PRIVACY AND CONFIDENTIALITY POLICY
OF THE ONLINE STORE
"Revive&Thrive" (hereinafter referred to as the "Privacy and Confidentiality Policy")

Current version as of 25 February 2024 

This Privacy and Confidentiality Policy is developed in accordance with the requirements of the Law of Ukraine "On Personal Data Protection" and other regulatory acts of Ukrainian legislation governing legal relations related to the collection, processing, storage of personal data, as well as the right of citizens to privacy and the right to expression, and is also developed in accordance with the requirements of European legislation, the General Data Protection Regulation (GDPR; Regulation (EU) 2016/679).
1. DEFINITION OF TERMS 
1.1. The following terms are used in this Privacy and Confidentiality Policy:
1.1.1. "Revive&Thrive" - Yana Gorlo, PE, EDRPOU 2734815910, who owns the Revive&Thrive online store and sells goods or services.
1.1.2. "Administration of the website of the Revive&Thrive online store (hereinafter referred to as the Website Administration)" - authorised persons to manage the site, acting on behalf of the Revive&Thrive Online Store, who organise the processing and collection of personal data, as well as determine the purposes of processing personal data, the composition of personal data to be processed and collected, actions or operations performed with personal data.
1.1.3. "Revive&Thrive Online Store" means an online platform on the Internet, which is available at the following link: https://www.reviveandthrive.com.ua/ , where the User can purchase goods or services of "Revive&Thrive". 
1.1.4. "Personal data" means any information relating directly or indirectly to a specific or identifiable individual (personal data subject), including the User of the Website.
1.1.5. "Processing of personal data" means any action (operation) or set of actions (operations) performed with the use of automation tools or without the use of such tools with personal data, including: collection, recording, systematisation, accumulation, storage, clarification (updating, changing), extraction, use, transfer (distribution, provision, access), depersonalisation, blocking, deletion, destruction of the User's personal data.
1.1.6. "Confidentiality of personal data" is a mandatory requirement to prevent the dissemination of personal data of the subject (User) without the personal consent of an individual or other legal basis, which is observed by the Site Administration or other persons who have gained access to personal data.
1.1.7. "User of the website of the Revive&Thrive online store" or "User" means a natural person who can be identified directly or indirectly, in particular by an identifier such as a name, identification number, location data, online identifier or by one or more factors specific to the physical or physiological, genetic, mental, economic, cultural or social identity of that natural person (Article 4(1) of the GDPR). A user is also a person who purchases Revive&Thrive products or simply visits the Revive&Thrive online store.
1.1.8. "Cookie" - a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server each time in an HTTP request when trying to open a page of the corresponding site.
1.1.9. "IP address" means a unique network address of a node in a computer network built on the IP protocol.
2. SUBJECT OF THE PRIVACY AND CONFIDENTIALITY POLICY
2.1. By using the site or purchasing goods offered in the Revive&Thrive online store, the User confirms that he/she agrees to the collection and processing of personal data by Revive&Thrive and the Site Administration and its authorised persons.
2.2. The User gives his/her consent to the Site Administration and Revive&Thrive to process the information received, including collection, systematisation, accumulation, storage, clarification (updating, correction), use, distribution, depersonalisation, blocking, destruction of personal data specified in the questionnaire, for the purpose of measures aimed at forming a database of participants, compiling statistical reports, conducting market research, as well as interacting with the User, including via telecommunication networks, including sending SMS messages and e-mails.
2.3. The User confirms his/her consent that the Site Administration and Revive&Thrive have the right to interact with the User by making direct contacts through various means of communication, including, but not limited to: mailing, e-mail, the Internet, etc.
2.4. Personal data permitted to be processed and collected under this Privacy and Confidentiality Policy includes, but is not limited to, the following information:
2.4.1 Customer (individual User) data:
- first and/or last name;
- e-mail address
- telephone number
- company name;
- number and address of the organisation;
- delivery address;
- links to an individual in social networks;
- IP address.
2.4.2.  Transaction data:
- information about payment from an individual (User) and other information about services or goods ordered in the Revive&Thrive online store.
2.4.3.  Financial data:
- bank account and credit or debit card information, invoice and invoice information, payment methods.
