Privacy Policy

This Privacy Policy (hereinafter — "Policy") defines the procedure for collection, processing, storage and protection of personal data of users of the soloway.com.ua website and SoloWay mobile application (hereinafter — "Platform").

The Platform is owned and operated by individual entrepreneur (FOP) Zaritskyi V.A. (hereinafter — "Company", "we", "us"). The Company is a personal data controller in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI dated 01.06.2010.

By using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data under the terms set forth below.

This Policy is an integral part of the Public Offer (User Agreement) published on the Platform.

"Personal data" — information or a set of information about a natural person who is identified or can be specifically identified (pursuant to Art. 2 of the Law of Ukraine "On Personal Data Protection").

"Processing of personal data" — any action or set of actions such as collection, registration, accumulation, storage, adaptation, modification, renewal, use and dissemination, depersonalization, destruction of personal data.

"Data controller" — the Company that processes personal data on behalf of and/or on the instructions of the database owner.

"User" — a natural person who uses the Platform to search, book, or purchase bus tickets.

"Passenger" — a person whose data is entered into an order for the purpose of travel.

"Carrier" — a legal entity or individual entrepreneur that provides passenger bus transportation based on appropriate permits.

We collect the following categories of personal data:

Identification data: surname, first name, patronymic; date of birth; gender; citizenship.

Contact data: email address; mobile phone number.

Travel document data: passport or ID card series and number; document expiry date; issuing country (for international routes).

Booking data: selected routes, dates, number of passengers, order history.

Payment data: payment method information. We do not store full payment card details — they are processed exclusively by the payment provider PSP Platon.

Technical data: IP address; browser type and version; operating system type; device type; cookie data; Platform interaction data (pages visited, time spent).

Account data: login (email), password (encrypted), profile settings, loyalty program data.

Data provided through third-party authorization: when signing in via Google or Apple, we receive your name and email address from these services.

We process your personal data for the following purposes:

Service delivery: route search, ticket booking and sales, order processing, sending electronic tickets and confirmations.

Transportation contract fulfillment: transmitting necessary passenger data to carriers for transportation in accordance with legal requirements.

Payment processing: conducting online payments, refunds, fraud prevention.

Communication: informing about order status, route changes, cancellations, booking confirmations. Responding to support inquiries.

Service improvement: analyzing Platform usage, improving the interface, personalizing offers.

Marketing: sending information about promotions, discounts and special offers (with your separate consent). You can opt out of marketing communications at any time.

Legal compliance: meeting requirements of tax, transport and other Ukrainian legislation.

Security: protection against unauthorized access, fraud detection and prevention.

Processing of your personal data is carried out on the basis of:

Your consent (clause 1, part 1, Art. 11 of the Law of Ukraine "On Personal Data Protection") — which you provide when registering on the Platform, placing an order, or subscribing to newsletters.

Necessity to perform the contract (Public Offer) — for providing ticket booking and sales services, processing orders and payments.

Legitimate interests of the Company — for improving service quality, analytics, ensuring Platform security and fraud prevention.

Legal obligations — for compliance with Ukrainian legislation, including the Law "On Consumer Rights Protection", tax legislation, and the Law "On Road Transport".

For international routes, processing is also carried out in accordance with Regulation (EU) 2016/679 (GDPR) and Regulation (EU) No. 181/2011 on bus passenger rights.

The Platform uses cookies and similar technologies to ensure proper functioning and improve your experience.

Essential (technical) cookies: necessary for Platform operation — authorization, session management, language settings, order cart. These cookies cannot be disabled.

Analytical cookies: help us understand how users interact with the Platform. We use Google Analytics to collect anonymized data: browser type, device, pages visited, visit duration, language, geographic location. This data may be processed on Google servers outside Ukraine, including the EU and USA.

You can configure or block cookies through your browser settings. Please note that blocking essential cookies may affect Platform functionality.

