GDPR PERSONAL DATA PROTECTION POLICY

1. Data Controller

We value the privacy of your personal data. This policy explains how we may collect, store, process, share and transfer your personal data.

The controller of your personal data is:

Naturally.bg – an online store for natural and artisan products, including food, beverages, syrups, wines, cocktail products and more. Naturally.bg

📬 Email: naturallybg.office@gmail.com
📞 Phone: +359 877 88 20 94 / +359 988 89 37 37

2. What Personal Data We Collect

To provide our services and process your orders, we may collect the following information:

2.1. Data You Provide Directly:

✔ Your name and company details
✔ Email address
✔ Phone number
✔ Delivery address
✔ Order and payment information
✔ Messages and correspondence

2.2. Data Collected Automatically:

✔ IP address
✔ Cookies and technical information about your device
✔ Usage and behavioral data necessary for website analysis and improvement
✔ Personal data obtained from other sources, where legally permitted, such as social media platforms

All personal data is processed in accordance with applicable data protection legislation and on an appropriate legal basis, including contract performance, legal obligations, legitimate interests or your consent, where applicable.

3. Purposes of Processing

Your personal data may be processed for:

Processing and fulfilling orders and arranging product delivery
Managing your customer account
Communicating with you regarding inquiries, orders and customer service
Sending marketing communications only where we have a valid legal basis and, where required, your explicit consent
Analyzing and improving our website and online store functionality
Complying with legal, tax and accounting obligations
Protecting the security of our website, services and customers

4. Legal Basis for Processing

Depending on the specific purpose, we process your personal data on the following legal bases:

Performance of a contract – for processing and fulfilling your order
Your consent – for activities such as certain marketing communications or non-essential cookies
Legal obligation – where processing is required by applicable law, including accounting and tax requirements
Legitimate interests – where necessary for the operation, security and improvement of our services, provided that these interests do not override your rights and freedoms

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and for any additional period required by applicable law.

Order and accounting data – retained for the legally required period
Marketing data – retained until you withdraw your consent or the applicable retention period expires
Cookie data – retained according to the specific cookie and its applicable retention period

When personal data is no longer required, it is deleted or anonymized where appropriate.

6. Who We Share Your Data With

Where necessary and legally permitted, we may share your personal data with:

✔ Courier and logistics partners for delivery of your orders
✔ Payment service providers for processing payments
✔ IT, hosting and technical service providers supporting our website
✔ Marketing and analytics providers, where there is an appropriate legal basis and, where required, your consent
✔ Government authorities, courts or other competent bodies where required by law

👉 We do not sell your personal data to third parties.

Where third-party service providers process personal data on our behalf, we take appropriate measures to ensure that the processing complies with applicable data protection requirements.

7. Cookies and Online Tracking

Naturally.bg uses cookies and similar technologies to operate the website, improve your user experience, analyze website performance and, where applicable, personalize content.

Where required by law, non-essential cookies will only be used after obtaining your consent.

You can manage or withdraw your cookie preferences through the cookie settings available on the website or through your browser settings.

Naturally.bg

8. Your Rights Under the GDPR

Subject to applicable legal conditions and exceptions, you have the right to:

✔ Request access to your personal data
✔ Request correction of inaccurate or incomplete data
✔ Request deletion of your personal data
✔ Request restriction of processing
✔ Object to certain processing activities
✔ Withdraw your consent at any time where processing is based on consent
✔ Request data portability where applicable
✔ Lodge a complaint with the competent data protection supervisory authority

📍 Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
kzld.bg

9. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, destruction, alteration or unlawful processing.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

10. International Data Transfers

Where personal data is transferred outside the European Economic Area, we will take appropriate measures to ensure that the transfer is carried out in accordance with applicable GDPR requirements and that an appropriate legal safeguard is in place.

11. Changes to This Privacy Policy

We may update this Privacy Policy when necessary due to changes in applicable legislation, our services, technologies or the way our online store operates.

Any updated version will be published on the website, together with the applicable effective date where appropriate.

Refine the privacy policy further