Privacy policy

Last updated: August 21, 2026

mutaé operates this store and website, including the related content, features, tools, products, and services that make up the shopping experience (the Services). The store is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or use the Services, place an order, or otherwise communicate with us. If this Privacy Policy conflicts with our Terms & Conditions in relation to the collection, use, or disclosure of personal information, this Privacy Policy applies to that matter.

By accessing the Services, you acknowledge that you have read this Privacy Policy. Where applicable law requires consent for a particular type of processing, we will request that consent separately.

1. Who We Are

mutaé is a brand operated by:

Seller and data controller: Havrylenko Natalia PE
Legal status: sole proprietor registered under the laws of Ukraine
Tax ID / RNOKPP: 3115306461
Privacy contact: mutaeconcept@gmail.com

For the purposes of applicable data protection laws, the sole proprietor identified above is the controller of the personal information described in this Privacy Policy. Shopify and certain other service providers may act as processors on our behalf or as independent controllers for their own processing activities, as explained in their respective privacy notices.

2. Personal Information We Collect

The information we collect depends on how you interact with the Services and which features are enabled.

INFORMATION YOU PROVIDE

We may collect:

  • contact and delivery information, including your name, email address, telephone number, billing address, shipping address, postal code, and information required for delivery or customs clearance;

  • order and transaction information, including objects viewed or placed in your cart, purchases, returns, refunds, shipping claims, payment status, and transaction history;

  • payment-related information, including the selected payment method, payment confirmation, transaction identifiers, and other information supplied by the payment provider. Full payment-card details are processed by Shopify and/or the selected payment provider; mutaé does not receive or store your complete card number or security code;

  • communications, including information you provide when contacting us about an order, return, delivery issue, privacy request, or other enquiry;

  • claim evidence, including photographs or videos you voluntarily provide in connection with a return, damaged parcel, incorrect order, or product-related request;

  • account information, such as account identifiers, preferences, and settings, if customer-account functionality is enabled and you choose to use it.

Please do not send payment-card details, identification documents, or other sensitive information through Instagram or ordinary email unless we specifically request information that is necessary for a defined purpose and provide an appropriate method for submitting it.

INFORMATION COLLECTED AUTOMATICALLY

When you use the Services, Shopify and enabled technologies may automatically collect:

  • device, browser, network, and IP-address information;

  • cookie identifiers and similar online identifiers;

  • information about how and when you access, browse, or interact with the Services;

  • approximate location derived from your IP address;

  • privacy preferences and consent choices.

INFORMATION FROM OTHER SOURCES

We may receive personal information from Shopify and from service providers involved in payment processing, fraud prevention, analytics, customer support, order fulfilment, shipping, or customs processing. We may also receive information from a third party when you direct that third party to share it with us.

3. How We Use Personal Information

We may use personal information to:

  • operate the website and provide the Services;

  • process payments and fulfil orders;

  • arrange domestic and international delivery and provide information required by carriers, postal operators, customs authorities, or customs-service providers;

  • send order confirmations, tracking information, service notices, and other transactional communications;

  • process eligible returns, refunds, delivery investigations, and other customer requests;

  • respond to enquiries and maintain our relationship with customers;

  • detect, investigate, and prevent fraud, unauthorised payments, security incidents, illegal activity, or misuse of the Services;

  • comply with legal, tax, accounting, customs, sanctions, and regulatory obligations;

  • establish, exercise, or defend legal claims and enforce our Terms & Conditions and other policies;

  • understand and improve the performance, usability, and security of the Services;

  • measure and improve advertising or show relevant advertising where such tools are enabled and the required consent or other legal basis applies;

  • send marketing emails only where you have chosen to receive them or where otherwise permitted by applicable law.

4. Legal Bases for Processing

Depending on the purpose and the law that applies, we process personal information on one or more of the following bases:

  • performance of a contract, including taking steps at your request before an order and processing, fulfilling, delivering, returning, or refunding an order;

  • compliance with legal obligations, including tax, accounting, customs, consumer-protection, sanctions, fraud-prevention, and regulatory requirements;

  • legitimate interests, including operating and securing the store, preventing fraud, improving the Services, communicating with customers, and protecting our legal rights, provided those interests are not overridden by your rights where the applicable law requires that assessment;

  • consent, where required, including for certain cookies, advertising technologies, or marketing communications. You may withdraw consent at any time, without affecting processing that took place before withdrawal;

  • other grounds permitted or required by applicable law.

5. Cookies and Similar Technologies

Shopify and enabled service providers use cookies, pixels, and similar technologies to operate the store, remember preferences, keep the checkout secure, understand store performance, and—where enabled and permitted—measure or personalise advertising.

Some cookies are necessary for the Services to function. Where required, non-essential cookies are used only in accordance with your consent choices. You can manage available choices through the cookie banner or the Cookie Preferences link displayed by the store. Blocking certain cookies through your browser may affect the operation of the Services.

Where supported and required by applicable law, Shopify may also recognise a Global Privacy Control signal as an opt-out request for the browser or device sending the signal.

