Privacy Policy of the Drevushko.com website

Effective date: 28 March 2026

1. General provisions

This Privacy Policy (hereinafter — the “Policy”) governs the procedure for processing and protecting the information that the Site Administration drevushko.com (hereinafter — the “Site”) obtains about the User in the course of using the Site, its services, programs and products. The document describes what data is collected, for what purposes, to whom and on what grounds it may be transferred, as well as what rights the User has in respect of their personal information.

By starting to use the Site, the User thereby unconditionally accepts this Policy and the conditions for processing personal information set out herein. If even one of the conditions is unacceptable to the User, they should cease using the Site and its services. Continued use of the Site is deemed to constitute agreement with the current version of the Policy.

1.1. For the purposes of this Policy, the User’s personal information means:

Personal information that the User provides about themselves independently when registering (creating an account) or in the course of using the services, including the User’s personal data.
Data that is transmitted to the Site’s services automatically by means of the software installed on the User’s device. This includes the IP address, cookie file contents, browser information, the technical characteristics of the User’s hardware and software, the date and time of access to the services, the addresses of the requested pages, the referral source and other similar technical information necessary for the correct operation of the Site.

1.2. This Policy applies exclusively to the drevushko.com Site. The Site does not control and bears no responsibility for third-party resources to which the User may navigate via links placed on the Site. The processing of personal data on such third-party resources is governed by their own policies, which the User is advised to review separately.

1.3. The Site Administration does not verify the accuracy of the personal information provided by the User and has no means of assessing their legal capacity. At the same time, the Administration proceeds on the assumption of the User’s good faith: it is presumed that the User provides accurate and complete information and updates it in a timely manner. The User bears responsibility for the consequences of providing inaccurate data.

2. Purposes of processing users’ personal information

The Site adheres to the principle of data minimization: only such personal information as is genuinely necessary to provide the services, place orders and perform agreements with the User is collected and stored. An exception applies where the obligation to store data for a set period is directly provided for by law. The Site does not request or accumulate excessive information unrelated to the listed purposes.

The Site processes the User’s personal information for the following purposes:

Identifying the User, registered on the Site, in order to place an order and (or) conclude a distance sale-and-purchase contract for goods.
Providing the User with access to personalized resources of the Site.
Establishing feedback with the User, including sending notifications and requests relating to the use of the Site and the provision of services, and processing requests and applications from the User.
Determining the User’s location in order to ensure security and prevent fraud.
Confirming the accuracy and completeness of the personal data provided by the User.
Creating an account for making purchases, if the User has consented to the creation of an account.
Notifying the Site User of the status of the Order.
Processing and receiving payments, confirming tax or tax benefits, and disputing a payment.
Providing the User with effective customer and technical support in the event of problems relating to the use of the Site.
Carrying out advertising activities with the User’s consent (distribution of news, special offers and pricing information).

3. Conditions for processing personal information and its transfer to third parties

3.1. The User’s personal information is processed on a confidential basis. An exception applies to situations where the User voluntarily discloses information about themselves for general access by an unlimited number of persons — for example, by publishing it in public sections or reviews. In such cases, the User is aware that such information becomes available to third parties and loses its confidential status.

3.2. The Site has the right to transfer the User’s personal information to third parties in the following cases:

The User has consented to such actions.
The transfer is necessary for the User to use a particular service or for the performance of a particular agreement or contract with the User (for example, transferring data to a courier service for the delivery of goods).
The transfer is provided for by the legislation of the Republic of Belarus or other applicable legislation and is carried out within the procedure established by law — in particular, at the request of authorized state bodies, a court or other persons legally entitled thereto.
In order to ensure the ability to protect the rights and legitimate interests of the Site Administration or third parties in cases where the User violates the Site’s User Agreement.

3.3. When processing Users’ personal data, the Site Administration is guided by the legislation of the Republic of Belarus on personal data and other regulations governing this area. Processing is carried out lawfully and in good faith, is limited to predetermined purposes and does not exceed the volume necessary to achieve them.

4. Composition of the personal data collected

The Site Administration may collect the following data:

The User’s surname, first name and patronymic;
Contact telephone number;
Email address (e-mail);
Delivery address of the goods (postal code, city, street, house/apartment number);
Order history and preferences in the choice of wooden products.

In addition to the information listed, the Site collects and processes anonymized data about visitors, including cookie files, using internet statistics services — Yandex Metrica, Google Analytics and similar. This data does not allow a specific individual to be directly identified and is used in aggregated form to analyze traffic, assess the convenience of the Site and improve its operation.

5. Use of Cookies

5.1. The cookie files exchanged between the Site and the User’s equipment during operation are used to provide personalized services, remember settings, keep statistics and conduct research, and to improve the functionality and convenience of the Site. Cookies help, in particular, to save the contents of the basket, recognize a returning visitor and display the interface correctly.

