Privacy Policy

1.1. This Privacy Policy (hereinafter — "Policy") defines the procedure for collecting, processing, storing, using, and protecting personal data of users (hereinafter — "User" or "Client") of the website doza.clinic (hereinafter — "Website").

1.2. The owner and controller of personal data is FOP Shapoval Anastasiia Hennadiivna, TIN: 3711700209, address: 74000, Kherson region, Vysokopillia, Bankova str., 102 (hereinafter — "DOZA", "we", "us").

1.3. This Policy has been developed in accordance with the Law of Ukraine "On Personal Data Protection" dated 01.06.2010 No. 2297-VI, the Civil Code of Ukraine, and other legal acts regulating personal data protection.

1.4. By using the Website, filling out forms, placing orders, or making payments, the User confirms that they have read this Policy and voluntarily consent to the processing of personal data under the terms set out below.

1.5. If the User does not agree with the terms of this Policy, they must stop using the Website and refrain from providing their personal data.

2.1. Data voluntarily provided by the User:

• surname, first name, patronymic
• contact phone number
• email address
• delivery address (city, branch / address)
• data provided during the Website survey (height, weight, gender, program goal, individual characteristics)
• messages sent via the feedback form
• preferred messenger for communication
• other information voluntarily provided by the User during communication

2.2. Data collected automatically when visiting the Website:

• IP address (anonymized)
• browser type and version, operating system, device type
• date, time, and duration of visit
• pages visited by the User and navigation sequence
• referral source (referrer)
• advertising campaign parameters
• cookie data (see Section 7)
• website interaction data (clicks, scrolls, form submissions)

2.3. DOZA does not collect or process:

• bank card data (payment processing is performed by certified payment systems)
• passport data
• biometric data
• data on racial origin, political, religious beliefs, and other sensitive data categories

3.1. Personal data is processed for the following purposes:

• provision of Services under the Agreement (Public Offer)
• User identification upon request
• order processing and delivery organization of package components
• remote program support and Client communication
• sending order status notifications
• providing consultations and responding to inquiries
• improving the quality of Services and Website operation
• analyzing website traffic and behavior to improve user experience
• ensuring Website functionality
• fraud and abuse prevention
• compliance with Ukrainian legislation

3.2. Processing of personal data is carried out on the basis of:

• voluntary consent of the User (Art. 6 of the Law "On Personal Data Protection")
• necessity to fulfill contractual obligations (Public Offer)
• legitimate interests of DOZA (fraud protection, service improvement)
• requirements of Ukrainian legislation

4.1. DOZA does not sell, transfer, or distribute Users' personal data to third parties, except in the cases specified below.

4.2. Personal data may be transferred to the following categories of recipients solely to the extent necessary for the stated purposes:

• Order management system — order processing, Client database management
• Delivery services — delivery of package components
• Payment systems — payment processing
• Web analytics services — website traffic and behavior analysis
• Call tracking service — call tracking, support chat
• Messengers — operational Client communication

4.3. DOZA obliges all third parties to whom data is transferred to maintain confidentiality and use data solely for the stated purposes.

4.4. Personal data may be disclosed at the request of authorized state bodies in cases provided by Ukrainian legislation.

4.5. In case of business reorganization or sale, personal data may be transferred to the successor in compliance with this Policy. The User will be notified of such transfer.

5.1. Personal data is stored for the period necessary to achieve the processing purposes, but not less than the periods established by Ukrainian legislation:

• order and financial transaction data — not less than 3 (three) years after completion of Services
• correspondence and inquiry data — not less than 1 (one) year
• analytics data — up to 26 months
• after the storage period expires, data is destroyed or anonymized

5.2. DOZA takes organizational and technical measures to protect personal data from unauthorized access, modification, disclosure, or destruction, including:

• use of HTTPS protocol (SSL/TLS) for data encryption during transmission
• restricting access to personal data to persons who require it for their official duties
• use of secure servers and cloud services with appropriate security certificates
• regular software updates
• application of anti-spam and automated attack protection measures

5.3. Despite the measures taken, DOZA cannot guarantee absolute security of data transmission over the Internet. The User uses the Website at their own risk.

6.1. In accordance with the Law of Ukraine "On Personal Data Protection", the User has the right to:

• know the sources of collection, location of their personal data, and the purpose of processing
• receive information about the conditions for granting access to personal data, including information about third parties to whom data is transferred
• access their personal data
• correct inaccurate or incomplete personal data
• delete personal data if the grounds for processing have ceased
• withdraw consent to personal data processing
• object to the processing of personal data
• protection from automated decisions that have legal consequences
• appeal actions or inactions of the personal data controller to the Ukrainian Parliament Commissioner for Human Rights or to the court

6.2. To exercise these rights, the User may contact DOZA in the manner specified in Section 9 of this Policy.

6.3. Requests are processed within 10 (ten) business days from the date of receipt. DOZA may request additional information to verify the User's identity.

6.4. Withdrawal of consent to personal data processing may result in the inability to provide Services in whole or in part.

7.1. The Website uses cookies — small text files stored on the User's device. Cookies help ensure the proper functioning of the Website, analyze traffic, and improve service.

7.2. Types of cookies used on the Website:

• Essential (technical) — ensuring basic Website functionality, security (session or up to 1 year)
• Analytical — analyzing website traffic and behavior (up to 26 months)
• Marketing — evaluating advertising campaign effectiveness (up to 2 years)
• Functional — call tracking, support chat (up to 1 year)

7.3. The User can manage cookies through their browser settings:

• delete all or specific cookies
• block cookies
• set notifications before saving cookies

7.4. Disabling cookies may affect Website functionality.

7.5. By continuing to use the Website, the User consents to the use of cookies in accordance with this Policy.

8.1. The Website and DOZA Services are intended exclusively for persons who have reached 18 years of age.

8.2. DOZA does not knowingly collect personal data of persons under 18 years of age. If we become aware that data was provided by a minor, we will take measures for its immediate deletion.

9.1. For all matters related to personal data protection, data processing, exercising User rights, or this Policy, the User may contact:

E-mail: [email protected]

Phone: 073 239 81 05

Telegram: @Doza_sofia_bot

Postal address: 74000, Kherson region, Vysokopillia, Bankova str., 102

9.2. Responsible person: FOP Shapoval Anastasiia Hennadiivna.

10.1. DOZA reserves the right to modify and supplement this Policy unilaterally without prior notice to the User.

10.2. The current version of the Policy is always available at: doza.clinic/privacy.

10.3. Continued use of the Website after changes are made constitutes the User's acceptance of the new version of the Policy.

10.4. The date of the last revision is indicated at the beginning of the document.

11.1. This Policy is an integral part of the Public Offer.

11.2. In case of discrepancies between this Policy and other DOZA documents regarding personal data protection, this Policy shall prevail.

11.3. All matters not regulated by this Policy shall be resolved in accordance with the current legislation of Ukraine.