Privacy Policy

Effective Date: September 25, 2024
Last Updated: September 25, 2024

I. INTRODUCTION

This Privacy Policy and Personal Data Protection (hereinafter referred to as the “Privacy Policy”) has been developed and is based on the current Bulgarian and European legislation in the field of personal data protection. This Privacy Policy governs the processing of personal data of users of our Website.

This Privacy Policy sets out the rules applied by “IDENTITY” Ltd. for the processing of personal data collected from users.

This Privacy Policy does not affect, restrict, or revoke your rights arising from the Personal Data Protection Act (PDPA), Regulation (EU) 2016/679 (General Data Protection Regulation), or other applicable regulations.

Please read this Privacy Policy carefully before using the Website or providing your personal data, whether electronically or on paper. By providing your personal data, you agree to its terms, and the Policy will apply to the processing of your personal data. If you do not wish for your personal data to be processed as described in this Privacy Policy, please do not provide it or use the Website. Providing your personal data is voluntary to access and use the functionalities of the Website.

Please note that in certain cases, your consent to process personal data may not be required if “IDENTITY” Ltd. has a corresponding legal basis, such as compliance with statutory obligations under the applicable legislation.

The Company is committed to high standards of information security, confidentiality, and transparency and complies with the General Data Protection Regulation.

This Privacy Policy provides you with information on how “IDENTITY” Ltd. processes personal data. This includes personal data we collect about you when you use the Website or receive our services and information obtained from other sources.

This Privacy Policy should be read together with any other processing notice or additional information we provide to you.

The Privacy Policy is divided into sections to enable you to navigate specific areas of interest below.

We aim to ensure the protection of all personal data of our clients, as well as all other information we store, to maintain the trust of our clients and regulatory bodies as we implement and use the information we possess in innovative ways.

II. DEFINITIONS

“Personal Data” has the meaning outlined in Article 4, Paragraph 1 of the General Data Protection Regulation (GDPR):

“Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.”

“IDENTITY,” “We,” or “the Company” refers to “IDENTITY” Ltd., a commercial entity registered in the Commercial Register with UIC 207263644, headquartered at: Varna, Primorski District, “Captain Georgi Boev” St. No. 4. The Company is a data controller under the Personal Data Protection Act (PDPA) and collects, processes, and stores your personal data under this Privacy Policy. You can contact us through the Website or via the following details:
Address: Varna, Primorski District, “Captain Georgi Boev” St. No. 4
Email: shop@shapeyouridentity.com

“General Data Protection Regulation” (GDPR) refers to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data, repealing Directive 95/46/EC.

“Website” or “Platform” is the e-commerce website administered and maintained by us, accessible at the domain shapeyouridentity.com and its associated subpages. The Platform serves as a virtual e-commerce platform for offering goods by “IDENTITY,” allowing you to enter into distance purchase agreements with us.

“Functionality” means all services provided through the Website (including, but not limited to, the sale and delivery of goods via the Platform) as described in detail in our Terms and Conditions.

III. COLLECTION OF PERSONAL DATA

This Privacy Policy is intended to inform you, as a user, about the categories of personal data we may collect in connection with your use of the Website. We utilize and may provide the stored data at your request.

We collect personal information about you, including but not limited to:

  1. First and last name;
  2. Address;
  3. Phone number;
  4. Email address;
  5. Other data required for invoice issuance;
  6. Order history for purchases made through the Website.

By using the Website, you express your informed and explicit consent to provide your personal data so that it can be collected and processed by us. When providing personal data, you may indicate your consent or refusal for the collection or processing of your personal data.

IV. PURPOSES OF PROCESSING

We use your personal information for the following purposes:

  • To conclude and execute distance contracts for the sale of goods;
  • To contact you in connection with the services we provide through the Website;
  • To respond to any inquiries or questions you may have regarding our services;
  • To prevent or detect fraud, record suspicious or fraudulent behavior, or suspicions of false or inaccurate information;
  • To comply with other applicable regulatory requirements;
  • For marketing purposes, if you have explicitly consented to this.

By providing your personal data, you give your explicit consent for its use for the purposes outlined in this Privacy Policy.

If “IDENTITY” intends to use your personal data for other purposes, we will notify you in advance and request your explicit consent.

V. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

  • We may process your data based on the contract for the sale of goods entered between us and our legitimate interest. Your data may be processed to provide our services, ensure high security levels, maintain protected backups of our database, and communicate with you. The legal basis for this processing is the contract signed between us under the General Terms and our legitimate interests, specifically, the provision of services on the website and execution of the sale contract(s).
  • We may process your data provided during the use of the Website (“service usage data”). This includes access logs to our platform, history of provided services, and contracts. The source of service usage data is our Platform. These data may be processed to ensure the functionality of the Website, provide our services, ensure security, maintain protected database backups, and communicate with you. The legal basis for this processing is our legal obligation, the signed contract, and our legitimate interests, particularly for proper administration, fraud prevention, and security.
  • We may process information contained in any inquiry or complaint you send us regarding our services (“inquiry data”). Inquiry and complaint information may be processed for marketing and sales of related services. The legal basis for this processing is the signed contract and our legitimate interest in providing and improving communication about our services.
  • We may process information related to transactions and services performed through the Website (“transaction data”). Transaction data may include card details, bank account information, and transaction history. These data are processed to provide services and maintain accurate records. The legal basis for this is our legal obligation and the signed contract.
  • We may process the information you provide as users of our email notifications or newsletters (“notification data”). Notification data may be processed to send relevant notifications or newsletters for marketing purposes. The legal basis for this processing is your consent or the execution of a contract.
  • We may process communication-related information you send us (“correspondence data”). This includes the content of communication and metadata generated through contact or inquiry forms. Correspondence data may be processed for communication and record-keeping purposes. The legal basis for this processing is our legitimate interest in proper administration and contract management.
  • We may process all personal data described in this Policy if necessary to establish, exercise, or defend against legal claims. The legal basis for this processing is our legitimate interest in protecting and asserting legal rights.
  • In addition to the specific purposes outlined in this Policy, we may process your personal data to comply with legal obligations or protect vital interests.
  •  Do not provide personal data of any other person unless explicitly requested as part of our service (e.g., when delivering purchased goods to a third party).
  • By accepting this Policy, you explicitly agree that your data will be technically processed entirely or partially by the Company.
  • We may disclose personal data for identification and verification purposes to authorized providers or subcontractors if reasonably necessary.
  • Personal data may be shared with professional advisors to manage risks, provide advice, or establish legal claims.
  • Transaction data and inquiries may be disclosed to our partners (e.g., couriers) for service execution.
  • Access to our servers may result in recorded information, such as your IP address, internet service provider, and browser/device details. This information is used to evaluate the Website’s performance and prevent fraud. The legal basis for this is our legitimate interest and legal requirements.
  • Personal data (e.g., name, phone, email) may be used for marketing purposes if you have explicitly agreed. If you no longer wish to receive marketing communications, contact us via the details provided in this Policy.

VI. INFORMATION FROM COOKIES AND OTHER TECHNOLOGIES

For more details on how we use these technologies and your options regarding them, please refer to our Cookie Policy.

VII. SPECIAL CASES OF DATA PROCESSING

Use of Anonymized Data

For statistical purposes, analyses, or regulatory compliance, we may use anonymized data—personal data processed in such a way that the data subject can no longer be identified. Anonymized data is not considered personal data and is therefore not subject to personal data processing requirements.

Data Collection from Minors

We do not sell products to or offer services for purchase by minors. If we discover that we have collected personal information from a person under the age of 16, we will take steps to obtain consent from the person with parental responsibility or delete the information as soon as possible.

VIII. STORAGE AND DESTRUCTION OF PERSONAL DATA

Personal data is stored only as long as necessary for its purpose or as required by law. Data may be retained to fulfill legal obligations or protect vital interests.

IX. SECURITY

“IDENTITY” employs reasonable electronic, personnel, and technical measures to protect personal data from loss, theft, alteration, or misuse. However, even the best security measures cannot eliminate all risks.

X. YOUR RIGHTS

Depending on the applicable law, you may have the right to:

  • Access, rectify, or erase your personal data.
  • Receive a copy of your data.
  • Restrict or object to its active processing.
  • Request that we share (port) your data with another entity.
  • Withdraw consent for data processing.
  • Lodge a complaint with the Commission for Personal Data Protection (CPDP):
    • Address: Sofia, 1592, 2 Prof. Tsvetan Lazarov Blvd.
    • Phone: +359 2 / 91 53 518
    • Еmail: kzld@cpdp.bg
  • Exercise other rights as outlined by applicable laws.

If you wish to exercise any of these rights, please contact us using the details in Section II of this Privacy Policy. We will respond to your request in accordance with applicable law.

You may opt out of direct marketing communications or profiling for marketing purposes by writing to us.

XI. QUALITY ASSURANCE MONITORING

“IDENTITY” may record telephone and electronic communications between employees and third parties to ensure quality and service compliance, in accordance with applicable laws and after notification. All monitoring is conducted lawfully, with respect for the confidentiality of your communications.

XII. DISCLOSURE TOTHIRD PARTIES

“IDENTITY” shares personal data with third parties only when necessary (e.g., for order delivery by courier services) or with your explicit consent. The website contains third-party applications (e.g., Google, Facebook) that may collect data for their purposes. We recommend reviewing their privacy policies.

Your personal data will not be transferred outside the EU without sufficient protection or your informed consent.

XIII. REFERENCES

The website may contain links to external sites. “IDENTITY” is not responsible for the content or privacy policies of these sites. We advise you to review their policies before use. If illegal information is identified, the links will be removed immediately.

XIV. MISCELLANEOUS

“IDENTITY” may update this Privacy Policy by publishing a new version on the website. Significant changes will be communicated via the contact details you have provided. For questions, contact us at: shop@shapeyouridentity.com