6. How We Disclose Personal Information

We disclose personal information only where reasonably necessary for the purposes described in this Privacy Policy, including:

  • Shopify, which hosts the store and provides ecommerce, checkout, security, analytics, and related functionality;

  • payment providers and acquiring partners, to authorise, process, verify, refund, and protect payments;

  • Nova Poshta, Nova Global, Ukrposhta, other selected carriers, postal operators, customs authorities, and customs-service providers, to deliver and clear orders;

  • technology, hosting, cloud-storage, analytics, fraud-prevention, and customer-support providers that perform services for us;

  • marketing and advertising providers, where such services are enabled and disclosure is permitted by your consent choices and applicable law;

  • professional advisers, courts, regulators, law-enforcement bodies, or public authorities, where necessary to comply with law, respond to valid legal process, protect rights or safety, or resolve a dispute;

  • a purchaser or successor to the business, if all or part of the business is transferred, reorganised, or discontinued, subject to applicable law;

  • other parties at your direction or with your consent.

mutaé does not sell personal information for money. Certain privacy laws may define some disclosures for targeted advertising as a “sale” or “sharing.” Where such laws apply, you may use the store's Data Sharing Opt-Out page or other privacy control made available through the Services.

7. Relationship with Shopify

The Services are hosted by Shopify. Information submitted through the Services is transmitted to and processed by Shopify and may be shared with Shopify service providers in countries other than the country where you live.

Shopify processes certain information on our behalf to provide the ecommerce platform. Depending on the Shopify settings and enhanced services enabled for the store, Shopify may also process information about your interactions with this store, other merchants, and Shopify services for its own purposes, including security, personalisation, analytics, and advertising. For those activities, Shopify may be responsible for responding to requests concerning its own processing.

You can learn more in the Shopify Consumer Privacy Policy and exercise rights relating to Shopify's own processing through the Shopify Privacy Portal.

8. International Transfers

Because Shopify and some of our service providers operate internationally, personal information may be transferred to, stored in, or processed in countries other than the country where you live, including countries whose data-protection rules may differ from those in your jurisdiction.

Where applicable law requires safeguards for an international transfer, we and the relevant service providers rely on an available lawful transfer mechanism, which may include contractual safeguards such as standard contractual clauses or another mechanism recognised by the competent authority.

9. Security and Retention

We use reasonable organisational and technical measures appropriate to the nature of the information we process. However, no system, transmission method, or storage service can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Services, maintaining transaction and accounting records, meeting legal or regulatory obligations, preventing fraud, resolving disputes, and enforcing agreements. Retention periods vary depending on the type of information and the applicable legal requirements. When information is no longer required, it is deleted, anonymised, or retained only where permitted or required by law.

10. Your Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

  • know whether and how we process your personal information and obtain access to it;

  • request correction of inaccurate or incomplete information;

  • request deletion or destruction of information that is processed unlawfully or is no longer required;

  • object to or request restriction of certain processing;

  • withdraw consent where processing is based on consent;

  • receive a portable copy of certain information or request its transfer, where applicable;

  • opt out of certain disclosures, targeted advertising, or processing defined as a “sale” or “sharing” under applicable law;

  • complain to a competent supervisory authority or seek another remedy available under applicable law.

These rights are not absolute. We may retain or continue processing certain information where required or permitted by law, including transaction, tax, fraud-prevention, dispute, and legal-compliance records.

To submit a request, email mutaeconcept@gmail.com. Please describe your request and provide enough information for us to identify the relevant records. We may need to verify your identity before acting on the request. An authorised representative may submit a request where permitted by law, but we may require evidence of the representative's authority and direct identity verification.

We will respond within the period required by applicable law and will not discriminate against you for exercising a privacy right.

MARKETING PREFERENCES

If you receive marketing emails from us, you may unsubscribe at any time using the link in the message or by emailing mutaeconcept@gmail.com. Unsubscribing from marketing does not prevent us from sending transactional or service messages about an order or request.

EEA AND UK RIGHTS

If the processing of your personal information is subject to EEA or UK data-protection law, you may also have rights of objection, restriction, portability, erasure, and withdrawal of consent, subject to the conditions and exceptions established by that law.

11. Children's Data

The Services are intended for customers aged 18 or over. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that a child has provided personal information to us, contact mutaeconcept@gmail.com so that we can review and, where appropriate, delete it.

We do not knowingly sell or share, as those terms may be defined by applicable law, personal information of individuals under 16 years of age.

12. Third-Party Websites and Services

The Services may contain links to websites, social-media platforms, or other services that we do not control. Their privacy, security, and information practices are governed by their own policies. The inclusion of a link does not by itself mean that mutaé endorses or controls the third party.

Information you publish in a public or semi-public area of a third-party platform may be visible and used by other users or by that platform according to its terms and privacy policy.

13. Complaints

If you have a concern about how mutaé processes personal information, please contact us first at mutaeconcept@gmail.com so that we can review it.

You may also submit a complaint to the Ukrainian Parliament Commissioner for Human Rights or, where another data-protection law applies to the processing, to the competent supervisory authority in your place of residence. EEA supervisory authorities are listed by the European Data Protection Board.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our data practices, Shopify settings, service providers, or applicable legal requirements. The revised version will be posted on the website with an updated date. Where required by law, we will provide additional notice of material changes.

15. Contact

For questions about this Privacy Policy or requests concerning your personal information, contact:

Seller and data controller: Havrylenko Natalia PE
Registered business address: 36 Lisova Street, Pishchane, Kremenchuk District, Poltava Region, 39701, Ukraine.
Email: mutaeconcept@gmail.com

Please use email for privacy requests. Instagram Direct is not an official channel for privacy requests or requests involving sensitive or order-specific information.