Orderly Privacy Policy

Revision 1.1 | Last updated: August 2, 2026

• Service: Orderly
• Data controller: Sole Proprietor Palian O.M.
• Tax ID: 3160713518
• Data protection contact: support@orderly.com.ua

This Privacy Policy explains how Orderly (“Orderly”, the “Service”, “we”, “us”) collects, uses, stores, transfers, and protects personal data when users interact with the website https://orderly.com.ua/, contact forms, and integrations with marketplaces, telephony, and Telegram notifications.

This Policy applies to Service users, prospective customers who submit inquiries through the website, and marketplace buyer data that may be processed by Orderly on behalf of a seller for order fulfillment.

1. Data Controller and Applicable Law

Sole Proprietor Palian O.M., Tax ID 3160713518, is the personal data controller where Orderly determines the purposes and means of personal data processing.

The primary contact channel for personal data matters is support@orderly.com.ua. We receive and process user requests through this channel. A postal address for legally significant correspondence is provided upon request by a data subject or competent authority.

This Policy is governed by the laws of Ukraine, including the Law of Ukraine “On Personal Data Protection”, unless another applicable law of another jurisdiction expressly requires otherwise.

Where GDPR or another data protection law applies to a specific processing activity, we aim to provide users with the corresponding rights within the scope required by such law.

2. Controller and Processor Roles

For contact form submissions, communication with prospective customers, and website administration, Orderly acts as a controller of personal data.

For marketplace buyer data, order data, delivery data, and order status data, Orderly generally acts as a processor on behalf of the seller using the Service. In that context, the seller is the controller of its buyers’ data.

If a marketplace buyer wishes to exercise rights regarding order data, the buyer should first contact the relevant seller. We may assist the seller with such requests within the technical capabilities of the Service.

3. Data We Collect

We may process the following categories of data.

3.1. Data You Provide Directly

• name;
• phone number;
• email address, if provided during communication;
• name or type of your store or platform;
• message submitted through the contact form;
• other information you voluntarily provide during setup, consultation, or support.

3.2. Data Received Through Integrations

• order information;
• order statuses;
• ordered item lists, item titles, SKUs, or other line-item identifiers;
• delivery data required by the seller to process an order;
• technical identifiers, access tokens, or other data required to synchronize connected platforms.

3.3. Technical Data

• request date and time;
• technical Service logs;
• error information;
• IP address, user-agent, or other basic technical data where needed for security, diagnostics, and Service stability.

4. Etsy Integration

Orderly may provide functionality for Etsy sellers through the official Etsy Open API using OAuth 2.0.

We access Etsy data only after an Etsy seller grants consent through Etsy’s official OAuth process. The scope of access depends on the permissions granted by the seller and the technical scopes authorized through Etsy.

Orderly may process the following Etsy data:

• order information;
• buyer name and shipping address, where required to process an order;
• item titles, SKUs, or other order line-item data;
• order statuses;
• data required to update tracking numbers or synchronize statuses.

Orderly uses this data only to automate order processing, send operational notifications to the seller or the seller’s team, synchronize statuses, update tracking numbers, and support the operational workflows of an online store.

Orderly does not use screen scraping, Etsy page parsing, or unofficial methods to obtain Etsy data. Etsy data is processed only through the official Etsy API in accordance with permissions granted by the seller.

Orderly does not sell, rent, or use data obtained through the Etsy API for targeted advertising, remarketing, or transfer to data brokers.

The term “Etsy” is a trademark of Etsy, Inc. This Service uses the Etsy API but is not endorsed, certified, or supported by Etsy, Inc.

5. Integrations with Prom.ua, Horoshop, and Other Platforms

Orderly may also integrate with Prom.ua, Horoshop, and other e-commerce platforms if a user connects the relevant integration.

For such integrations, Orderly may process data required for store operations, including order information, products, statuses, delivery data, customer contact details within an order, and technical data required for synchronization.

Orderly processes such data only to provide the Service to the user, in accordance with the technical capabilities of the relevant platform, its rules, and the permissions granted by the user.

6. Payment and Financial Data

Orderly does not request, receive, process, or store bank card numbers, payment details, banking information of buyers or sellers, or passwords for Etsy or other connected platforms.

If an integrated platform provides an order payment status, Orderly may process only that status where needed for operational automation.

7. Buyer Data

Buyers on Etsy, Prom.ua, Horoshop, or other marketplaces are usually not direct users of Orderly. However, their order data may be processed by Orderly on behalf of the seller using the Service.

Such data is used only for order fulfillment, delivery, internal processing by the seller, notifications, status synchronization, and technical support. We do not sell buyer data and do not use it for third-party marketing.

8. How We Use Data

• providing, configuring, and supporting the Service;
• processing contact form inquiries;
• communicating with prospective and current users;
• automating orders, telephony, and Telegram notifications;
• synchronizing data between connected platforms;
• technical support and error diagnostics;
• security and abuse prevention;
• complying with legal or regulatory obligations, where applicable.

