Privacy Policy

This Privacy Policy explains how Pukamuka collects, uses, stores, transfers and protects personal data of users of www.pukamuka.com and customers of Pukamuka services.

Pukamuka provides international shopping assistance, international shopping address, parcel receipt, processing, consolidation and delivery coordination services to Ukraine.

This Policy applies when you:

• visit the website;
• submit an application for access to the Pukamuka Club;
• create an account;
• use Pukamuka services;
• place an order;
• request shopping assistance;
• make a payment;
• request support;
• communicate with us;
• interact with our forms, systems or communication channels.

Pukamuka generally acts as the controller for data collected directly from users and customers.

In certain situations, affiliated entities, payment providers, logistics partners, warehouses, carriers, customs brokers, IT providers, consultants or compliance partners may act as Pukamuka processors or independent controllers depending on their specific role.

We may collect the following categories of data.

4.1. Identification Data

• first and last name;
• date of birth, if required;
• identity documents, if needed for verification, customs, delivery, fraud prevention or compliance;
• internal customer code;
• information necessary for parcel identification.

4.2. Contact Data

• email address;
• phone number;
• country;
• city;
• delivery address;
• postal code;
• preferred contact method.

4.3. Account Data

• login data;
• order history;
• account status;
• communication settings;
• delivery preferences;
• Club access data;
• interactions with the service.

4.4. Order and Parcel Data

• product links;
• product names;
• product descriptions;
• product categories;
• quantity;
• declared value;
• seller store;
• country of purchase;
• invoices, receipts or order confirmations;
• tracking number;
• weight and dimensions;
• parcel or product photographs, if requested or necessary;
• order status;
• delivery status;
• data required for customs.

4.5. Payment Data

We may process:

• amount paid;
• payment method;
• currency;
• payment status;
• transaction reference;
• invoices;
• refunds;
• history of costs related to orders;
• internal balance related to orders, if available in the system.

Pukamuka does not store full bank card details.

Payments are processed by authorised payment service providers or third-party payment partners.

Pukamuka is not a bank, payment institution, electronic money institution, money transfer service or financial services provider.

4.6. Technical Data

• IP address;
• device type;
• browser;
• operating system;
• online identifiers;
• cookies;
• pages visited;
• actions performed on the website;
• technical error data;
• security logs;
• session data.

4.7. Compliance Data

We may process data necessary for:

• fraud prevention;
• abuse prevention;
• sanctions checks;
• checks regarding prohibited or restricted goods;
• operational risk assessment;
• compliance with payment partner requirements;
• compliance with carrier requirements;
• compliance with customs, tax or legal requirements;
• protection of Pukamuka's rights and customers.

4.8. Communication Data

• emails;
• form messages;
• support requests;
• complaints;
• order instructions;
• communications via chat, phone or other available channels.

We may collect data:

• directly from you;
• from your website account;
• from completed forms;
• from communications with you;
• from online stores;
• from carriers;
• from warehouses and logistics partners;
• from customs brokers;
• from payment providers;
• from anti-fraud or compliance providers;
• from public sources or public registers where necessary and permitted by law.

We process data for:

6.1. Service Provision

• reviewing access applications;
• creating and managing accounts;
• processing orders;
• identifying parcels;
• receiving, processing and consolidating parcels;
• coordinating delivery;
• communicating with customers;
• providing additional services;
• administering refunds;
• customer support.

6.2. Payments and Invoicing

• processing payments;
• issuing invoices;
• cost accounting;
• refunds;
• internal reconciliation;
• accounting and tax records.

6.3. Customs and Logistics

• preparing necessary documents;
• transferring data to customs brokers, couriers or authorities;
• declaring goods;
• calculating taxes, where applicable;
• clarifying parcel content.

6.4. Security, Anti-Fraud and Compliance

• preventing fraud;
• preventing abuse;
• checking prohibited or restricted goods;
• sanctions screening;
• protecting the service and customers;
• investigating incidents;
• complying with requirements of payment partners, banks, carriers and authorities.

