Privacy policy

  • 🔒 Privacy Policy
    WE ARE COMMITTED TO PROTECTING YOUR PERSONAL DATA

    I. INTRODUCTION

    This Privacy Policy explains how we process the personal data of:

    • visitors to our website;

    • individuals who interact with us and register for our services.

    Please read this Policy carefully to understand how we, as the data controller, collect, use, and protect your personal data.

    II. GENERAL INFORMATION

    According to Article 4(1) of the General Data Protection Regulation (GDPR), “personal data” means any information relating to an identified or identifiable natural person (“data subject”).

    We respect the privacy of our users and process personal data in accordance with this Policy. Upon your first visit to our website, you will be asked to consent to the use of cookies as described below.

    Our store is hosted on Shopify Inc., a globally recognized e-commerce platform. Shopify processes and stores data in compliance with the General Data Protection Regulation (GDPR), using secure servers located in multiple regions, including the European Union.

    III. USE OF YOUR PERSONAL DATA

    1. Categories of personal data we may process:

    • Usage Data: IP address, location, browser type, operating system, pages visited, session duration;

    • Registration Data: name, email address, date of birth, nationality;

    • Profile Data: address, phone number, photos, interests;

    • Service Data: access history to the platform;

    • Transaction Data: payment details and transaction history;

    • Correspondence Data: communication between you and us.

    2. Purposes and legal bases for processing:

    • Operating the website and providing services;

    • Analyzing and improving user experience;

    • Delivering personalized solutions;

    • Complying with legal obligations and fraud prevention;

    • Enhancing communication with users;

    • Sending marketing communications (only with your explicit consent).

    IV. DATA RETENTION AND DELETION

    • Personal data is retained for at least 5 years after termination of a service agreement;

    • Transaction data is stored for up to 13 months to resolve any disputes;

    • After the retention period, data is securely deleted.

    V. SECURITY

    We apply appropriate electronic, physical, and organizational measures to protect your personal data. However, no system is completely immune from potential security risks.

    VI. CHANGES TO THIS POLICY

    We may update this Privacy Policy from time to time. We recommend reviewing it periodically to stay informed about any changes.

    VII. YOUR RIGHTS

    You have the following rights under GDPR:

    • Right of access – to request a copy of your personal data;

    • Right to rectification – to correct inaccurate or incomplete data;

    • Right to erasure (“Right to be forgotten”) – under certain conditions;

    • Right to restrict processing – in specific circumstances;

    • Right to object – when processing is based on our legitimate interests;

    • Right to data portability – to receive your data in a structured, commonly used, machine-readable format;

    • Right to lodge a complaint – with the Commission for Personal Data Protection (CPDP) in Bulgaria.

    You may exercise your rights by contacting us by email.

    VIII. COOKIES

    We use cookies to enhance your browsing experience, analyze traffic, and provide personalized content and ads. On your first visit, we will request your consent to use cookies.

    You can find more details in our Cookie Policy, if available.

    IX. THIRD-PARTY PROCESSORS

    We may share your personal data with trusted third-party service providers (data processors) who support our operations, including:

    • Shopify Inc. – e-commerce platform provider;

    • euShipments Ltd. – fulfillment and logistics partner;

    • Stripe, Shopify Payments and PayPal – payment processors;

    • Email marketing tools (e.g., Klaviyo) – for sending newsletters and customer communications (if applicable).

    These processors only access the data necessary to perform their tasks and are bound by contracts ensuring GDPR compliance.

    X. DATA CONTROLLER INFORMATION

    The online store onycofix.com is owned and operated by:

    Global Trends OOD
    Registered in: Chernevo village, Suvorovo municipality, Varna region, Bulgaria
    📧 Email: support@onycofix.com