Privacy policy

Publication date: 3 December 2025

Language and priority of versions. The official and legally binding version of this Policy is the Ukrainian version. Translations into other languages are provided solely for convenience. In case of discrepancies, the Ukrainian version shall prevail.


1. Who we are

Service Operator: FOP Hordieiev R.V. (address: 03151 Kyiv, 15 Smilianska St., Apt 158, Ukraine). Contact: support@bitovki.in.ua, support page: https://bitovki.in.ua/en/support.

The website and services available at https://bitovki.in.ua (the “Platform”) enable Users to publish and search listings (“Offers”). This Policy describes what data we process, for what purposes, and on what legal bases.

Related documents: User Agreement, Cookie Policy.


2. Scope

This Policy applies to all visitors of the Platform, registered Users, Dealers/Suppliers, Buyers/Clients, and persons interacting with us via email or support forms.


3. Data we process

  • Account data: e-mail, name/pseudonym, password hash, interface language, country/city (if provided), company details (if provided), profile settings.

  • Offer content and metadata: texts, photos/images, specifications, prices/conditions; moderation tags, publication statuses; technical processing of images (resizing/cropping/thumbnails/compression).

  • Communications and activity logs: inquiries/orders, messages, notifications, service emails, action logs for diagnostics and information security.

  • Technical data: IP address, date/time, HTTP headers, referrer, browser/OS/device details (user-agent), session identifiers/cookies, anti-fraud and rate-limiting tokens.

  • Cookies and similar technologies: see https://bitovki.in.ua/en/cookies.

  • Paid services: user ID, selected package/service, transaction data, payment statuses (processed by payment providers on their secure systems; the Platform does not receive or store payment card data).


4. Purposes and legal bases of processing

  • Providing Platform services: registration/authentication, publishing and managing Offers, moderation, notifications, support. (Contract/legitimate interest.)

  • Security and abuse prevention: protection against unauthorized access, spam, fraud, manipulation, DDoS; limiting request rates. (Legitimate interest.)

  • Analytics and product development: aggregated statistics, performance monitoring. (Legitimate interest.)

  • Communication: service notifications and support responses; marketing communications only with consent. (Contract/legitimate interest/consent.)

  • Legal compliance: accounting/tax obligations, responding to lawful requests, dispute resolution. (Legal obligation.)

Where consent is required (e.g., non-essential analytics or marketing cookies), we request it separately and allow it to be withdrawn at any time.


5. Cookies and local storage

We use cookies and similar technologies for authentication, saving preferences, session stability, security, and analytics. Details are available in the Cookie Policy.


6. Security and abuse prevention (HMAC)

To ensure security and prevent abuse, the Platform maintains technical logs and uses anti-fraud measures, including the calculation of cryptographic HMAC hashes of technical data (e.g., IP addresses and/or device identifiers) using a secret key.

  • Such HMAC hashes are not used for direct identification and serve solely for: (i) access protection, (ii) rate limiting, (iii) investigation of security incidents.

  • Secret keys and HMAC hashes are not shared with third parties and are used only within the Platform.

  • We apply security measures such as access control, HTTPS encryption, event monitoring, and regular software updates.


7. Data retention periods

We retain personal data no longer than necessary for processing purposes and to comply with legal obligations.

  • Account data — while the account remains active and for a reasonable period after deletion.

  • Security logs / technical logs — typically up to 12 months. Some error logs may be stored longer if required for incident investigation or protection of the Operator’s rights.

  • Paid services / accounting records — according to applicable accounting requirements.

  • Backups — within internal backup cycles.


8. Data sharing with third parties

  • Contractors and service providers (hosting, CDN, email, SMS, anti-DDoS, analytics, payment systems) — as processors acting under our instructions.

  • Successors in the event of reorganization or sale of the project — with notice provided via the Platform.

  • Government authorities — as required by applicable law.


9. International data transfers

Data may be transferred outside your country, including to infrastructure providers (hosting, CDN) located in the EU, USA, or other jurisdictions. We use appropriate contractual safeguards and require recipients to implement adequate protection measures.


10. Your rights

Depending on applicable law, you may have the right to access, rectify, delete, restrict processing, object, request data portability, and withdraw consent. Requests should be sent to support@bitovki.in.ua or via the form at https://bitovki.in.ua/en/support.


11. Marketing communications

We send service notifications; marketing messages are sent only with prior consent. You may unsubscribe using the “Unsubscribe” link or in your account settings.


12. Children

The Platform is not intended for individuals under 18 years of age. If a child has provided data, please contact us so we can delete it.


13. Changes to this Policy

The current version is published at https://bitovki.in.ua/en/privacy, with the publication date indicated. Continuing to use the Platform after updates constitutes acceptance of the revised version.


14. Contact information

Operator: FOP Hordieiev R.V.
Address: 03151 Kyiv, 15 Smilianska St., Apt 158, Ukraine
E-mail: support@bitovki.in.ua
Support page: https://bitovki.in.ua/en/support