Skip to main content
EVVO

Legal information

Privacy Policy

This is the current version.

Last revised:

Privacy Policy

_We take the protection of your personal data seriously. This policy explains what we collect, why, and how you can control it._

> Language. This is an English rendering of a document written in Ukrainian. In any question of interpretation the Ukrainian text is the one that governs: evvo.ua/uk/privacy.

> In short: we collect only the data the platform needs to work. We do not sell your data. You can ask for it to be deleted at any time.

1. Introduction

Event Marketplace Ukraine LLC ("EVVO", "we", "us") is the controller of personal data within the meaning of the Law of Ukraine "On the Protection of Personal Data" and EU Regulation 2016/679 (the GDPR).

This Privacy Policy describes how we collect, use, store and protect your personal data when you use the EVVO platform.

By registering on the platform or using its services you confirm that you have read this Policy and consent to your personal data being processed on its terms.

2. What data we collect

2.1. Data you give us

  • Registration data: your name, email, telephone number and password (stored in a protected form).
  • Supplier profile: a description of your services, prices, photographs, city, category.
  • Event data (clients): the date, the number of guests, the venue, your requirements.
  • Messages: the text of the conversation between clients and suppliers in the platform's chat.
  • Reviews: ratings and comments after a completed booking.

    • 2.2. Data collected automatically

  • Technical data: IP address, browser type, device, operating system.
  • Usage data: the pages viewed, session length, actions on the platform.
  • Data from forms on digital pages: if you are a guest confirming your attendance on an invitation, or a visitor leaving an application on an event landing page, we store your name, the contact details you gave and your answers to the form's questions. We process that data on behalf of the page's owner (they are its controller), give access to it only to them, do not use it in our own marketing and do not pass it to third parties. It is kept for as long as the page exists and is deleted with it. To access, correct or delete such data, contact the page's owner or write to us at evvo.com.ua@gmail.com.
  • Cookies: for authentication and to remember your settings (see section 7).

    • 2.3. Payment data

    EVVO does not store bank card details. Every payment (wallet top-ups and supplier promotion) is processed directly by the certified payment provider MonoPay (monobank's acquiring service) under the PCI DSS security standard. We receive only the status of the transaction and its identifier — never your card details.

    3. Why we process data

    We process your personal data in order to:

  • Register and maintain your account on the platform.
  • Provide supplier search and the booking functionality.
  • Process payments and manage transactions.
  • Send transactional notifications (confirmations, reminders, invoices).
  • Support users and resolve disputes.
  • Analyse and improve the quality of the platform.
  • Detect and prevent fraud.
  • Comply with the law of Ukraine and of the EU.
  • Send marketing emails — only with your explicit consent, and always with a way to unsubscribe.

    • 4. The legal basis for processing

    Your personal data is processed on these bases:

  • Performance of a contract — to provide the platform services you asked for.
  • Legitimate interest — for security, analytics and improving the service.
  • Consent — for marketing communications.
  • Compliance with a legal obligation — to meet the requirements of the law.

    • 5. Sharing data with third parties

    We do not sell or rent your personal data. We may share it with these categories of recipient:

  • Suppliers / clients: the data needed to carry out a booking (name, contact details).
  • Payment provider: MonoPay (monobank) — to process wallet top-ups and promotion payments.
  • Cloud infrastructure: PostgreSQL (the database), Cloudflare (file storage).
  • Email service: Resend — to send transactional messages.
  • Analytics: anonymised statistics for internal analysis.
  • Law-enforcement authorities: only on a lawful request or a court order.

    • All of our service providers process data solely on our instructions and are bound to confidentiality.

    6. Storing and protecting data

    6.1. Retention

  • Account data — for as long as the account exists, plus 3 years after deletion.
  • Booking and transaction data — 5 years (a requirement of tax law).
  • Logs and technical data — 12 months.

    • 6.2. Technical protection

    We apply current security measures: encryption at rest and in transit (TLS 1.3), password hashing (bcrypt), restricted staff access to production data and regular security audits.

    If we discover a breach that could affect your rights, we will tell you within 72 hours, as the GDPR requires.

    7. Cookies

    We use these kinds of cookie:

  • Necessary cookies — for authentication (the session token) and security. Without them the platform cannot work properly.
  • Functional cookies — to remember your language settings and your preferences.

    • We use only necessary and functional cookies — there are no advertising or third-party analytics trackers, so no cookie consent banner is needed. You can manage cookies in your browser settings; turning off necessary cookies may affect how the platform works.

    8. Your rights

    Under the law of Ukraine and the GDPR you have the following rights over your personal data:

  • The right of access — to receive a copy of your data.
  • The right to rectification — to correct inaccurate or out-of-date data.
  • The right to erasure — to ask for your account and data to be deleted.
  • The right to restriction — to limit certain ways your data is processed.
  • The right to portability — to receive your data in a machine-readable format.
  • The right to object — to object to processing based on legitimate interest.
  • The right to withdraw consent — to unsubscribe from marketing at any time.

    • To exercise any of these rights, send a request to evvo.com.ua@gmail.com. We will reply within 30 days. If you disagree with our decision, you have the right to complain to the Ukrainian Parliament Commissioner for Human Rights or to an EU supervisory authority.

    9. Children's data

    The EVVO platform is intended for people aged 18 and over. We do not knowingly collect the personal data of minors. If you learn that a minor has given us their data, please tell us at evvo.com.ua@gmail.com and we will delete it.

    10. International transfers

    Some of our service providers may store or process data outside Ukraine (including in the EU and the USA). Where they do, we apply appropriate safeguards:

  • The EU Standard Contractual Clauses (SCCs).
  • Transfers to countries offering an adequate level of protection.
  • A data processing agreement (DPA) with every provider.

    • 11. Changes to this policy

    We may update this Privacy Policy from time to time. We will tell you about material changes by email or by a notification on the platform, at least 14 days before they take effect.

    The date of the last update is always shown at the top of this page.

    12. Contact

    For questions about the protection of personal data, contact our data protection officer:

  • Email: evvo.com.ua@gmail.com
  • Contact page: evvo.ua/contacts

    • We aim to resolve any privacy request within 30 days.

    ← To the home pageGet in touch