  • access your personal data and receive a copy of it;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to processing, including processing based on our legitimate interests;
  • data portability;
  • withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal;
  • lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work.

To exercise your rights, email us at [email protected]. We will reply within one month. To unsubscribe from marketing emails, use the link in any of our emails.

9. Security

We protect your data with appropriate technical and organisational measures, including encrypted connections (HTTPS), encrypted passwords and restricted access to personal data. Card payments are handled entirely by certified payment providers.

10. Children

Our store is not intended for children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with its effective date.