6.5. Service Improvement

• analysing website use;
• optimising forms;
• improving customer experience;
• testing functions;
• developing internal processes.

6.6. Marketing

We may send commercial communications, news or offers only where there is a valid legal basis, such as your consent or another basis permitted by applicable law.

You may unsubscribe at any time.

We process data based on:

• performance of a contract;
• steps requested before entering into a contract;
• compliance with legal obligations;
• Pukamuka's legitimate interest;
• your consent, where required.

Legitimate interest may include service security, fraud prevention, account administration, protection of Pukamuka's rights, service improvement and operational communications.

We may disclose data, strictly as necessary, to:

• Pukamuka affiliated entities;
• authorised employees and contractors;
• IT providers;
• hosting providers;
• CRM providers;
• email providers;
• customer support providers;
• website analytics providers;
• payment providers;
• banks and payment processors;
• compliance and anti-fraud partners;
• warehouses;
• logistics partners;
• couriers and carriers;
• customs brokers;
• customs authorities;
• tax authorities;
• competent public authorities;
• legal, tax, accounting advisers or auditors.

We do not sell personal data.

Pukamuka services involve international shopping, processing, transport and cross-border delivery. Data may therefore be transferred outside Romania, the European Union, the European Economic Area or Ukraine.

Such transfers may be necessary for:

• parcel receipt;
• order processing;
• communication with online stores;
• delivery;
• customs;
• payments;
• technical support;
• cloud services;
• compliance.

For international transfers, we apply reasonable contractual, technical and organisational safeguards in accordance with applicable law.

We keep data only as long as necessary for the purposes for which it was collected.

As a general rule:

• account data is kept for the duration of the account;
• order data is kept for the time necessary to provide the service and thereafter according to legal obligations;
• payment and invoicing data is kept according to applicable tax and accounting periods;
• compliance data may be kept as long as necessary for fraud prevention, sanctions, disputes or legal obligations;
• marketing data is kept until consent is withdrawn or the purpose ends;
• technical data is kept for reasonable periods necessary for website security and operation.

Subject to applicable law, you may have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability;
• right to withdraw consent;
• right not to be subject to a decision based solely on automated processing, where provided by law;
• right to lodge a complaint with the competent authority.

In Romania, the competent authority is the National Supervisory Authority for Personal Data Processing.

To exercise your rights, contact support@pukamuka.com.

Before responding to a request, we may ask you to confirm your identity.

We apply reasonable technical and organisational measures to protect data against:

• unauthorised access;
• loss;
• destruction;
• alteration;
• unauthorised disclosure;
• misuse.

Such measures may include access controls, internal access limitation, system security, incident monitoring, internal procedures and contractual obligations for providers.

Pukamuka services are intended for persons who are at least 18 years old.

We do not knowingly collect data from minors. If we learn that we have collected data from a minor without a legal basis, we will take reasonable steps to delete such data.

Please do not send sensitive data through forms or messages unless it is specifically requested and necessary for a legal, customs, compliance or delivery purpose.

Pukamuka may use automated or semi-automated tools for security, anti-fraud, technical checks, order filtering, risk identification or access administration.

Such tools may flag an application, account, order, parcel or payment for additional review.

Pukamuka does not use automated processing to produce significant legal effects for the Customer without the possibility of human review where required by applicable law.

We may send operational messages regarding:

• application status;
• Club access;
• your account;
• orders;
• parcels;
• payments;
• delivery;
• customs;
• security;
• changes to legal documents;
• requests for additional information.

These messages are not marketing communications.

Pukamuka may update this Policy when the law, service model, technical infrastructure, providers or internal processes change.

The current version is published on the website.

PERSONAL BUYER LOGISTICS S.R.L.

Registered office: Iaşi County, Municipality of Iaşi, Grigore Ureche Street, No. 3, basement, Class Office Center, office no. 10, at the Law Office of Duhnea Dana Elena, Bl. GH. SONTU

Unique Registration Code: 54614158

Trade Register Number: J2026029213001

EUID: ROONRC.J2026029213001

Email: support@pukamuka.com