Privacy Policy

1. Who is responsible for your data

This policy explains how Seven Mountains processes the personal data of visitors and customers of 7mntns.com. The personal data controller is:

Sole proprietor (ФОП) Сивецький Сергій Сергійович
Ukrainian taxpayer identification number (РНОКПП): 3403510173
Registered address: 18/29 Ivana Mazepy St., Apt. 2, Kyiv, 01010, Ukraine.

[email protected]
050 440-98-99
Monday–Friday, 10:00–17:00.

For questions about your data, email [email protected] with “Personal data” in the subject line.

2. What data we process

Orders and delivery: your first and last name, phone number, email address, delivery address or selected branch or parcel locker, the contents and value of your order, and any order comments.

Payments and refunds: payment method and status, transaction identifiers and, where necessary, details required to issue a refund.

Support: your enquiry history, messages, photographs and other information needed to resolve your request. For your customer account, we process information you provide when registering and using it.

Technical data: when the website operates, the platform and connected services may process your IP address, browser and device information, cookies, visit times and interactions with pages.

Do not send us your PIN, CVV/CVC, online banking passwords or one-time payment verification codes. Card details are entered through the payment provider’s secure interface.

3. Why we use data and on what basis

We use data to enter into and fulfil a contract, confirm an order, process payment and delivery, handle exchanges and returns, and respond to enquiries. The basis is entering into and performing a contract or taking steps at your request before entering into one.

We retain information necessary to meet accounting and other obligations imposed by law. To protect the website, prevent abuse and protect rights, we may process data on the basis of legitimate interests, provided these do not override a person’s rights.

Where an activity requires consent, we rely on the relevant consent. Simply visiting the website does not constitute unlimited consent to any processing or to marketing messages.

4. Services that need data

Orders are processed on the Horoshop platform. To fulfil orders and communicate with you, we use:

• plata by mono for online payments;
• Nova Poshta and, for international shipments, Ukrposhta to arrange and carry out delivery;
• SMS-fly to send SMS messages;
• eSputnik to send email campaigns;
• where taxi delivery has been agreed, the delivery provider, receiving only the contact details and address needed to hand over the order.

If you contact us through a chat, messenger or social network, that service’s operator also processes information under its own rules. Embedded third-party widgets may receive technical data when they load.

We provide recipients only with data needed for the relevant purpose. Data may be provided to other persons or public authorities where there is a lawful basis. We do not sell personal data.

If international delivery or a service provider involves transferring data outside Ukraine, the transfer must comply with applicable data protection requirements. You may ask us which specific recipients have received your data.

5. Service messages and marketing

Messages about order confirmation, payment, dispatch, exchange or return relate to fulfilling your order. They are different from marketing messages.

You can unsubscribe from marketing emails using the link in the message or by contacting [email protected]. Unsubscribing does not prevent you from shopping or stop necessary updates about a current order.

6. Cookies and external links

Cookies are small files saved by your browser when you visit a website. They may support the shopping cart, account login, language preferences and other functions. Connected third-party services may also use their own cookies and similar technologies.

You can manage or delete cookies in your browser settings. Blocking necessary cookies may affect the cart or your account. Where the law requires consent for particular technologies, their use must be based on that consent.

When you visit another website, its operator’s rules apply. This policy covers data processing by Seven Mountains.

7. Retention and protection

We keep data for as long as needed to fulfil orders, provide after-sales service and handle enquiries. Documents subject to mandatory legal retention periods are kept for those periods. Data needed to resolve a dispute may be retained until the relevant procedure is complete.

When there is no longer a basis for retention, data must be deleted or anonymised. Withdrawing consent does not require deletion of information that must be kept on another lawful basis.

We use organisational and technical measures to restrict access and protect data. Access should be given only to those who need it for their duties. Do not share your account password with others.

8. Your rights

You may ask about the sources, purposes, location and recipients of your data, access your data, request correction of inaccuracies, object to processing and request deletion where the law provides for it. You may also withdraw consent, complain to the Ukrainian Parliament Commissioner for Human Rights or bring a claim before a court, and exercise other rights provided by law.

Email [email protected], explaining your request and providing a contact for our reply. To protect your data from others, we may ask for the minimum information needed to verify your identity. We handle requests within the time limits set by law.

9. Updates to this policy

The current version is available on this page, with the update date shown above. If processing purposes or services change, we update the policy; where new consent is required, we seek it separately.