2.4.4.  Contact data:
- Information or records created as a result of contact with Revive&Thrive or the Site Administration. For example, it can be a telephone conversation, online contact, contact via e-mail, physical mail or messengers such as Viber, Telegram, WhatsApp and others.
2.4.5.  Technical data:
- IP address, date and time of the request, content of the request, access status/http status code, website sending the request, browser, operating system and its interface, language and version of the browser software.
2.4. In the course of any communication between the User and Revive&Thrive, the Site Administration, the latter have the right to record a conversation with the User or store any data on communication between the User and Revive&Thrive, the Site Administration in order to improve the quality of service.
3. POLICY ON COOKIES
3.1 Revive&Thrive and the Site Administration collect information about the User's visits to the Revive&Thrive Online Store in order to obtain statistics on visits and the effectiveness of their use, to form a personal approach and adapt to the interests of each User. The site administration and Revive&Thrive do this with the help of various technologies, one of which is cookies. This is data that the website can send to the browser and it will be stored on the computer for further identification by the website.
3.2. Cookies are used to evaluate the effectiveness of websites (for example, to measure the number of visitors and the duration of their stay on the website of the Revive&Thrive online store), to identify the most interesting and visited topics and pages, as well as to ensure the convenience of navigation and use of the above website, without collecting any personal information. Cookies can also be used to form a personalised approach based on the existing experience of the User or any other person with the Revive&Thrive online store and its benefits. Over time, this information allows us to improve the experience.
3.3 Cookies are text files that are sent by the Revive&Thrive online store to the User's device, which allows you to improve the website of the Revive&Thrive online store. Cookies are unique to the User's account or browser. 
3.4. The User will be notified of the use of cookies during the first visit to the website of the Revive&Thrive online store. If the User is against the collection of information using cookies, you can adjust the choice at any time through the Cookie Settings Centre.
3.5. Browsers provide the User with the ability to manage cookies in accordance with the requirements. The User can manage and/or delete, restrict or block cookies from the Website at any time by modifying the browser configuration. If the User does not want to use cookies on the website of the Revive&Thrive online store, he/she must first disable cookies on his/her browser.
3.6. Through the browser settings, the User can choose which cookies to accept and which not to accept. Such settings directly depend on the browser used by the User: 
- Cookie settings in Chrome; 
- Cookie settings in Firefox; 
- Cookie settings in Internet Explorer; 
- cookie settings in Safari. 
If the User decides to block certain functional cookies, the User may not be able to use some of the Revive&Thrive services. In addition to the settings that may be available on the website of the Revive&Thrive Online Store, the User may refuse to use certain cookies.
4. COLLECTION AND USE OF PERSONAL DATA
4.1. "Revive&Thrive" and the Site Administration collects personal data in the following cases:
- when the User visits the website of the Revive&Thrive online store;
- when the User fills out contact forms on the website of the Revive&Thrive online store;
- when the User follows the newsletter posted on the website of the Revive&Thrive online store;
- when the User contacts "Revive&Thrive" or the Site Administration by phone, including through instant messengers, e-mail, chat on the website or through social networks;
- "Revive&Thrive" and the Website Administration may receive personal data of an individual when the User clicks on the button in social networks: "like", "subscribe" or otherwise interact with the official pages of Revive&Thrive on Facebook, Instagram and other platforms.
5. PURPOSE OF COLLECTING AND PROCESSING PERSONAL DATA
5.1. The User's personal information is used by the Revive&Thrive Online Store and the Site Administration for the following purposes:
5.1.1. Contractual purpose:
- to conclude a contract, contractual information about an individual, namely: name and surname, telephone number, e-mail and delivery address;
- to enter into a contract, perform, manage and enforce services or sell products, including any related contract, additional documents such as addenda, amendments, etc;
- share personal data with a partner, provide services or sell products to an individual;
- manage payment or commissions and fees;
- to inform the User about changes/additions to all services or goods provided or sold through the Revive&Thrive Online Store, as well as the Privacy and Confidentiality Policy and cookies;
- when "Revive&Thrive" and the Site Administration sends the ordered goods by the User, and these goods are sent by their own forces or by a logistics (postal) company;
- to inform the approximate time of service provision or delivery of goods to the User.
