Last updated: November 11, 2026
This Privacy Policy explains how SPELLA (“we”, “us”) collects, uses and protects your personal data when you visit spellabrand.com, place an order or contact us. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine “On Personal Data Protection”.
Who we are
SPELLA is a corsetry brand based in Lutsk, Ukraine. Address: Lesia Ukrainka Str. 16A, Lutsk, 43000, Ukraine. Email: spellabrand@gmail.com. Phone: +380 97 102 14 24. For any question about your personal data, please contact us by email.
What data we collect
- Order details: your name, email address, phone number, shipping and billing address, the products you order and the order history.
- Measurements: body measurements you send us so we can tailor your corset or gloves.
- Account data: if you create an account, your login, email and saved addresses.
- Messages: what you send us through the contact form, the live chat, email, Telegram or social media.
- Payment data: payments are handled by our payment providers. We do not receive or store your full card number.
- Usage data: with your consent, information about how you use the website (pages viewed, device and browser type, approximate location, how you arrived at the site), collected by Google Analytics.
Why we use your data
- To process, tailor, ship and support your order, and to contact you about measurements and delivery (performance of a contract).
- To answer your questions and requests (our legitimate interest in communicating with customers).
- To keep accounting and tax records (legal obligation).
- To understand how visitors use the website and improve it (your consent, which you can withdraw at any time).
- To protect the website and prevent fraud (legitimate interest).
We do not sell your personal data and we do not use it for automated decision-making.
Who we share data with
We share personal data only with service providers that help us run the shop, and only as much as they need:
- Hosting: Hostinger, which hosts this website.
- Payments: WayForPay, and WesternBid for PayPal and Stripe payments. These providers process your payment details under their own privacy policies.
- Delivery: postal and courier services that deliver your order, and SmartyParcel, which we use to create shipments and track parcels.
- Analytics: Google (Google Analytics 4), only if you accept analytics cookies.
- Communication: Bubblegram and Telegram for the live chat, and Google (Gmail) for email.
- Authorities: when we are legally required to do so.
Some of these providers process data outside Ukraine and the European Economic Area, for example in the United States. In such cases the transfer is protected by the provider’s safeguards, such as the EU Standard Contractual Clauses.
Cookies
We use cookies that are necessary for the website and the shopping cart to work. Analytics and marketing cookies (Google Analytics) are used only if you click “Accept” in the cookie banner. If you click “Reject”, Google receives only limited, cookieless signals. You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or by clearing cookies in your browser. Your choice is stored in your browser for 6 months.
How long we keep your data
We keep order data for as long as required by tax and accounting laws. Measurements are kept while you are our customer so that repeat orders fit you; you can ask us to delete them at any time. Messages are kept as long as needed to answer you and handle your order. Analytics data is kept in Google Analytics for up to 14 months.
Your rights
You have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw your consent at any time. To use these rights, email us at spellabrand@gmail.com. You also have the right to lodge a complaint with a data protection authority, for example the supervisory authority in your EU country or the Ukrainian Parliament Commissioner for Human Rights.
Security
The website uses an encrypted HTTPS connection, and access to customer data is limited to the people who process your order.
Children
Our website is not intended for children under 16, and we do not knowingly collect their personal data.
Changes to this policy
We may update this Privacy Policy. The current version is always published on this page with the date of the last update.