9. Legal Bases for Processing

We process personal data on the following legal bases:

• user consent when the user submits an inquiry, provides data, or connects an integration;
• necessity to provide the Service and perform arrangements with the user;
• legitimate interest in ensuring Service security, stability, support, and development;
• compliance with legal requirements, where applicable.

10. Telegram Notifications

Orderly may send operational notifications to a Telegram chat specified by the user or the user’s team.

Such notifications may contain order data, statuses, technical messages, or other information required for store operations. The user is responsible for ensuring that only authorized team members have access to the relevant Telegram chat.

11. Cookies, Analytics, and Similar Technologies

As of the last update of this Policy, the Orderly website does not use marketing cookies, Meta Pixel, or Google Analytics.

The website may use technically necessary cookies, basic hosting logs, and infrastructure security mechanisms for proper website operation, abuse prevention, and technical diagnostics.

Users may restrict or block cookies in their browser settings. Some website functions may not work properly if cookies are fully disabled.

12. Third-Party Services and Providers

To operate Orderly, we may use third-party infrastructure and service providers, including:

• hosting, CDN, server infrastructure, databases, and other infrastructure services, including services provided by Cloudflare, Google Cloud Platform, and other providers;
• form processing services or server-side inquiry handlers;
• Telegram Bot API;
• logging, monitoring, and diagnostics tools;
• integrated platforms such as Etsy, Prom.ua, Horoshop, and others.

We share with third-party providers only the data required for the relevant function, Service support, or fulfillment of a user request.

13. Data Retention

We retain data only for as long as necessary to provide the Service, support users, maintain security, perform diagnostics, or comply with legal obligations.

Indicative retention periods:

• contact form inquiries: up to 24 months or until a deletion request;
• technical logs: up to 90 days, unless a longer period is required for security or incident investigation;
• integration data and cached order data: during the Service usage period, or until access is revoked or deletion is requested. Data obtained via the Etsy API is retained only for as long as necessary to fulfill order processing purposes and provided services, after which it is deleted or anonymized in accordance with Etsy API Terms of Use;
• support data: for the period required to resolve the request, or longer if needed to protect legitimate interests.

14. Data Security

We apply reasonable technical and organizational measures to protect data, including:

• data transmission over HTTPS;
• access restrictions;
• use of official APIs of integrated platforms;
• protection of access tokens;
• monitoring of technical errors and suspicious activity.

However, no method of transmission or storage over the internet can be absolutely secure.

15. Security Incidents and Notifications

If we identify a security incident that may result in unauthorized access to, loss, alteration, or disclosure of personal data, we will take reasonable steps to contain the incident, assess its impact, and reduce possible risks.

Where notification to users, sellers, or competent authorities is required by applicable law, we will provide such notification within the timeframe and in the manner required by the relevant rules.

If Etsy Member data obtained through the Etsy API is compromised or suspected to be compromised, we will notify Etsy and the relevant seller within the timeframe required by Etsy API Terms of Use, but in any event no later than 24 hours from discovery of the incident where that timeframe applies under those terms.

16. Revoking Etsy Access

Users may revoke Orderly’s access to their Etsy account at any time through Etsy settings: Etsy Account Settings -> Security -> Connected Apps.

After access is revoked, Orderly will no longer be able to receive new Etsy API data for the relevant account. To delete data already stored, the user may submit a separate deletion request.

17. Data Deletion

Users may request deletion of their data from Orderly systems.

To do so, send an email to support@orderly.com.ua with the subject “Data Deletion Request”.

We will process the request and delete the relevant data within 14 business days, unless further retention is required by law or is necessary to protect legitimate interests in the event of a dispute, fraud, or security incident.

18. User Rights

Depending on applicable law, a user may have the right to:

• receive information about the processing of their data;
• receive a copy of their data;
• correct inaccurate or outdated data;
• withdraw consent;
• restrict processing;
• request deletion of data;
• object to certain types of processing;
• file a complaint with a competent data protection authority, where such right is provided by applicable law.

To exercise these rights, contact us at support@orderly.com.ua.

19. International Data Transfers

Because Orderly may use third-party infrastructure providers and integrated online services, data may be processed in or transferred outside the user’s country.

In such cases, we take reasonable steps to ensure an appropriate level of data protection in accordance with applicable law and the nature of the relevant service.

20. Children’s Data

Orderly is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from children or minors.

If we become aware that we have received personal data of a person under 18 without a proper legal basis, we will take reasonable steps to delete such data.

21. Changes to This Policy

We may update this Privacy Policy from time to time. A new version becomes effective when published on the website, unless otherwise stated in the updated version.

In the event of material changes, we may notify users through an available channel, such as the website or electronic communication.

In case of any discrepancy between the Ukrainian and English versions of this Policy, the Ukrainian version prevails.

22. Contact

For questions regarding this Privacy Policy, data processing, access revocation, or deletion requests, please contact:

• Sole Proprietor Palian O.M.;
• Tax ID: 3160713518;
• Email: support@orderly.com.ua;
• Website: https://orderly.com.ua/;
• A postal address for legally significant correspondence is provided upon request by a data subject or competent authority.