Start entering a category or product name

Privacy policy

Regulations on the processing and protection of personal data


1. General concepts and scope of application.
2. Composition and content of personal data
3. Purpose, limits and terms of personal data processing
4. Location of personal data.
5. Terms of disclosure of personal data to third parties.
6. Protection of personal data.
7. Rights of the User (subject of personal data).
8. Procedure for handling requests from personal data subjects (Users).
9. Amendments to the Regulations.

1. General provisions and scope.
1.1 This Regulation on the processing and protection of personal data (hereinafter referred to as the "Regulation") was developed by the private entrepreneur "" (EDRPOU code: 000000, address: Kyiv, st., hereinafter referred to as the "Private Entrepreneur" and/or the "Data Owner") in accordance with the current legislation of Ukraine, including, but not limited to, the Law of Ukraine "On Personal Data Protection" of June 01, 2010 No. 2297-VI and establishes the procedure for obtaining, collecting, accumulating, storing, processing, using, ensuring the protection and disclosure of personal data (hereinafter referred to as the "Data" and/or "Personal Data") through the website: (hereinafter referred to as the "Site") and/or the mobile application: "ZooBonus" (hereinafter referred to as the "Mobile Application" and/or "ZooBonus Mobile Application") and/or related services and tools.
1.2. By registering on the Website or authorizing using the ZooBonus Mobile Application (downloaded via the Play Market and App Store), and starting to use the Online Store, or when trying to place an order without prior registration, the User (Buyer) gives permission and unequivocal consent to the processing of his personal data on the terms and conditions set forth below, and also confirms that he has read this Regulation, accepted it and agrees to its content.
1.3. The ZooBonus online pet store in this Regulation means the Website and the Mobile Application together, which are also referred to as the "Online Store" and/or the "ZooBonus Online Store".
1.4. The User (Buyer, consumer) in this Regulation means any individual and/or legal entity that has access to the Online Store and uses its functionality and services.
1.5. The owner of the Users' personal data is the sole proprietor "" (EDRPOU code: 00000000, address: Kyiv, vul.)
1.6. In this Regulation, all terms are used in the meaning defined in the Law of Ukraine "On Personal Data Protection" of June 01, 2010 No. 2297-VI.
1.7. The Website may contain links to other websites (for informational purposes only). If you follow a link to other websites, this Regulation will not apply to such websites. In this regard, the Private Entrepreneur recommends that you familiarize yourself with the privacy and personal data policy of each site before submitting personal data by which you can be identified.
1.8. This Regulation is mandatory for use by the responsible person and employees of the Online Store who directly process and/or have access to personal data in connection with the performance of their official duties.

2. Composition and content of personal data.
2.1. Data means any information that directly or indirectly relates to a particular User. This may include: name, surname, patronymic (if any), phone number, e-mail address, date of birth, gender, hobbies, pets, language of communication, address of residence/stay/delivery, information about the User's actions while using the Online Store, IP address, data on devices used by the User (device type, browser type, device operating system), message history (information contained in the correspondence between the User and the administration of the Online Store), history of reviews or comments. In particular: information about the User's passport data, identification code, etc.) This list of personal data is not permanent and mandatory for all Users, but depends on the needs and desires of the User and the operations that he/she performs in the Online Store. The Data also means other information legally received by the Online Store from third parties and/or available from the User's profiles in social networks - in case of registration in the Online Store using social network authentication services. In this case, the User agrees to the processing of information available from the relevant accounts (profiles) in social networks.
2.2. Users are responsible for all information posted by them in public accounts. The User must realize all the risks associated with the fact that he/she discloses the address or information about the exact location of his/her location. If the User chooses to log in to the Online Platform using a third-party authentication service, such as Facebook information, the Private Entrepreneur may receive an additional profile or other information made available by such third party.

