1. General Provisions
This personal data processing policy is drawn up in accordance with the requirements of the Law of Ukraine dated 13.02.2022 No. 2297-VI "On Personal Data Protection" and defines the procedure for processing personal data and measures to ensure the security of personal data.
1.1. The Operator considers the observance of human and civil rights and freedoms during the processing of personal data—particularly the right to privacy, personal and family secrecy—as its most important goal and condition for carrying out its activities.
1.2. This Policy of the Operator regarding the processing of personal data (hereinafter referred to as the “Policy”) applies to all information that the Operator may receive about visitors to the website https://heatwaveco.net.

2. Key Terms Used in This Policy
2.1. Automated processing of personal data — processing using computer technology.
2.2. Blocking of personal data — temporary suspension of personal data processing (except when processing is necessary to clarify the data).
2.3. Website — a set of graphic and informational materials, as well as software and databases, made available on the internet at https://heatwaveco.net.
2.4. Personal data information system — a set of personal data contained in databases and processed using IT and technical tools.
2.5. Anonymization of personal data — actions that make it impossible to identify a user without additional information.
2.6. Personal data processing — any operation or set of operations performed with or without automation tools, including collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer (distribution, provision, access), anonymization, blocking, deletion, or destruction.
2.7. Operator — a government or municipal authority, legal or natural person that processes personal data independently or jointly with others and determines the purposes, scope, and methods of data processing.
2.8. Personal data — any information directly or indirectly related to a specific or identifiable User of the website https://heatwaveco.net.
2.9. User — any visitor to the website https://heatwaveco.net.
2.10. Provision of personal data — actions aimed at disclosing personal data to a specific person or group of persons.
2.11. Distribution of personal data — any actions aimed at disclosing personal data to an indefinite number of persons (transfer) or making it publicly available, including publication or online access.
2.12. Cross-border transfer of personal data — the transfer of personal data to a foreign country, authority, individual, or legal entity.
2.13. Destruction of personal data — any actions resulting in the irreversible elimination of personal data without the possibility of recovery.

3. Types of Personal Data Processed by the Operator
3.1. Full name (first, middle, last)
3.2. Phone number
3.3. Email address
3.4. The website also collects and processes anonymized data (including cookies) using web analytics services (e.g., Yandex.Metrica, Google Analytics, and others).
3.5. The above-mentioned data is collectively referred to in this Policy as Personal Data.

4. Purpose of Personal Data Processing
4.1. The purpose of processing User’s personal data is to enter into, perform, and terminate civil law agreements; provide access to services, information, and/or materials on the website https://heatwaveco.net; and clarify order details.
4.2. Heatwave.co is also entitled to send the User updates about new products, services, special offers, and events. The User can opt out of such communications by sending an email to privacy@heatwaveco.net with the subject “Unsubscribe from updates and special offers.”
4.3. Anonymized data collected via web analytics services is used to track User activity on the site and improve the website and its content.

5. Legal Grounds for Personal Data Processing
5.1. Heatwave.co processes personal data only when the User voluntarily fills out forms on the website https://heatwaveco.net. By submitting their data, the User agrees to this Policy.
5.2. Heatwave.co processes anonymized User data when permitted by browser settings (e.g., cookies and JavaScript enabled).

6. Procedure for Collecting, Storing, Transferring, and Processing Personal Data
The security of personal data is ensured through legal, organizational, and technical measures necessary to comply with personal data protection laws.
6.1. Heatwave.co guarantees the security of personal data and takes all reasonable steps to prevent unauthorized access.
6.2. Personal data will never be shared with third parties except as required by law.
6.3. If any personal data is inaccurate, the User may update it by emailing privacy@heatwaveco.net with the subject “Update of Personal Data.”
6.4. Personal data will be processed for an unlimited period. Users may withdraw consent at any time by emailing privacy@heatwaveco.net with the subject “Withdrawal of Consent to Personal Data Processing.”

7. Cross-Border Transfer of Personal Data
7.1. Before transferring data to a foreign country, Heatwave.co must ensure that the receiving country provides adequate protection for personal data subjects.
7.2. If such protection is not ensured, cross-border transfer is only permitted with written consent from the personal data subject or when required for contract execution.

8. Final Provisions8.1. Users may contact Heatwave.co with any questions regarding personal data processing by emailing privacy@heatwaveco.net.
8.2. Any changes to this Policy will be reflected in this document. The Policy is valid indefinitely until replaced with a new version.
8.3. The current version of the Policy is available online at: https://heatwaveco.net/privacy