We may share your personal data with the following categories of recipients:

Carriers: passenger data (surname, first name, phone number, travel document data — for international routes) is shared with carriers to fulfill the transportation contract and border control requirements.

Payment providers: PSP Platon processes payments. We do not store card details — this is done exclusively by the payment provider in accordance with PCI DSS standards.

Analytics services: Google Analytics receives anonymized data about Platform usage.

Support services: partners who help provide customer support.

Government authorities: in cases provided by Ukrainian law, we are required to provide personal data upon request from law enforcement, courts, or other authorized bodies.

We do not sell your personal data to third parties. Data is shared only to the extent necessary to achieve the processing purposes defined in this Policy.

Due to the international nature of passenger transportation, your personal data may be transferred outside Ukraine:

To carriers operating international routes — for fulfilling the transportation contract and border control in EU countries and other states.

To Google servers (Google Analytics) — data may be stored on servers in the EU, USA, and other countries.

To authorization services (Google, Apple) — when using third-party account sign-in.

Cross-border transfer is carried out in compliance with Art. 29 of the Law of Ukraine "On Personal Data Protection" and, where applicable, Regulation (EU) 2016/679 (GDPR). We ensure that recipients guarantee an adequate level of personal data protection.

We retain your personal data for the period necessary to achieve the processing purposes:

Account data — for the entire duration of the account and 6 months after deletion (for recovery purposes).

Order and ticket data — for 3 years from the travel date (in accordance with limitation periods under the Civil Code of Ukraine).

Accounting data — for periods established by Ukrainian tax legislation (not less than 1,095 days).

Technical data and cookies — up to 12 months.

After the retention period expires, personal data is destroyed or anonymized.

In accordance with the Law of Ukraine "On Personal Data Protection" and (for EU citizens) the GDPR, you have the following rights:

Right of access: you have the right to know what personal data is being processed and to receive a copy.

Right to rectification: you can request correction of inaccurate or incomplete data.

Right to erasure: you have the right to request deletion of your personal data if there are no legitimate grounds for further processing.

Right to restriction of processing: you can request temporary restriction of your data processing.

Right to data portability: you have the right to receive your data in a structured, commonly used, machine-readable format.

Right to object: you can object to processing of your data for marketing purposes.

Right to withdraw consent: you have the right to withdraw your consent to personal data processing at any time, which does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, contact us at: info@soloway.com.ua or through the feedback form on the Platform.

If you believe your rights have been violated, you have the right to file a complaint with the Ukrainian Parliament Commissioner for Human Rights (Ombudsman) — www.ombudsman.gov.ua.

We implement appropriate organizational and technical measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

Encryption: data transmission between your device and the Platform is protected by 256-bit SSL/TLS encryption.

Payment security: all payments are processed through the certified PSP Platon payment gateway with 3D Secure support. The Company does not have access to full payment card details.

Access control: only authorized Company employees who need the data to perform their duties have access to personal data.

Passwords are stored in encrypted form (hashing). We cannot view your password.

Regular updates: we continuously update our security systems in accordance with modern standards.

Despite the measures taken, no method of data transmission or storage on the Internet can guarantee absolute security. We make every effort to protect your data.

The Platform is not intended for independent use by persons under 16 years of age. Bookings for minor passengers are made by their parents or legal guardians.

If we become aware that we have collected personal data of a child without parental consent, we will immediately take steps to delete it.

The Company reserves the right to amend this Policy. We will notify you of significant changes by posting an updated version on the Platform.

The date of the last update is indicated at the beginning of the document. Continued use of the Platform after the Policy update constitutes your agreement with the new version.

We recommend regularly reviewing this Policy to stay informed about possible changes.

For questions regarding personal data processing and protection, you can contact us:

Email: info@soloway.com.ua

Phone: +380 97 830 38 38 (Mon–Sun: 09:00–22:00)

Postal address: 79060, Naukova St. 3-B, office 310, Lviv, Ukraine

To exercise your data subject rights, send requests to info@soloway.com.ua with the subject "Personal Data".