Privacy Policy

Individual Entrepreneur (FOP) Iryna Burman (tax ID 3506006167), Odesa, Ukraine ("SHio Event", "we"), is the controller of the information collected on this website ("the site") under the Law of Ukraine «On Personal Data Protection»; for visitors from Israel — also within the meaning of Israel's Protection of Privacy Law, 1981 ("the Law"), including Amendment 13, and for visitors from the EU — of the General Data Protection Regulation (GDPR).

This policy explains what information we collect, why, who receives it, how long it is kept and what rights you have.

Information you give us: when you fill in a form on the site — your name, phone number and, if you choose, e-mail and message.

You are not legally required to give us any information. Without a name and phone number, though, we cannot get back to you.

Visit statistics: the site itself counts which pages were viewed and which site you came from. Only the page address and the referring site are stored — no cookies, no IP address and nothing that identifies you.

In SHio Event, event organizers (a couple, a family or a wedding venue) add their guest list and send each guest a personal link. For the guests' data, the organizer is the controller: they decide whom to invite and what to record. We hold and process the data on the organizer's behalf, only to run the event — to show the guest the invitation, receive their answer and help the organizer with seating and ordering the dishes.

What is stored about each guest: name, phone number if the organizer entered it, the answer (coming or not, how many people), dish choices, the note the guest wrote, their table and, if the guest chooses to share them, dietary preferences and allergies (for example vegetarian, gluten-free, nut allergy). Dietary and allergy details are given only by the guest's own choice and are shown only to the organizer, so that the right dish reaches the table.

The data is not passed to anyone except the organizer and is not used for any other purpose. The guest page has no ads and no Google or Meta tracking. Phone numbers are not shown to other guests; a guest sees only the invitation and their own answer.

Deletion: when the organizer deletes a guest or the whole event, that data is deleted at once. In any case, guest data is deleted automatically 60 days after the event date.

About organizers themselves we keep: e-mail address, name, language, country and account type (couple/family or venue) — to run the account, send the sign-in code and show prices in the right currency. The sign-in code is stored only in hashed form, for 10 minutes. After signing in, a necessary session cookie (event_session) is kept for 30 days so you don't have to sign in every time. This data is kept while the account exists; to have it deleted, write to support@shioweb.com.

Maps: on the guest page, the guest's browser loads map tiles from OpenFreeMap, which, like any website, sees the IP address and the map area. Data about parking lots, streets and addresses comes from OpenStreetMap: our server queries the Overpass and Nominatim services only with the address or point of the venue — never with guest data.

A guest who wants to see, correct or delete the data about them can ask the event organizer, or write to us at support@shioweb.com — we will pass the request to the organizer or handle it as the law requires.

Payment: when an organizer pays, the card details are entered on the secure page of monobank (the Ukrainian bank «Universal Bank»), not with us. monobank receives the amount, the description of the purchase and the organizer's e-mail (for the receipt) and processes them as an independent controller under its own privacy policy and the law of Ukraine. We receive from it only a payment confirmation, the amount and the transaction number. The data is hosted with cloud providers (Vercel, Neon) and e-mails are sent through Resend, partly outside the organizer's country.

To get back to you and handle your enquiry, to provide the service you asked for, to improve the site and to meet our legal obligations.

We will not send you advertising without your explicit and separate consent, as section 30A of the Communications (Telecommunications and Broadcasting) Law, 1982 requires.

Only service providers who work for us and on our behalf ("holders"): website and database hosting, and e-mail delivery. They are bound to keep the information confidential.

Some providers store information on servers outside Israel. Such transfers are made under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001.

The site sends the provider of its template a technical version check: the site's address and the browser type only — no IP address and nothing that identifies you.

Beyond that we will not share information, unless the law, a court order or a competent authority requires it.

If the site owner has connected Google Analytics, Google Ads, Meta Pixel or TikTok Pixel, they load only after you click «Accept» in the cookie notice. They store cookies in your browser and send Google, Meta or TikTok (whichever is connected) a browser identifier, the pages you visited and actions on the site (such as sending an enquiry), to measure how the site is used and to show relevant ads. These companies also use this information under their own privacy policies.

If you click «Decline», they do not load. You can change your decision at any time via «Cookie settings» at the bottom of the site; withdrawing consent deletes these cookies from your browser.

We act under the Privacy Protection (Data Security) Regulations, 2017: the site is encrypted (HTTPS), the admin area is password-protected and locks after repeated failed logins, and access to information is limited to those who need it. No security is perfect, but we take the accepted measures to protect the information.

As long as it is needed for the purposes above or as long as the law requires, and then it is deleted.

To see the information held about you (section 13 of the Law); to ask for information that is inaccurate, incomplete, unclear or out of date to be corrected or deleted (section 14); and to ask to be removed from a direct-marketing list (section 17F). We will reply within 30 days.

You may also complain to the Privacy Protection Authority at the Ministry of Justice. EU residents also have their rights under the GDPR.

The site is not intended for collecting information from minors under 18 without a parent's consent. If we learn that such information was collected, we will delete it.

For any privacy question or request: support@shioweb.com or 052-789-7969.

We may update this policy. The binding version is the one on the site; the date of the last update is at the top of the page.