Privacy Policy

1. Data controller

The controller of your data is Bellaviere HC LTD., company No. 208806287, registered at 6 Poshtenska Str., 1225 Sofia, Bulgaria.

For any questions about your personal data, contact us at info@bellaviere.com or on +359 888 656 155.

2. What data we collect

We do not store card details — card payments are handled entirely by myPOS.

• Identification data — first and last name;
• Contact data — email address and phone number;
• Delivery address — city, postal code, address or courier office;
• Order data — items ordered, amounts, payment and delivery method;
• Account data — if you register (created via Firebase).

3. Purposes and legal basis

• Performance of a contract (Art. 6(1)(b) GDPR) — processing and delivering your order;
• Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax requirements;
• Legitimate interest (Art. 6(1)(f) GDPR) — security, fraud prevention, abandoned-cart reminders;
• Consent (Art. 6(1)(a) GDPR) — newsletter and marketing, which you may withdraw at any time.

4. Recipients of the data

We share data only with providers needed to fulfil your order:

• Speedy — for delivering shipments;
• myPOS — for processing card payments;
• Amazon Web Services (AWS) — hosting and data storage in the EU;
• Google Firebase — user account authentication.

5. Retention periods

• Accounting and tax documents — 10 years as required by law;
• Account data — until you delete your account;
• Marketing consent — until you withdraw it.

6. Your rights

As a data subject you have the right to:

• access your personal data;
• rectify inaccurate data;
• erasure (the “right to be forgotten”);
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time.

7. Right to complain

You have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) — Sofia, 2 Prof. Tsvetan Lazarov Blvd., or online at www.cpdp.bg.

8. Data security

We apply appropriate technical and organisational measures to protect your data. Card details are never stored with us — they are processed in a secure environment by myPOS.

9. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with its last-updated date.