Privacy Policy — Wo-me.com

Data controller

Registered company name

Trading as

Wo-me.com

Company registration number

VAT registration number

Street

Calle Pushkinskaya 79/5

City

Járkov. Región de Járkov

Postal code

61000

info@wo-me.com

What data we hold

Each entry states the purpose, the legal basis, how the data is protected and how long it is kept.

behaviour

Pages viewed, items added to a basket, orders placed and the like, used to understand how the shop is used and which sources bring customers.

Protected with

none

Kept until

780

Then

delete

Processed by

analytics

device_identifier

A random identifier stored in a cookie, so repeat visits from one browser are recognised as one person rather than many.

Protected with

none

Kept until

400

Then

delete

Processed by

analytics

contact_hash

Email address and telephone number reduced to an irreversible hash, so an advertising platform can recognise its own customer without either party learning anything new.

Protected with

sha-256

Kept until

780

Then

delete

Processed by

analytics

advertising_click

The identifier an advertising platform adds to a link it was paid for, kept so an order placed weeks later can still be credited to the advertisement that earned it.

Protected with

none

Kept until

Then

delete

Processed by

analytics

Account identification and communication.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

auth

phone

Optional two-factor authentication and account recovery.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

auth

password

Credential verification (stored as a one-way hash).

RGPD art. 17

Protected with

argon2id

Kept until

on_erasure

Then

delete

Processed by

auth

sessions

Session management and security.

RGPD art. 5.1.e

Protected with

none

Kept until

on_erasure

Then

delete

Processed by

auth

audit_log

Security auditing of authentication events.

RGPD art. 17.3.e

Protected with

none

Kept until

2190

Then

retain

Processed by

auth

Identifies the customer for orders, delivery and support.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

customers

phone

Contact about an order and delivery notifications.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

customers

address

Delivery and billing addresses used to fulfil orders.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

customers

subscriber_email

Sends the newsletter the person asked for; a contact is created even without an account.

RGPD art. 7.1

Protected with

aes-256-gcm

Kept until

365

Then

retain

Processed by

customers

consent_record

Proves when a consent was given or withdrawn, with the address and time it came from.

RGPD art. 7.1

Protected with

none

Kept until

365

Then

retain

Processed by

customers

mailbox_address

Identifies the mailbox a person sends from and receives into.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

message_content

Subject and body of stored mail, kept so it can be read and answered.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

correspondent_address

Sender and recipients of each message, including copies.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

attachments

Files carried by a message; the stored location is encrypted.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

address_book

Correspondents a person has written to, kept for addressing and completion.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

search_index

Makes mail searchable without decrypting it: keyed hashes only.

RGPD art. 17

Protected with

hmac-sha256

Kept until

on_erasure

Then

delete

Processed by

external_mailbox_credentials

Host, user name, password or OAuth token of an outside mailbox the person connected.

RGPD art. 17

Protected with

aes-256-gcm

Kept until

on_erasure

Then

delete

Processed by

device_push_tokens

Device identifiers used to notify a person of new mail.

RGPD art. 5.1.e

Protected with

none

Kept until

on_erasure

Then

delete

Processed by

delivery_log

Records what was sent, when, whether it was delivered, and the address and browser the event came from.

RGPD art. 17.3.e

Protected with

none

Kept until

2190

Then

retain

Processed by

audit_log

Records administrative actions on mailboxes and the address they came from.

RGPD art. 17.3.e

Protected with

none

Kept until

2190

Then

retain

Processed by

Your rights

Right to access

You have the right to obtain a copy of the personal data we hold about you.

Right to rectification

You can request correction of inaccurate or incomplete data.

Right to erasure

You can request deletion of your data, subject to legal retention obligations.

Right to portability

You can request your data in a structured, machine-readable format.

Right to restriction

You can request that we restrict processing of your data.

Right to object

You can object to processing based on legitimate interests.

Further information

Data recipients

We do not sell or share personal data with third-party companies for their own purposes.

Retention

Data is kept only as long as needed for the purpose it was collected for, or as required by law.

Complaints

You have the right to lodge a complaint with your supervisory authority.

Agencia Española de Protección de Datos

C/ Jorge Juan 6, 28001 Madrid

https://www.aepd.es/

900 293 183

International transfer

Personal data is processed within the jurisdiction of the store and is not transferred abroad.

Cookie Policy Contact us

In effect from

2026-09-08