Privacy policy

This page explains what personal data the AGRO-VECTOR LTD website collects, why it is needed, who it is shared with and how you can control it.

Updated: 3 September 2026

1. Who processes your data

The personal data controller is the limited liability company AGRO-VECTOR LTD (ТОВ «АГРО-ВЕКТОР ЛТД») (hereinafter the “Company”, “we”).

Address: 2 Omelianovycha-Pavlenka St., Mykolaiv, Mykolaiv region, 54046, Ukraine.

Email for personal data enquiries: avsteaksua@gmail.com. Phone: +380 (67) 995 82 70.

2. What data we collect

Data you provide yourself. When you send a request through the form on the website or through our Telegram bot, we receive your name and phone number (required), and also your email, company name, message text, the selected cut and the required volume in kilograms, if you have provided them.

Cart and orders. The items you add to the cart are stored on the server, not only in your browser — otherwise they would disappear as you moved between pages. When placing an order, you provide your name, phone number and, if you specify them, company name, delivery address and a comment. Together with the order we store its contents, volume, amount and date.

Account data. If you sign in via Telegram, we receive from Telegram your numeric identifier, name, and, where available, username and profile photo, and, if you separately grant permission, your verified phone number. The identifier is needed so the bot can send you a receipt: without it, the bot is technically not allowed to message you first.

You can also place an order without signing in. In that case we store the same order data, but without the Telegram data.

Technical data. Together with a request, the IP address it was sent from and the browser string (user-agent) are stored automatically. They serve only two purposes: to protect the form from automated submissions — the number of requests from one address is limited — and to investigate if a request technically failed to arrive.

We do not use this data to track your page views, do not combine it with data from other websites and do not share it for advertising.

We do not collect payment details, passport data or any special categories of data within the meaning of Article 7 of the Law of Ukraine “On Personal Data Protection” (Закон України «Про захист персональних даних») through the website.

3. Why and on what legal basis

The purpose is to handle your enquiry: to contact you, calculate a price, agree the batch and supply terms, and subsequently to perform the contract and keep the related accounting and tax records.

The legal basis for processing is your consent, which you give by sending a request (clause 1, part one, Article 11 of the Law), and, once a contract is concluded, the need to perform it and to fulfil our obligations established by law.

We do not use your data for automated decision-making and do not build profiles based on it.

4. Who the data is shared with

A request goes simultaneously to our database, to a working Telegram chat and to an internal Google spreadsheet — this is redundancy: if one channel is unavailable, the request is not lost.

The service providers involved are therefore: Vercel Inc. (website hosting and anonymised visit analytics), Neon Inc. (database hosting, servers in the European Union), Upstash Inc. (counters for rate-limiting requests — only service counters derived from the IP address are stored there, without the contents of requests or orders), Telegram Messenger and Google LLC (spreadsheet service). They process data on our instructions and under their own terms.

If you order delivery, the recipient's data is passed to the carrier — JSC Nova Poshta (АТ «Нова Пошта») — to the extent needed for the shipment.

Some of these services are located outside Ukraine, so processing involves cross-border transfer of data to countries that ensure an adequate level of protection.

We do not sell personal data and do not share it with third parties for advertising. Data may be disclosed to state authorities only on a written request made in accordance with the law.

5. How long we keep the data

Requests are kept for as long as the correspondence continues and while we are working with you, and thereafter for the periods established by law for business and accounting records.

Orders and the related account data are kept for the periods established for business and accounting records. Items left in the cart and not turned into an order are removed together with the inactive guest record.

You can ask us at any time to delete your request, order or account earlier — except for data we are required by law to keep.

6. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection” (Закон України «Про захист персональних даних») you have the right to know which of your data we process and for what purpose; to obtain a copy of it; to demand that inaccurate data be corrected; to demand erasure or restriction of processing; to withdraw consent; and to appeal against our actions to the Ukrainian Parliament Commissioner for Human Rights (Уповноважений Верховної Ради України з прав людини) or to a court.

To exercise any of these rights, write to avsteaksua@gmail.com. We reply within thirty calendar days of receiving the request.

Withdrawing consent does not make unlawful any processing we carried out before the withdrawal.

7. Cookies and analytics

The website does not set advertising or tracking cookies and does not pass cookies to third-party advertising networks.

At the same time, the website uses its own technical cookies, without which the cart and the account do not work. A cookie with a visitor identifier is created when you first add an item to the cart — even if you have not signed in; it is how the server recognises your cart and keeps it for up to 30 days. A separate short-lived cookie (up to 10 minutes) is created while signing in via Telegram and ties the confirmation code to the same browser that requested it. One more cookie is created when signing in to the internal administration panel.

All these cookies are accessible only to the website's server (flagged HttpOnly and Secure), are not read by third-party scripts and are not used for advertising. Deleting cookies in your browser clears the cart and signs you out of the account.

Vercel Analytics is used to count visits: it works without cookies and does not create a persistent visitor identifier.

Pages may contain embedded content from Instagram. When you open it, you interact directly with that service, and its own policy applies to that interaction.

8. Data security

The website works only over a secure HTTPS connection. Only authorised Company employees have access to requests; access to the administration panel is protected by a password and two-factor authentication.

Signing in to the account is confirmed by a separate action in Telegram with a code that you check against the screen: simply following the sign-in link is not enough. Issued sessions can be revoked.

No method of transmitting data over the internet is absolutely secure, so we cannot guarantee unconditional security, but we take reasonable technical and organisational measures to protect it.

9. Changes to this policy

We may update this policy. The version published on this page is the one in force; the date of the last update is shown at the top. We will announce significant changes on the website.

Questions about your data

Write to avsteaksua@gmail.com or call +380 (67) 995 82 70. Other contacts are [on the Contacts page](/contacts).