Last updated: 9 November 2026
Who we are
Hoyra is a family embroidery studio based in Lviv, Ukraine. We design and hand-embroider vyshyvanky, blouses, dresses, suits and accessories, and we ship them worldwide. In this policy “we”, “us” and “Hoyra” mean the Hoyra studio at 45 Ivana Franka St., Lviv, Ukraine.
For any question about this policy or your personal data, write to [email protected] or call +38 (067) 979-47-22.
What we collect
- Order details: name, delivery address, phone number, email address, the items you order, sizes, colours and any embroidery notes you give us.
- Payment information: card payments are processed by Stripe. We receive confirmation that a payment succeeded, the amount and the last four digits of the card. We never see or store your full card number.
- Messages: what you send us through the contact form, email, Viber or WhatsApp.
- Account data: if you create an account, your username, email address and order history.
- Technical data: IP address, browser type, device type, pages viewed and cookies, as described in our Cookie Policy.
Why we use it
- To confirm, produce, pack and ship your order, and to answer your questions about it.
- To take payments and keep accounting and tax records as Ukrainian law requires.
- To arrange delivery with Nova Poshta in Ukraine and Meest Express internationally.
- To send you news and offers, but only if you asked for them. You can unsubscribe at any time.
- To keep the site secure, prevent fraud and understand which pages are useful, using aggregated analytics.
Our legal bases
Where the General Data Protection Regulation applies, we rely on: performance of a contract (your order), legal obligation (tax and accounting records), legitimate interests (site security, fraud prevention, improving our range) and consent (marketing emails and non-essential cookies). You can withdraw consent at any time.
Who we share data with
We share only what is needed, and only with:
- Stripe for card payments.
- Nova Poshta and Meest Express for delivery.
- Our hosting, email and analytics providers, which process data on our instructions.
- Our accountant and, where we are legally required, public authorities.
We do not sell your personal data, and we do not share it for third-party advertising.
International transfers
We are based in Ukraine and use service providers in the European Union and the United States. Where data leaves the European Economic Area, transfers rely on Standard Contractual Clauses or an adequacy decision.
How long we keep it
Order and accounting records are kept for five years, as Ukrainian accounting law requires. Account data is kept while your account is open. Marketing contact details are kept until you unsubscribe. Analytics data is kept for up to 14 months. Support messages are kept for two years.
Your rights
You may ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format. Write to [email protected] and we will respond within one month. You may also complain to your local data protection authority, or to the Ukrainian Parliament Commissioner for Human Rights.
Security
We use HTTPS across the site, restrict access to order data to the people who need it, and never store card numbers on our servers.
Children
Our shop is intended for adults. We do not knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we will delete it.
Changes
If we change this policy we will update the date above. Material changes will be announced on the site.