DATA PROTECTION & SECURITY

Privacy Policy & Data Protection

How DRÖMKÖK collects, protects, and processes your personal data and payment security in accordance with legal regulations.

Version 2.4 — Effective October 2026IOOO "DRÖMKÖK Retail & Logistics" (UNP 193746281)Republic of Belarus (Law No. 99-Z) & EAEU

Nordic Privacy Commitments

Zero Data Selling

We strictly never sell, rent, or monetize your contact records or preferences to third parties.

Purpose-Bound Usage

Your information is used solely to process orders, dispatch couriers across Belarus, and service warranty claims.

Payment Security

Payments are handled via certified PCI-DSS Level 1 gateways and ERIP. We never store CVV or full card numbers.

Full Statutory Rights

You hold full statutory rights to access, download, rectify, or delete your personal records within 15 days.

Official Statement

Your privacy is important to us. This Privacy Policy explains what personal information we collect through our website, how we use it to fulfill your orders, and the robust security protocols safeguarding your data.

We never sell your personal information to third parties. Data is used exclusively for order fulfillment, delivery logistics, ERIP payment verification, and service communication.

Data Controller & Legal Scope

The designated data controller responsible for the lawful processing, secure storage, and protection of customer information is IOOO "DRÖMKÖK Retail & Logistics" (UNP 193746281), incorporated under the laws of the Republic of Belarus. This policy applies to all visitors, registered accounts, retail buyers, and commercial wholesale partners.

Official Registered Touchpoints:

• Flagship Showroom: Nezavisimosti Ave 117A, Minsk, Belarus

• Central Warehouse Hub: Promyshlennaya St 21/B, Minsk, Belarus

• Privacy & DPO Desk: privacy@dromkok.com | +375 (17) 388-77-00

Categories of Personal Data Collected

We adhere to data minimization principles, collecting strictly necessary records to execute sales contracts, dispatch home delivery, and issue warranty documentation:

Identity & Contact Records

Full name, contact phone number, email address, and residential/business delivery address in Belarus.

Order & Transaction Details

Order identifiers, cart items, preferred payment method token (ERIP, card, invoice), and fiscal receipts.

Service & Warranty Records

Warranty claims, courier sign-off slips, assembly requests, and interior space design preferences.

Technical & Session Data

Anonymized IP address, browser type, authorization cookies, and chosen storefront locale.

Lawful Basis for Processing

Processing is grounded in compliance with Law of the Republic of Belarus No. 99-Z of May 7, 2021 "On Personal Data Protection" and established international consumer standards:

Contract Performance:Necessary to confirm, fulfill, pack, deliver, and install items purchased by the customer.

Compliance with Statutory Obligations:Mandatory tax accounting, issuance of official cashier receipts, and warranty registration.

Informed Consent:For SMS parcel tracking notifications and optional catalog newsletters, revokable at any time.

How We Use Your Information

All personal data is processed strictly for authentic operational requirements:

Delivery & Showroom Pickup

Coordinating 2-hour delivery windows and 15-minute warehouse collections.

24-Month Warranty

Digital warranty records accessible anytime via your phone number.

SMS Tracking Notifications

Dispatch confirmation, tracking code, and arrival notifications.

B2B Wholesale Contracts

Generating corporate invoices, wholesale pricing tiers, and VAT agreements.

Payment & Transaction Security

When checking out via credit/debit cards (Belkart, Visa, MasterCard) or the national ERIP settlement system, payment processing takes place exclusively on certified secure hosts of licensed banking partners.

🔒 Zero Card Retention Guarantee:

DRÖMKÖK servers never store or have access to full credit card numbers, expiration dates, or CVC codes. All transactions are protected by 3-D Secure authentication.

Delivery & Third-Party Disclosure

DRÖMKÖK never transfers personal data to third parties for marketing or advertising purposes. Disclosures occur solely to verified fulfillment partners to complete shipping:

National Couriers & Freight:Europost, Autolight Express, and DPD strictly receive recipient name, phone, and delivery address.

Banking Gateways:Licensed acquiring banks to clear authorized order values.

Statutory Authorities:Strictly in compliance with valid, official legal subpoenas under Belarus law.

Cookies & Session Storage

Our web application utilizes cookies and localized browser storage to power core functionality: shopping cart persistence, authentication session security, and language localization.

Detailed Cookie PolicyComplete classification of essential vs analytics cookies.

Read Policy

Retention Periods & Security Safeguards

Personal records are retained only for the duration required to satisfy operational objectives or statutory legal periods:

Data Category	Retention Period
Completed Order & Financial Receipts	5 Years (Statutory Tax)
Active Registered Customer Profile	Until Account Deletion
Promotional & Newsletter Subscriptions	Until Consent Revoked

🛡️ All production databases feature 2FA administrative access, daily encrypted backups, and isolated tenant networks.

Your Statutory Rights & How to Exercise Them

Under Articles 10–13 of Law No. 99-Z and modern privacy benchmarks, you maintain the following rights:

• Right to Revoke Consent:Withdraw marketing or analytics consent without affecting prior lawful processing.

• Right of Access & Data Portability:Request an extract containing all active records and purchase histories associated with your account.

• Right to Rectification & Deletion:Correct inaccurate delivery details or demand permanent account erasure.

⏱️ Response SLA — Within 15 Calendar Days:

To exercise any privacy right, email our Data Protection Officer at privacy@dromkok.com with your registered phone number. Responses are free of charge.

Privacy & DPO Hub

Have Questions About Your Privacy or Need to Submit a Data Request?

Our appointed Data Protection Officer in Minsk is available to guide you and process statutory requests.

privacy@dromkok.com All Contact Touchpoints