Privacy Policy

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To fulfil and manage your orders. We process your information to fulfil and manage orders, payments, returns, and exchanges made through the Site.
• To deliver products to you. We process your information to provide shipping services, including address validation, customs declarations, and delivery tracking.
• To send you transactional communications. We may send you order confirmations, shipping updates, refund notifications, review requests, and account-related information via our email service provider.
• To manage user accounts. We process your information to manage your account and keep it in working order.
• To respond to enquiries and provide support. We process your information to respond to your enquiries and resolve any potential issues with our Services.
• To calculate and apply VAT. We process your location data to determine the correct VAT rate for your jurisdiction.
• To protect our Services. We process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To evaluate and improve our Services. We may process your information to understand how our Site is used (via anonymised analytics) and to improve our product offering.
• To comply with legal obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as tax reporting.

In Short: We may share information in specific situations described in this section and/or with the following categories of third parties.

Service providers. We may share your information with third-party service providers who perform services on our behalf. We only share the minimum information necessary for each provider to deliver its service. We do not share your personal information with service providers for marketing purposes or any purpose unrelated to the service they provide to us.

These service providers may be independent data controllers for data they process. While we require them to protect your information, we cannot control how they handle data they independently hold about you. We encourage you to review the privacy policies of any third-party service you interact with through our Site.

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

Legal requirements. We may disclose your information where we are legally required to do so in order to comply with applicable law, governmental requests, a judicial proceeding, court order, or legal process.

Vital interests and legal rights. We may disclose your information where we believe it is necessary to investigate, prevent, or take action regarding potential violations of our policies, suspected fraud, situations involving potential threats to the safety of any person, or as evidence in litigation in which we are involved.

In Short: We use minimal tracking. Our analytics solution does not use cookies.

Essential cookies: We use strictly necessary cookies to maintain your shopping cart, session, and authentication state. These cookies are required for the Site to function and cannot be switched off.

Analytics: We use a self-hosted, privacy-focused analytics tool that does not use cookies, does not track users across websites, and does not collect personally identifiable information. All data is anonymised and aggregated.

Session recording (with your consent):If you allow it in our consent banner, we record an anonymised sample of browsing sessions to diagnose usability problems on the Site. Everything you type is masked in your browser before it is sent, and payment card details are entered inside our payment provider’s own secure frame, which cannot be recorded. Recordings are limited to five minutes, are stored on our own infrastructure, and are used solely to improve the Site. You can withdraw consent at any time via the cookie preferences.

No marketing cookies: We do not use marketing, advertising, or third-party tracking cookies.

You can set your browser to refuse all or some cookies. If you disable or refuse essential cookies, some parts of the Site (such as the shopping cart) may not function properly.

In Short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy notice unless otherwise required by law.

Specifically:

• Account information: retained for as long as your account is active, and up to 1 year after last interaction if your account becomes inactive
• Order and transaction data: retained for 7 years as required by Bulgarian tax and accounting law
• Shipping records: retained for 7 years as required by customs and VAT regulations
• Analytics data:anonymised and aggregated — no personally identifiable information is retained

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

In Short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate and reasonable technical and organisational security measures designed to protect the security of any personal information we process. These include:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Payment card data handled exclusively by PCI DSS Level 1 compliant payment processors (Stripe, PayPal)
• Access controls to restrict unauthorised access to personal data
• Regular security updates to our systems

However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorised third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

In Short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services.

If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at [email protected].

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

We respect DNT signals. If your browser sends a Do-Not-Track request, our analytics will not collect any data from your visit. You may also opt out of analytics tracking via the option in our website footer.

In Short: If you are a resident of California, you are granted specific rights regarding access to your personal information.

Under the Virginia Consumer Data Protection Act (VCDPA), “consumer” means a natural person who is a resident of the Commonwealth of Virginia acting only in an individual or household context.

If you are a resident of Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA) grants you certain rights with respect to your personal information.

• Right to be informed of the existence, use, and disclosure of your personal information
• Right to access your personal information held by us
• Right to challenge the accuracy and completeness of your personal information and have it amended as appropriate
• Right to withdraw consent to the collection, use, or disclosure of your personal information (subject to legal or contractual restrictions)

To exercise your rights, contact us at [email protected]. We will respond within thirty (30) days. If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner of Canada.

Our company is registered in the European Union and our servers are located within the EU. Your personal data is primarily stored and processed within the EU.

However, some of the third-party service providers we use are headquartered outside the EU — including our payment processors (Stripe and PayPal), which are US-based companies, and our content delivery and infrastructure provider. These providers may process your data in the EU, the United States, or other jurisdictions. We do not control where these providers store or process data they hold, but each maintains appropriate data protection agreements.

Where personal data is transferred to countries outside the EEA/UK that have not been deemed to provide an adequate level of data protection, we and our service providers rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Agreement or Addendum (for UK transfers)
• EU-US Data Privacy Framework certification (where applicable)
• Other lawful transfer mechanisms as applicable

If you are a resident of the European Economic Area (EEA), United Kingdom, or Switzerland, we will take all necessary measures to protect your personal information in accordance with this privacy notice and applicable law.

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last updated” date at the top of this privacy notice. If we make material changes, we may notify you by prominently posting a notice on our website or by directly sending you a notification.

If you have questions or comments about this notice, you may email us at [email protected] or by post to:

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it.

To request to review, update, or delete your personal information, please contact us at [email protected].

We will respond to your request within 30 days (or within the timeframe required by your applicable local law).