3. Purpose, limits and terms of personal data processing.
3.1. The purpose of personal data processing is:
- Ensuring the implementation of civil law relations, economic, tax relations, the exercise of functions, powers and duties assigned to the Private Entrepreneur in accordance with the current legislation of Ukraine;
- identification of the client as the User of the Online Store, for communication with the User, including for the provision of services, payment processing, sending, conducting settlement operations, reporting, accounting and management accounting, creating and implementing bonus programs, loyalty programs, sending mailings by mail, e-mail, phone number, including for the purpose of sending commercial offers, notifications of promotions and news of the Online Store, and/or for providing financial services to the Users of the Online Store
- for the purpose of sending mailings, commercial offers, notifications of promotions, loyalty programs, bonus programs and/or for the purpose of sending notifications regarding the operation of the Online Store by mail, e-mail, telephone number, by sending information messages and alerts in the Mobile Application. The User may at any time refuse to receive information and marketing mailings - through the appropriate settings on the Site (;
- in order to fulfill other obligations imposed by law on the Personal Data Owner, to protect the legitimate interests of the Personal Data Owner or a third party to whom personal data is transferred.
3.2. The private entrepreneur does not process data related to race, nationality, political views, religious and other beliefs, membership in public organizations. Information that characterizes the physiological characteristics of the Users, on the basis of which their identity can be established, is also not processed.
3.3 The processing of personal data is limited to the collection of the minimum amount of mandatory information necessary solely to fulfill the User's request. In any case, when information that is not required to be provided is requested, the User is informed about this at the time of collection of such information. The User shall provide the information not required to be provided voluntarily and at his/her own discretion. The Company uses this information for the purposes of improving the Online Platform, its services, offering offers to the User, depending on their preferences and based on the optional information provided by the User.
3.4. The terms of Data processing and storage are determined based on the purposes of Data processing, as well as on the conditions specified in the agreements concluded with the Users in accordance with the requirements of the current legislation of Ukraine. Personal Data shall be processed and stored for as long as necessary to achieve the purposes for which it was collected, including to fulfill any legal, accounting or reporting requirements or until the data is deleted by the User or at the request of the User.
3.5. Users can change/delete personal information at any time or refuse to receive notifications or withdraw consent to the processing of Data. This can be done in your Personal Account or by sending a message to the e-mail address: [email protected] with a note in the subject line "Personal Data". Deletion of an account (account) at the initiative of the User occurs in the manner specified in the User Agreement and the Terms of Use of the Site: .
3.6. In the event of inactivity in the User's account for a period exceeding five (5) years, the Private Entrepreneur reserves the right to delete the User's account, including all personal data stored in the account, which means that you will no longer be able to access and use it.

4. Location of personal data.
4.1 Personal data of the Users of the Online Store is processed and protected on secure servers.
5. Terms of disclosure of personal data to third parties
5.1. The Private Entrepreneur may exchange Data with affiliates of the Private Entrepreneur (companies acting on the basis of joint ownership), which may process and use the Data for the purposes specified in this Regulation.
5.2. Disclosure of the Data occurs when the User orders goods/services in the Online Store to the sellers of such goods, services to the extent necessary to identify the User, fulfill and process the User's order (including for the purpose of proper payment for goods/services, ensuring that the User receives financial services, etc.)
5.3. A private entrepreneur may engage third-party suppliers of goods/services to fulfill an order, in which case such third-party suppliers of goods/services are not authorized to use personal data received through the Online Pet Shop other than to fulfill the Order.
5.4. The private entrepreneur may transfer certain depersonalized information, as well as grant permission to collect such depersonalized information directly on the website using appropriate technologies (data that does not allow identifying Users individually) to third-party service providers, trusted partners or authorized researchers for the purpose of conducting market research, improving the effectiveness of advertising offers and campaigns (by offering more relevant offers of the online store), analytical activities, etc.
5.5. The Private Entrepreneur may also exchange Data with suppliers of goods/services during the holding of contests, promotions and events in the Online Pet Shop in order to properly ensure the holding of such contests, promotions and events. In this case, the Data is used and may be transferred to third parties for the purposes of conducting such contests, promotions and events, determining the winner. In case of winning, if the contests, promotions and events are conducted by suppliers of goods/services, such suppliers of goods/services may independently contact the Users regarding the conduct of contests, promotions and events, determination of winners, registration of winnings, etc.
5.6. The Private Entrepreneur processes the Data on a legal and fair basis: The Data is not disclosed to third parties and is not distributed without the User's consent, except as provided by the current legislation of Ukraine and only in the interests of national security, economic welfare and human rights, in particular, but not exclusively - at the reasonable request of public authorities that have the right to request and receive such Data; - for the purposes of combating fraud and abuse in the online pet store.
5.7. In cases of transfer of personal data provided for in Section 5 of this Regulation, informing the User about the transfer of his/her personal data remains at the discretion of the Private Entrepreneur.

