Privacy policy

This is an English translation provided for convenience only. Only the Ukrainian original is legally binding; in case of any discrepancy, the Ukrainian version prevails.

Version of 9 October 2026. This policy applies to all DubCandle websites: dubcandle.com, its subdomains (for example, shit.dubcandle.com) and the emails we send.

1. Who processes the data

The controller of personal data is the individual entrepreneur (FOP) Oleksandr Volodymyrovych Dubytskyi (“we”, “DubCandle studio”). For any data questions, write to BestPoopSurprise@gmail.com.

We process data in accordance with the Law of Ukraine “On Personal Data Protection”.

2. What data we collect and why

• Buyer — name, phone number, email. To place and fulfil the order, contact you about payment and delivery (on Telegram at your number, or by phone), and send the tracking number and order status emails.
• Recipient — surname, first name, phone number, town, branch or parcel locker. Only to make and deliver the parcel. This data is provided by the Buyer (section 4).
• Note — the text the Buyer wants to include in the parcel. To print the card.
• Revenge address — surname, first name, phone number and branch that the Buyer may leave on the status page. So the studio can deliver a reply parcel to them. This data is never shown to the Recipient.
• Email for announcements (the form on dubcandle.com or the button on the order page) — to tell you when pre-orders and sales of new items open.
• Email for the pre-order queue — to write when sales open and apply the queue discount.
• Custom orders — contact details, description of the idea, files and correspondence. To agree and fulfil the order.
• Technical data — IP address, browser type, request time in hosting logs. To run and protect the website.

We do not collect card payment data: payments on the website are handled by the bank (section 5), and with payment by bank details we only see that the money has arrived.

3. Legal grounds

• performance of a contract — Buyer and Recipient data, the note, the revenge address, custom orders;
• consent — announcements and the pre-order queue (you can withdraw it at any time);
• legal obligation — accounting and tax records;
• legitimate interest — protecting the website from abuse.

4. Recipient data and anonymity

The Buyer provides the Recipient's data to deliver the parcel for their benefit and is responsible for sharing it in the same way as if they were sending the parcel themselves. We use this data only for delivery.

DubCandle studio is named as the sender on the waybill. We do not disclose the Buyer's name, contact details or other data to the Recipient, nor the revenge address to the person ordering revenge. The only exception is a lawful request from a court or law enforcement in cases provided for by the laws of Ukraine.

The Recipient can contact us to find out what data of theirs we hold, or ask us to delete it after delivery.

5. Who we share data with

Only with those without whom the order cannot be fulfilled, and only to the extent necessary:

• Nova Poshta, Ukrposhta — Recipient data for the waybill;
• plata by mono (JSC Universal Bank) — the amount and order number for payment on the website, when this method is available;
• Cloudflare — website hosting and the order database;
• Resend — sending emails (the Buyer's email and the email content);
• Telegram — internal notifications to the studio about new orders (the Buyer's name and phone number, Recipient data, the note);
• Google Fonts — website fonts load from Google's servers, so Google sees the visitor's IP address.

Some of these services (Cloudflare, Resend, Telegram, Google) process data on servers outside Ukraine. We choose services that ensure adequate data protection.

We do not sell data or share it for advertising.

6. Cookies

We use only one technical cookie — dc_lang, which remembers the chosen website language for a year. There are no advertising or analytics cookies.

7. Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection”, you have the right to:

• know what data of yours we process, why, and who we share it with;
• get a copy of it;
• ask us to correct inaccurate data or delete it if there is no legal basis to keep it;
• withdraw consent — including unsubscribing from announcements via the link in any email;
• object to processing;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or a court.

To exercise your rights, write to BestPoopSurprise@gmail.com. We reply within 30 days.

8. Security

Only the studio team has access to orders, through a protected login. The order status page opens only via the personal link the Buyer receives.

9. Changes to this policy

We may update this policy. A new version applies from the moment it is published on the website; the version date is shown at the top of the page.