Last update: February 24, 2026



GENERAL TERMS AND DEFINITIONS

1.1. Controller or Pitaya - Pitaya.store operating the online store "Pitaya.store" at https://pitaya.store/. Product design and manufacturing operations are carried out in Ukraine by affiliated contractors acting under the Controller’s instructions.

1.2. Personal Data - information about an individual that is identified or can be identified by one or several characteristic factors that determine the physical, physiological, genetic, mental, economic, cultural, or social identity, including the IP address of the device, location data, internet identifier, as well as information collected through cookies and similar technologies.

1.3. Policy - this Privacy Policy, which contains information about the processing of Personal Data and the use of cookies and similar tracking technologies on the Website.

1.4. GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

1.5. PDPA - Thailand Personal Data Protection Act B.E. 2562 (2019).

1.6. Website - the website operated by the Controller at the domain https://pitaya.store/, accessible through web browsers.

1.7. Store - Pitaya online store, accessible through the Website, where Pitaya carries out remote sales of goods.

1.8. User - any individual who visits the Website or uses one or more services or features described in the Policy.

1.9. Device - means an electronic device through which the User accesses the Website.


GENERAL INFORMATION

2.1. In connection with your use of the Website, we collect data necessary for the provision of the offered services, as well as information about your activity on the Website. In this regard, we are the controller of your Personal Data and attach great importance to its proper protection. We ensure that our data processing procedures comply with the applicable legal requirements, including GDPR (where applicable), PDPA (Thailand), and applicable United States federal and state data protection laws. Our goal is to provide you with complete information about the processing of your Personal Data and provide you with tools to exercise your rights.

2.2. We process your Personal Data in accordance with the law, ensuring that they are up-to-date and accurate.


HOW CAN I CONTACT THE CONTROLLER AND DATA PROTECTION OFFICER?

3.1. If you have any questions regarding the processing of your Personal Data or if you want to exercise your rights, please contact our Data Protection Officer directly at the email address: pitaya.store@gmail.com (This email address is not used for sending cooperation offers and marketing proposals; such messages will be ignored by our ticketing system).


HOW DO WE OBTAIN YOUR PERSONAL DATA?

4.1. We obtain your Personal Data directly from you when making purchases in our Store, subscribing to our newsletter, contacting us using the contact form, or browsing products available on the Website.


IS IT MANDATORY TO PROVIDE PERSONAL DATA?

5.1. Providing Personal Data is voluntary. However, in some cases providing Personal Data is necessary for the proper provision of services offered by us or for the conclusion and performance of a contract.


HOW DO WE PROCESS YOUR PERSONAL DATA? USE OF THE WEBSITE

6.1 When you use the Website but you are not a registered User, we process your Personal Data (including IP address and information collected through cookies or similar technologies):

6.1.1 to provide services electronically – contract performance;

6.1.2 for analytical and statistical purposes – legitimate interest;

6.1.3 for establishment and defense of legal claims – legitimate interest;

6.1.4 for marketing purposes – as described below.

6.2 Activity logs are processed for service provision, security, system management, and analytics based on legitimate interest.


REGISTRATION AND MAINTENANCE OF AN ACCOUNT

6.3 Registration requires mandatory data necessary for creating and maintaining an account. Optional data may be provided voluntarily.

6.4 Personal Data is processed for account management, analytics, legal claims, and marketing.

6.5 Users may log in using Facebook, Apple ID, or Google. Necessary registration data may be transferred in accordance with the respective provider’s privacy policy.

6.6 Users posting Personal Data of other individuals must comply with applicable law.


ORDER PROCESSING

6.7 Placing an order requires providing mandatory data for contract fulfillment.

6.8 Personal Data is processed to fulfill orders, comply with tax and accounting laws, conduct analytics, and protect legal interests.


COMPLAINTS AND RETURNS

6.9 Personal Data is processed for complaint handling and returns in accordance with applicable consumer protection laws.


CONTACT FORM

6.11 Contact form usage requires providing the necessary Personal Data to respond to inquiries.

6.12 Data is processed for communication and analytics based on legitimate interest.


GEOLOCATION

6.13 Location data may be processed with your consent to provide delivery point search or location-based services. Consent may be withdrawn at any time.


MARKETING

7.1 Personal Data may be processed for marketing activities, including behavioral advertising and direct marketing.

7.2 Profiling may be used to tailor displayed content and advertising.

7.3 Behavioral advertising may involve trusted partners using cookies and similar technologies.

7.4 Direct marketing communications require consent where legally required and may be withdrawn at any time. You can withdraw your consent at any time by clicking the link we send in every commercial email containing marketing information, by contacting us at the email address: pitaya.ua@gmail.com (This email address is not used for sending cooperation offers and marketing proposals; such messages will be ignored by our application support system) or through the contact form.

7.5 Marketing tools may include Google Ads, Customer Match, and Meta Custom Audiences using hashed identifiers.


SOCIAL MEDIA

8.1 We operate social media profiles on platforms such as Facebook, Instagram, LinkedIn, Pinterest, and YouTube.

8.2 Data from interactions is processed for profile management, marketing, analytics, and legal protection based on legitimate interest.


COOKIES

9.1 Cookies are small text files stored on devices.

9.2 Types include essential, analytical, personalization, and advertising cookies.

9.3 Cookies may be session or persistent (up to 60 days unless deleted).

9.4 Users may manage cookie preferences via Website settings.

9.5 Some cookies may be placed by third-party partners.


TO WHOM WILL WE TRANSFER YOUR PERSONAL DATA?

10.1 Personal Data may be transferred to service providers assisting in Website operation, hosting, IT, logistics, accounting, legal, marketing, and payment processing services, including Shopify Payments.

10.2 Delivery providers receive the necessary data to fulfill shipments.

10.3 Payment providers receive the necessary data to process transactions.

10.4 Marketing communication providers may process data for newsletter and advertising distribution.

10.5 Authorities may receive data where required by law.

10.6 Due to the international nature of our operations, Personal Data may be transferred to and processed in the United States, Ukraine, Thailand, and other jurisdictions where our service providers operate. Appropriate safeguards are implemented.


HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

11.1 Data is processed for the duration of service provision, legal obligations, legitimate interests, or until withdrawal of consent.

11.2 After retention periods expire, data is deleted or anonymized.


HOW DO WE PROTECT YOUR DATA?

12.1 We implement technical and organizational security measures including HTTPS/SSL encryption, firewall systems, access controls, backup systems, and secure hosting infrastructure.

12.2 We regularly monitor and update our systems to minimize risks.


WHAT RIGHTS DO YOU HAVE?

13.1 You have the right to information, access, rectification, erasure, restriction, portability, objection to marketing, withdrawal of consent, and to lodge a complaint with the competent supervisory authority under GDPR, PDPA (Thailand), or relevant U.S. authority.

13.2 Requests may be submitted by writing to our Data Protection Officer at the email address: pitaya.store@gmail.com (This email address is not used for sending cooperation proposals and marketing offers; our request servicing system will ignore such messages).

13.3 We respond within legally required timeframes.


CHANGES TO THE PRIVACY POLICY

14.1 The Policy is regularly reviewed and updated as necessary.