Privacy Policy

1. Data controller

[COMPANY NAME], UIC [UIC], [REGISTERED ADDRESS]. Data protection contact: [EMAIL].

2. What we collect

First and last name, email address, phone number, delivery address or chosen courier office, and order history.

We collect no payment data, because payment is made in cash on delivery.

3. Legal basis and purpose

Performance of a contract (Art. 6(1)(b) GDPR) — to process and deliver your order.

Legal obligation (Art. 6(1)(c)) — accounting and tax records.

Consent (Art. 6(1)(a)) — marketing messages only, and only where you have given it.

4. Retention

Order data: 5 years, as required by tax law.

Marketing consent: until withdrawn.

5. Recipients

Courier companies (Econt, Speedy) for delivery.

Our email provider, to send order confirmations.

We do not sell or share personal data with third parties for marketing.

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, and objection.

To exercise these rights, write to [EMAIL].

You may lodge a complaint with the Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd, Sofia.