Privacy Policy of U POST LLC

1. GENERAL PROVISIONS

This Privacy Policy (hereinafter referred to as the “Policy”) sets out the procedure for collecting, using, processing, and protecting the personal data of users of the website of the company Limited Liability Company “U POST” (hereinafter referred to as the “Company”, “we”, “our”, “U POST LLC”), which provides international postal services.

This Policy has been developed in accordance with international privacy standards, including the Law of Ukraine “On Personal Data Protection” dated 01.06.2010 No. 2297-VI and the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), as well as other relevant national data protection legislation.

This Privacy Policy is an integral part of the “Terms of Service” and the “Public Offer Agreement” concluded with us at the time of placing an order (creating an order).

This Privacy Policy also applies if you have ordered an ancillary service (e.g., cash on delivery) from another company (e.g., a partner). These third parties may also have their own privacy policies (or similar documents) applicable when collecting information about you.

The Privacy Policy and Cookie Use Policy also apply to the personal data of the recipient on whose behalf the shipment is carried out.

Personal data is any information relating to an identified or identifiable natural person. Information that cannot be traced back to an identified or identifiable individual (e.g., statistical data) is not considered personal data.

2. WHAT DATA WE COLLECT

For the purpose of providing Services and fulfilling the Agreement with our clients (Senders, Recipients) [According to Article 6(1)(b) of the GDPR], U POST LLC, as the Data Controller, processes the following necessary data:

2.1. Data provided by the user:

Profile data: First name, last name, patronymic (middle name);
Contact details (phone number, email address);
Postal and billing address;
Payment data (bank account number, payment card details);
Data related to shipment processing (recipient, recipient’s data, delivery address, parcel content);
Geolocation.

2.2. Automatically Collected Data:

IP address;
Server log files;
Cookie data;
Domain name;
Date and time of access;
HTTP response code;
Visited pages;
Operating system name and version;
Website usage data (analytics, sessions, user behavior).

2.3. Data from Third Parties:

We may receive data from financial institutions, courier services, government authorities, etc., if necessary for the provision of our services.

3. PURPOSE OF PERSONAL DATA PROCESSING

We process personal data exclusively for the purpose of:

Providing postal and logistics services;
Fulfilling contractual obligations to clients;
Verifying identity to prevent fraud;
Improving the service and personalizing user experience;
Fulfilling legal obligations to government authorities;
Placing orders and carrying out actions required for order fulfillment;
Tracking postal shipments;
Establishing communication with clients;
Providing the possibility of parcel redirection;
Direct marketing and sales promotion;
Sending commercial and marketing information via electronic communication and push notifications.

4. LEGAL GROUNDS FOR DATA PROCESSING AND DATA SUBJECT RIGHTS

The processing of personal data is carried out on the following legal grounds:

1. In accordance with the current norms of national legislation of Ukraine (according to the Constitution of Ukraine and the Law of Ukraine “On Personal Data Protection”), you have the right to:

know the sources of collection, the location of your personal data, the purposes of their processing, the location or residence (stay) of the data controller or processor, or give a corresponding instruction to authorized persons to obtain this information, except as provided by law;
receive information about the conditions of access to personal data, including information about third parties to whom your personal data is transferred;
access your personal data;
receive a response no later than thirty calendar days from the date of request, except as provided by law, regarding whether your personal data is being processed, and also receive the content of such personal data;
submit a reasoned demand to the data controller objecting to the processing of your personal data;
submit a reasoned demand for the modification or destruction of your personal data by any data controller or processor if such data is processed unlawfully or is inaccurate;
protect your personal data from unlawful processing and accidental loss, destruction, damage due to intentional concealment, failure to provide or untimely provision, and to be protected from providing information that is inaccurate or discredits honor, dignity, and business reputation;
file complaints about the processing of your personal data to the Commissioner of the Verkhovna Rada of Ukraine for Human Rights or to the court;
apply legal remedies in case of violation of personal data protection legislation;
make reservations about the limitation of the right to process your personal data when giving consent;
withdraw your consent to the processing of personal data;
know the mechanism of automatic processing of personal data;
be protected against automated decision-making that has legal consequences for you.

2. In accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), you have the right to:

receive information and access your data (right of access under Article 15 GDPR);
correct inaccurate personal data and update your data (right to rectification under Article 16 GDPR);
request the deletion of your personal data, i.e., the “right to be forgotten” (right to erasure under Article 17 GDPR);
restrict the processing of data under Article 18 GDPR;
request data portability to another controller (right to data portability under Article 20 GDPR);
object to the processing of your personal data (right to object under Article 21 GDPR).

3. U POST LLC processes your data on the following legal bases:

Necessity for the performance of a contract [According to Article 6(1)(b) GDPR];
Compliance with legal obligations [According to Article 6(1)(c) GDPR];
Legitimate interests of the company and fraud prevention [According to Article 6(1)(f) GDPR];
Voluntary consent provided by the user [According to Article 6(1)(a) GDPR];
Marketing purposes [According to Article 1(a) and Article 7 GDPR];
Parcel tracking [According to Article 6(1)(b) GDPR];
Possibility to establish contact with the client [According to Article 6(1)(f) GDPR].

5. TRANSFER OF PERSONAL DATA TO THIRD PARTIES

U POST LLC may transfer personal data to third parties exclusively in the following cases:

For the purpose of fulfilling the order (transfer to courier services, delivery partners);
For the purpose of performing financial operations (to banks, payment systems);
For the purpose of complying with legal requirements (to government authorities upon request).

6. DATA STORAGE AND PROTECTION

6.1. U POST LLC stores personal data no longer than necessary to achieve the purposes of processing or to fulfill legal requirements.

6.2. Protection measures:

We implement appropriate technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or destruction of personal data, including:

Use of encryption (SSL/TLS) during data transmission;
Server protection using firewalls, antivirus software, and monitoring systems;
Restricted access to personal data – only for authorized personnel;
Two-factor authentication for database access;
Regular security audits.

7. COMPLAINT SUBMISSION

If you have a complaint regarding how U POST LLC processes your data, please submit it in writing with as many details as possible using the contact information provided on the website. U POST LLC will cooperate with you to resolve any issues promptly.

The administrative authority for personal data protection in Ukraine is the Department for Personal Data Protection of the Secretariat of the Ukrainian Parliament Commissioner for Human Rights. You may contact them with complaints or suggestions if you believe your rights related to personal data processing have been violated.

8. USE OF COOKIES

We use cookies to analyze traffic and improve the performance of the website. You can manage your cookie preferences in your browser settings.

9. CHANGES TO THE PRIVACY POLICY

We reserve the right to update this Policy. Any changes will be published on the website. You may be required to read and accept the new terms to continue using any/all services of U POST LLC.

10. CONTACT INFORMATION

If you have any questions regarding this Policy, please contact us at:

U POST LLC
Address: Ukraine, 89600, Zakarpattia region, Mukachevo district, Mukachevo city, Berehivska-Ob’yizdna street, building 12
Email: office@upost.com.ua
Phone: +38 067 554 8888

Last updated: 26.03.2025