Privacy Policy

The data controller responsible for your personal data is Himalayan Sound, operating from RC London, Instytutska St., Odesa, 65000, Ukraine.

For privacy-related inquiries, contact us at ukccatc@gmail.com or through our contact form at himalayan-sound.com/contact.

This policy applies to all visitors and customers worldwide, including users in Ukraine, the European Union, the United Kingdom, and other jurisdictions.

If you are located in the EEA, UK, or Ukraine, you have additional rights described in Section 10. Where local law grants you greater protections, those protections apply.

We may collect the following categories of personal data:

• Identity data: name, billing and shipping address.
• Contact data: email address, phone number.
• Transaction data: order details, payment status (card details are processed by our payment provider and are not stored by us).
• Technical data: IP address, browser type, device information, cookies, and usage data.
• Communication data: messages you send via contact forms, customer support, or newsletter sign-up.
• Marketing preferences: whether you opted in to receive promotional emails.

We use personal data to:

• Process and fulfil orders, including shipping and customer support.
• Communicate about your orders, account, or inquiries.
• Improve our website, products, and user experience.
• Send marketing communications where you have given consent.
• Comply with legal obligations, including tax and accounting requirements.
• Prevent fraud and protect the security of our services.

Under GDPR, we process personal data on the following bases: performance of a contract (order fulfilment), legitimate interests (fraud prevention, analytics, service improvement), legal obligation, and consent (marketing, non-essential cookies).

Under Ukrainian law, processing is carried out with your consent where required, and otherwise where necessary to fulfil contractual obligations or comply with applicable legislation.

We use essential cookies required for the site to function (e.g. cart, session, language preference). With your consent, we may use analytics cookies (such as Google Analytics) to understand how visitors use our site.

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

We share personal data only with trusted service providers who assist us in operating our business:

• Payment processors (e.g. Stripe) for secure payment processing.
• Shipping and logistics partners for order delivery.
• Cloud hosting and database providers (e.g. Supabase, Vercel) for data storage and site hosting.
• Email and communication services for transactional and marketing emails.
• Analytics providers, where you have consented.

We do not sell your personal data. Service providers are contractually required to protect your data and use it only for specified purposes.

Your data may be processed in Ukraine, the European Union, the United States, Nepal (supplier partners), or other countries where our service providers operate.

Where data is transferred outside the EEA, UK, or Ukraine, we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms required by applicable law.

We retain personal data only as long as necessary for the purposes described in this policy, unless a longer retention period is required by law.

Order and transaction records are typically retained for 7 years for tax and accounting purposes. Marketing data is retained until you withdraw consent or unsubscribe.

Depending on your location, you may have the following rights regarding your personal data:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — request deletion where applicable.
• Right to restrict processing — limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent — at any time, without affecting prior lawful processing.
• Right to lodge a complaint — with the Ukrainian Commissioner for Human Rights, your local EU supervisory authority, or the UK ICO.

To exercise your rights, contact us at ukccatc@gmail.com. We will respond within 30 days, or within the timeframe required by applicable law (e.g. one month under GDPR).

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

We implement appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), secure payment processing, access controls, and regular security reviews.

No method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

For questions about this Privacy Policy or to exercise your data protection rights, contact:

Himalayan Sound — ukccatc@gmail.com — RC London, Instytutska St., Odesa, 65000, Ukraine