6. Protection of personal data.
6.1. The owner of personal data is equipped with system, software and hardware and communication means that prevent loss, theft, unauthorized destruction, distortion, forgery, copying of information and meet the requirements of international and national standards.
6.2. Employees/authorized persons who directly process and/or have access to personal data in connection with the performance of their official (labor) duties shall comply with the requirements of the legislation of Ukraine in the field of personal data protection and internal documents on the processing and protection of personal data.
6.3. Employees/authorized persons who have access to personal data, including those who process it, shall be obliged to prevent disclosure in any way of personal data entrusted to them or which became known in connection with the performance of professional or official duties or employment. Such obligation shall be valid after they cease to perform activities related to personal data, except in cases established by law.
6.4. Personal data should not be stored longer than necessary for the purpose for which such data is stored, but in any case no longer than the data storage period specified in this Regulation with the consent of the User.
6.5. In order to protect User accounts and their personal data from unauthorized access, two-factor authentication is used as an additional level of protection of the User account.
6.6. Two-factor authentication is activated if the User's account contains a verified phone number and at least one of the conditions listed below is met
- the account contains a verified phone number; - a bank card is linked to the account;
- there are available bonuses on the account balance;
- a credit questionnaire is filled out in the account (filled out in cases when the User wishes to purchase goods on credit). provision, indicating the grounds specified in the relevant regulatory legal act.
6.7. When authorizing the User from an unknown device, two-factor authentication is triggered. Therefore, in addition to entering the password, you must also enter a one-time 4-digit code that is sent to the User's phone in the form of an SMS or Viber message or an additional verification of trusted devices (ID of the verified device/program). The same message contains information on the parameters for logging into his/her account:
- date of the authorization attempt
- IP of the device
- Client browser type
6.6. All employees of the owner of the personal data base shall be obliged to comply with the confidentiality requirements regarding personal data and information on securities accounts and securities circulation.
6.8. In some cases, for example, if the User has made too many unsuccessful authorization attempts, an additional protection algorithm is triggered - reCaptcha input (to check whether the User is a robot).
6.8. The third party who submitted the request shall be notified of the postponement in writing with an explanation of the procedure for appealing such a decision.
6.9. This Regulation sets forth internal policies and procedures for the collection, processing, use, disclosure of personal information or personal data when using the website or the ZooBonus mobile application. The Data Controller has developed and implemented internal rules for working with personal data, including the procedure for deleting a number of data after deleting the User's personal account, the levels of access to User data by internal employees of the Sole Proprietor, and the secure procedure for exchanging such data among employees of the Sole Proprietor. The Sole Proprietor shall regularly audit its security systems in order to identify opportunities to improve the secure storage and use of User data. The Sole Proprietor also complies with the requirements of the Standard Procedure for the Processing of Personal Data, approved by the Order of the Verkhovna Rada of Ukraine No. 1/02-14 dated January 08, 2014 (available at to the extent that it relates to personal data.

7. The rights of the User (personal data subject). with the performance of their official duties, the period of storage of personal data.
7.1. The subject of personal data (User) has the right to:
- to know about the location of personal data containing his/her personal data, its purpose and name, location and/or place of residence (stay) of the owner or manager or to give a corresponding order to obtain this information to persons authorized by him/her, except in cases established by law;
- receive information about the conditions for granting access to personal data, including information about third parties to whom his/her personal data is transferred;
- to have access to their personal data;
- manage the procedure for sending notifications through the appropriate settings in the online pet store (
- Receive a response on whether his/her personal data is stored no later than thirty calendar days from the date of receipt of the request, except in cases provided for by law, as well as receive the content of his/her personal data that is stored;
- to submit a reasoned request with an objection to the processing of his/her personal data by state authorities, local self-government bodies in the exercise of their powers provided by law;
- to submit a reasoned request to change or destroy their personal data by any owner and manager, if this data is processed illegally or is unreliable;
- to protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision, as well as to protect against the provision of information that is inaccurate or discrediting the honor, dignity and business reputation of an individual;
- to apply for protection of their rights regarding personal data to state authorities and local self-government bodies authorized to protect personal data;
- apply for legal remedies in case of violation of the legislation on personal data protection.

8. Procedure for handling requests from the personal data subject (User).
8.1. The subject of personal data (User) has the right to receive any information about himself/herself from any subject of relations related to personal data, without specifying the purpose of the request, except in cases established by law.
8.2. Access of the personal data subject (User) to the data about himself/herself is free of charge.
8.3. The personal data subject (User) submits a request for access (hereinafter referred to as the request) to personal data to the personal data controller. The request shall include: - surname, first name and patronymic, place of residence (place of stay) and details of the personal data subject's (User's) identity document; - other information that allows identifying the personal data subject's (User's) identity; - information about the personal data in respect of which the request is submitted, or information about the owner or manager; - a list of personal data requested.
8.4. The period for studying the request for its satisfaction may not exceed ten working days from the date of its receipt.
8.5. During this period, the Personal Data Owner shall inform the personal data subject (User) that the request will be satisfied or the relevant personal data shall not be provided, indicating the grounds specified in the relevant regulatory legal act.
8.6. The request shall be satisfied within thirty calendar days from the date of its receipt, unless otherwise provided by law.

9. Amendments to the Regulations
9.1. A private entrepreneur may from time to time unilaterally update this Regulation without notifying the User of such changes. The new version of the Regulations shall enter into force from the moment it is posted on the Online Platform, unless otherwise provided by the new version of the Regulations. The current version of the Regulations is always available on the page at:
9.2. If any changes have been made to the Regulations with which the User does not agree, he/she is obliged to stop using the Online Store. The fact of continuing to use the online store is a confirmation of the User's consent and acceptance of the relevant version of the Regulations.