5.1.2. Legal purpose:
- for statistics, analysis and market research;
- to analyse and improve Revive&Thrive products and services;
- send the goods to the User by mail (logistics companies);
- to disclose the User's personal data to authorised state bodies in accordance with the law;
- support the business processes of Revive&Thrive;
- track, verify and record communication between the User and Revive&Thrive;
- from time to time send the User labelling information, useful information, newsletters, new offers;
- notify the User of the results of claims consideration (if any);
- to inform the User about the contact person of Revive&Thrive who will be in contact with the User;
- to offer the Client to join various promotions, programmes, loyalty systems, etc. organised by Revive&Thrive;
- in order to ensure that Revive&Thrive conducts various promotions, programmes, loyalty systems, etc., including registration of the User in its own database of persons participating in such promotions, programmes, loyalty systems, etc;
- to enable the User to join various policies, rules, regulations, instructions, etc. governing the conduct of "Revive&Thrive" promotions, programmes, loyalty systems, etc;
- to inform the Users about the procedure for conducting promotions, programmes, loyalty systems, etc. organised by Revive&Thrive, as well as to inform about changes to the policies, rules, regulations, instructions, etc. governing the conduct of promotions, programmes, loyalty systems, etc;
- comply with other legal obligations.
6. USER RIGHTS
6.1. The User, in relation to their personal data provided for the collection, accumulation, processing, storage and use by Revive&Thrive and the Site Administration on the basis of the Law of Ukraine "On Personal Data Protection" and the General Data Protection Regulation (GDPR; Regulation (EU) 2016/679), has the following rights 
- to know about the sources of collection, location of their personal data, the purpose of their processing, location;
- to receive information about the conditions for granting access to personal data;
- to access their personal data;
- receive information on whether his/her personal data is being processed;
- to submit a reasoned request to Revive&Thrive, with an objection to the processing of their personal data;
- to submit a reasoned request to change or destroy their personal data if this data is processed unlawfully or is unreliable;
- to protect their personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision, as well as to protect against the provision of information that is inaccurate or discrediting the honour, dignity and business reputation of an individual;
- file complaints regarding the processing of their personal data with the competent authorities or court;
- apply for legal remedies in case of violation of the legislation on personal data protection;
- to make reservations regarding the restriction of the right to process their personal data when giving consent;
- withdraw consent to the processing of personal data;
- to know the mechanism of automatic processing of personal data;
- the right to amend incomplete or inaccurate personal data;
- the right to delete personal data if the person has successfully exercised the right to object to data processing;
- the right to withdraw consent to the processing of personal data at any time;
- the right to object to the use or processing of personal data by Revive&Thrive and the Site Administration if the person believes that this affects his or her rights and freedoms. 
6.2. To exercise the rights described above, you should contact Revive&Thrive at the following email address: support@reviveandthrive.com.ua. If Revive&Thrive receives a request from the User to exercise any of the above rights, Revive&Thrive may ask the User to verify their identity before acting on the request. This is necessary to ensure the protection and security of personal data.
7. TRANSFER AND DISCLOSURE OF PERSONAL DATA OF AN INDIVIDUAL
7.1. "Revive&Thrive" and the Site Administration do not transfer or disclose any personal data about the User without his/her consent, except for the purposes mentioned in this Privacy and Confidentiality Policy, or if required by law. 
7.2. "Revive&Thrive and the Website Administration may use the services of third parties to provide and sell goods to the User. All processors acting on behalf of Revive&Thrive shall process the User's data only in accordance with the instructions of Revive&Thrive and shall strictly comply with this Privacy and Confidentiality Policy and cookies, the laws of Ukraine and the European Union.
7.3. "Revive&Thrive" and the Site Administration may transfer the User's personal data outside the European Union and Ukraine in accordance with the obligations of this Privacy and Confidentiality Policy and cookies or the law in the following cases:
- Ukraine and the European Commission or other authorised body have recognised that the country of destination of the transfer of personal data provides an appropriate level of protection of personal data;
- the provider of services/seller of goods in accordance with this Privacy and Confidentiality Policy is bound by relevant and specific contractual obligations required by applicable data protection legislation.
8. MEASURES TO PROTECT THE USER'S PERSONAL DATA
8.1. "Revive&Thrive" and the Site Administration take measures to ensure the protection and security of the User's personal data at all stages of processing, including through organisational and technical measures.
8.2. "Revive&Thrive" and the Website Administration shall take all necessary measures to prevent accidental loss, use or unauthorised access, alteration or disclosure of the User's personal data.
