Privacy policy

Who processes your data

Your data is processed by Unikorb, the owner of the Unikorb service. Contact for data questions: [email protected], Telegram @unikorb_bot.

What we store

• Account: first and last name in Latin script, phone number, interface language and currency; with Telegram sign-in — your Telegram ID and username; with Google — your email; with a password — only its hash.
• Delivery addresses: city, street, building, landmark, comment and, if you set it, a map point.
• Orders: items, amounts, statuses and history, recipient and address as at the order.
• Support: your requests and our conversation.
• Security: consent log, IP address and time of failed sign-ins, session details (browser).

We collect no payment data: you pay the shop for the goods on delivery.

Why

• to place your order with the shop in your name and get it delivered (performing your instruction);
• to send order notifications and answer support requests;
• to protect the service and the shops from abuse (legitimate interest).

We do not sell data, show ads or use advertising trackers.

Who receives your data

• The shop you order from: name, phone, delivery address and comment. The shop then processes them as an independent controller under its own rules.
• Railway hosting — servers and the database are in the EU (the Netherlands).
• Telegram — for sign-in and notifications; Google — if you sign in with Google.
• Telegram Gateway / Twilio — your phone number to send the confirmation code.

The catalogue is translated with AI (Anthropic) — only product texts are sent, never your data.

Cookies and browser storage

We use only the essential session cookie (being signed in). Your basket, language and currency are stored in your browser. There are no analytics or advertising cookies.

How long we keep it

• account data and addresses — until you delete your account;
• orders — anonymised when you delete your account: only items and amounts remain, without name, phone or address;
• logs of sign-in attempts and confirmation codes — up to 30 days.

Your rights

You can view and correct your data in your profile and delete your account there; you can also ask us for a copy of your data, restrict or object to processing by writing to us. If you think your rights were violated, you can complain to Albania's Commissioner for the Right to Information and Personal Data Protection or to the supervisory authority of your country.

Changes

We update this page when our processing changes and announce material changes in advance.