Privacy policy
How customer information is used, who receives it and your data-protection choices.
Updated
Pre-launch draft. Details in parentheses must be completed before purchases open.
Who is responsible for your information
The controller for personal data used to operate clothes is (registered company name and legal form), EIK (company registration number / EIK), at (registered office and full management address). Privacy contact: clothesupport@gmail.com. Telephone: (contact telephone number). This notice covers browsing and account services, and describes order processing when sales open.
Information used by this store
Browsing requests can involve technical information such as your IP address, browser, requested pages and service logs. If you sign in using Shopify customer accounts, account identifiers, your profile, addresses and order history can be used to display your account and keep you signed in.
When sales begin, information will include your name, contact details, delivery and billing addresses, purchased items, payment status, returns and customer-service correspondence. Card entry will be handled by the configured checkout and payment provider; never send full card details by email.
Purposes and legal grounds
Account and purchase information is used to provide requested account services, orders, deliveries, support and refunds under GDPR Article 6(1)(b), for steps at your request before a contract or its performance. Invoice, accounting and legally required complaint records are processed under Article 6(1)(c) to meet legal obligations.
Necessary security, fraud prevention and troubleshooting can rely on legitimate interests, subject to an assessment of your rights. If consent-based marketing or optional tracking is introduced, consent will be requested separately and can be withdrawn without affecting earlier lawful processing.
Service providers and international processing
Shopify provides hosting, commerce and customer-account services. Google Gmail is used for correspondence at clothesupport@gmail.com. Other recipients receive only information necessary for their roles: payment provider (provider name); delivery carriers (carrier names); accounting provider (provider name, if used); other processors (names and services, if used). Authorities receive records where disclosure is legally required. Access within the Seller is restricted to authorised personnel.
Processing outside the EEA must comply with GDPR Chapter V. Transfer details: (recipient, country and applicable adequacy decision or safeguards, including standard contractual clauses and supplementary measures where needed). To request information or a copy of relevant safeguards, contact our privacy address. Shopify may act as processor or, for some services, as controller; its linked notice explains its roles.
Retention and security
Information is retained only for the stated purpose, applicable legal record-keeping or the establishment, exercise or defence of legal claims. Retention schedule: account information (retention period or deletion criteria); orders and invoices (applicable accounting/tax retention period); support and complaint records (retention period or criteria); technical and security logs (retention period). The applicable periods must be completed for the Seller and configured services.
Access to administration and customer information should be limited to authorised people. Shopify account services and the storefront session support authentication. No service can promise absolute security.
Marketing and your choices
Optional storefront analytics are disabled in this preview. No newsletter signup, advertising pixels or embedded social feed have been added. Cookie notice describes storefront storage; Shopify-hosted account and checkout pages may use their own storage.
Personal data rights explains access, correction, deletion and other applicable rights. You can also complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.
Required information and automated decisions
Contact, delivery and payment information marked as required is necessary to process the requested order or service. If it is not provided, that order or service cannot be completed. Optional fields are identified separately. We do not use this storefront to make solely automated decisions producing legal or similarly significant effects. If such processing is introduced, the applicable information and safeguards will be supplied before it begins.
This notice may be updated to reflect actual services or legal changes. The updated date identifies the current version. A changed notice is not itself consent to a new purpose requiring consent; any required consent is obtained separately.