8.3. "Revive&Thrive and the Site Administration have implemented a process for eliminating personal data security breaches or accidents and will inform the User and any relevant regulator of a suspected breach or incident if Revive&Thrive or the Site Administration is obliged to do so by law.
8.4. If Revive&Thrive or the Website Administration transfers the User's personal data, Revive&Thrive will require that third parties take measures to protect personal data. "Revive&Thrive" and the Site Administration do not grant any rights to third parties to use personal data for their own purposes. The third party may use the User's personal data for a specific purpose and in accordance with the instructions of Revive&Thrive.
9. ADDITIONAL INFORMATION ABOUT THE USER'S PERSONAL DATA
9.1. "Revive&Thrive" and the Site Administration are not obliged to provide the User's personal data to third parties. 
9.2. "Revive&Thrive" and the Site Administration shall store personal data only as long as necessary. When storing personal data, "Revive&Thrive" and the Site Administration takes into account the following
- the duration of the purposes for which Revive&Thrive and the Website Administration collects personal data and the duration for which Revive&Thrive and the Website Administration is obliged to provide services or sell products;
- ensuring and managing the relationship between Revive&Thrive and the Website Administration and the User;
- "Revive&Thrive", a" and the Website Administration also stores the User's personal data to fulfil regulatory, accounting, reporting and legal requirements or instructions.
9.3. Processing is lawful only if the data subject (User) has consented to the processing of his or her personal data for one or more specific purposes. The processing of personal data of a child is lawful if the child is at least 16 years old. If the child is under 16 years of age, such processing is lawful only if the consent of the parents is given or authorised by a person who has parental responsibility for the child. 
9.4. The online store "Revive&Thrive",ma" may contain links to other websites. However, if the User uses these links, the User should keep in mind that "Revive&Thrive" and the Site Administration do not control these websites. Thus, Revive&Thrive and the Site Administration are not responsible for the protection and confidentiality of any information that the User provides while visiting such sites, and such sites are not governed by this Privacy Policy. The User should be careful to read the policy applicable to the relevant website.
10. ADDITIONAL TERMS AND CONDITIONS
10.1 Revive&Thrive has the right to make changes to the Privacy and Confidentiality Policy without the consent of the User by notifying the User 30 (thirty) calendar days before the changes come into effect. Changes to the Privacy and Confidentiality Policy are made by posting a new current version of the Privacy and Confidentiality Policy at the following link: https://www.reviveandthrive.com.ua/privacy-policy. The current and effective version of the Privacy Policy can always be found at the same link. 
10.2. The new Privacy and Confidentiality Policy comes into force from the moment it is posted on the website of the Revive&Thrive Online Store, unless otherwise provided by the new version of the Privacy and Confidentiality Policy.
10.3. In the event of changes that significantly change the User's rights to confidentiality, Revive&Thrive or the Site Administration will send an additional notification to the User by e-mail. If the User does not agree to the changes to this Privacy and Confidentiality Policy, it is necessary to contact Revive&Thrive at the following email address: support@reviveandthrive.com.ua. 
10.4. In case of disagreement with any changes made to the Privacy and Confidentiality Policy, the User must stop using the Revive&Thrive Online Store, and has the right to demand that the Site Administration and Revive&Thrive delete his personal data. If Revive&Thrive or the Site Administration has not received a refusal from the User to accept the new version of the Privacy Policy, it means that the User has agreed to the new version of the Privacy Policy. 
10.5. The User (for citizens of the European Union) may file a complaint about the violation of the General Data Protection Regulation, GDPR; Regulation (EU) 2016/679 by Revive&Thrive or the Website Administration to the court or to the European Data Protection Supervisor. The contact details of the above-mentioned supervisor can be found at the following link: https://edps.europa.eu/about-edps/contact_en   
10.6. The User (for citizens of any countries other than those specified in clause 10.5. of this Privacy and Confidentiality Policy) may file a complaint regarding the violation of the legislation governing the protection of personal data by Revive&Thrive or the Site Administration to the court or to the Ukrainian Parliament Commissioner for Human Rights in the field of personal data protection. Contacts of the Ukrainian Parliament Commissioner for Personal Data Protection can be found at the following link: https://ombudsman.gov.ua/about