5.2. The User understands that the equipment and software they use to work on the internet generally allow cookie operations to be disabled — for all sites at once or selectively — as well as previously saved cookie files to be deleted. The procedure for managing these settings is determined by the documentation of the relevant browser. Disabling cookies may, however, restrict access to certain functions of the Site.

5.3. The structure of a cookie file, its content and technical parameters are determined by the Site Administration and may be changed without prior notice to the User.

5.4. By continuing to use the Site with active browser settings that permit cookies to be saved, the User consents to their use for the purposes specified in this section. Such consent may be withdrawn by changing the browser settings or clearing the saved cookie files.

6. Measures to protect personal information

The Site Administration takes the necessary and sufficient organizational and technical measures to protect the User’s personal information from unlawful or accidental access, destruction, alteration, blocking, copying and distribution, as well as from other unlawful actions with it by third parties. Such measures include:

Using the HTTPS protocol to encrypt data during transmission.
Regularly updating the server software.
Restricting the range of persons with access to the Site’s database.
Conducting regular security audits of the system and promptly remedying identified vulnerabilities.
Backing up data and differentiating employees’ access rights according to their job duties.

Notwithstanding the measures taken, the Site Administration draws the User’s attention to the fact that the transmission of data over the internet cannot be guaranteed to be 100% secure. The User is advised to exercise reasonable care: not to disclose account credentials to unauthorized persons and to use strong passwords.

7. Rights and obligations of the parties

7.1. The User is obliged to:

Provide the personal data information necessary to use the Site.
Update and supplement the personal data information provided in the event that this information changes.

7.2. The User has the right:

To receive information relating to the processing of their personal data.
To have their personal data rectified, blocked or destroyed if the personal data is incomplete, outdated, inaccurate or unlawfully obtained.
To withdraw consent to the processing of personal data by sending written notice.

7.3. The Site Administration is obliged to:

Use the information received solely for the purposes specified in this Policy.
Ensure that confidential information is kept secret.
Block the personal data relating to the relevant User from the moment of the request or enquiry of the User or their legal representative, or of the authority responsible for protecting the rights of personal data subjects, for the period of verification.

8. Cross-border transfer of personal data

8.1. Before commencing the cross-border transfer of personal data, the operator is obliged to ensure that the foreign state to whose territory the personal data is to be transferred provides reliable protection of the rights of personal data subjects.

8.2. Cross-border transfer of personal data to the territory of foreign states that do not provide adequate protection of the rights of personal data subjects may be carried out only where there is the written consent of the personal data subject to the cross-border transfer of their personal data and/or the performance of a contract to which the personal data subject is a party.

9. Time limits for processing and storing personal data

9.1. The User’s personal data is processed for the period necessary to achieve the purposes of its collection, unless a different period is expressly established by law or by the contract with the User. As a rule, data is stored for as long as the User’s account is active or as long as the relationship relating to the placement and performance of orders continues.

9.2. Upon achievement of the processing purposes, as well as in the event that the User withdraws consent, personal data is subject to deletion or anonymization, with the exception of information that the Administration is obliged to store by virtue of statutory requirements (for example, for accounting and tax purposes). Anonymized statistical data may be stored and used indefinitely.

9.3. The User has the right to contact the Administration at any time with a request to rectify, block or delete their personal data. Such a request is considered within the time limits established by the applicable legislation on personal data.

10. Processing of minors’ data and withdrawal of consent

10.1. The Site is not intended for collecting the personal data of minors without the consent of their legal representatives. If the Administration becomes aware that a minor’s data has been provided without such consent, the relevant information will be deleted within a reasonable time from the moment of discovery.

10.2. Consent to the processing of personal data is given by the User voluntarily and may be withdrawn at any time. To withdraw consent, it is sufficient for the User to send written notice via the feedback form or to the email address specified in the “Contacts” section.

10.3. Upon receipt of the withdrawal of consent, the Administration ceases processing the User’s personal data and ensures its deletion, provided there are no other lawful grounds for continuing the processing. Withdrawal of consent does not affect the lawfulness of processing carried out prior to its receipt.

11. Final provisions

11.1. The Site Administration has the right to make changes to this Privacy Policy without the User’s prior consent. The User is advised to periodically review the current version of the document posted on the Site.

11.2. The new version of the Privacy Policy takes effect from the moment it is posted on the Site, unless otherwise expressly provided by the new version itself. Continued use of the Site after the publication of changes constitutes the User’s agreement with the updated terms.

11.3. All suggestions, questions and enquiries relating to this Privacy Policy and the processing of personal data should be sent via the feedback form on the Site or to the email address specified in the “Contacts” section. The Administration considers enquiries received within a reasonable time.

11.4. The current version of the Privacy Policy is permanently available for review on the page at: https://drevushko.com/privacy-policy.