Privacy Policy

This policy explains what personal data CodeKY collects, why, and what you can do about it. The platform is operated by CodeKY; the details of the entity receiving payment are set out in the Agreement. Data questions: CodeKY.art@gmail.com.

WHAT WE COLLECT

Buyer account: name, email, an encrypted password, and optionally a phone number and country. Orders: delivery address, phone, order contents and amount, payment status. Seller account: name, email, phone, country and city, the public profile (biography, portrait, social links) and item data. Seller tax data: full name or company name, country of tax residence, the tax number in that country, tax status (self-employed, company or private individual) and the related details that country's rules require, registered address and the IBAN of the payout account. Only the seller and the CodeKY administration see this data; it is never shown on the site. Inquiries: the name, email and message sent from an item page. Technical data: IP address, device and browser type, the pages you opened.

WHY

To fulfil an order and deliver the item — impossible without an address and a phone. To run your account and show your order history. To answer inquiries. To protect the platform from automated sign-ups. To understand how the site performs and fix what is awkward. To meet legal, tax and accounting obligations. To transfer sellers the money for sold works and to process payouts under the tax law of the country where the seller pays taxes.

The first three rest on performing our contract with you; protection and analytics on our legitimate interest; the newsletter on your consent, which you may withdraw at any time. For seller tax data the basis is performing the contract and complying with the law.

WHO ELSE SEES IT

We do not sell your data. We share it only with those without whom the service does not work: — Supabase — database and file storage; — Vercel — website hosting; — PostHog (EU servers) and Google Analytics — anonymous visit statistics, only with your consent; — Meta (Facebook, Instagram) — which works you viewed and what you ordered, so they can be shown to you in ads; only if you chose "Accept all" in the cookie notice; — Resend — sending email; — LiqPay (PrivatBank) — taking payment; card details are entered on the bank's side and never reach us; — Nova Poshta and international carriers — delivery; — Cloudflare Turnstile — protecting forms from bots; — Google and Meta — signing in with a Google or Facebook account, if you use it. — the bank we use to make a payout — the seller's full name and IBAN; — tax authorities — sellers' tax data, only where the law expressly requires it.

Some of these companies are located outside Ukraine and the EU. Transfers rely on the standard contractual terms of the respective services.

HOW LONG

Account data — as long as the account exists. Order data — as long as tax law requires. Inquiries — up to three years. Visit statistics — up to two years, anonymised. Seller tax data — as long as the account exists; payout records — as long as tax law requires.

YOUR RIGHTS

You may obtain a copy of your data, correct it, delete it, restrict or object to processing, take it in a machine-readable form, and withdraw consent to the newsletter. Write to CodeKY.art@gmail.com — we reply within thirty days. If our answer does not satisfy you, you have the right to complain to a data-protection supervisory authority.

CHILDREN

The platform is not intended for anyone under 16, and we do not knowingly collect their data.

CHANGES

A new version is published on this page. If the changes are material, we warn you by email.