Home › Privacy notice
Privacy notice
Last updated: 1 May 2026. This notice explains what personal data the shop collects and how it is used, in line with the GDPR and Bulgarian data protection law.
1. The data controller
The data controller is Joubert Crafts EOOD, a Bulgarian limited company (EOOD), EIK 208417263, VAT BG208417263, registered office at 23 Aleksandrovska Street, First floor, flat 6, 7000 Ruse, Bulgaria. For any data question, please write to [email protected].
2. The data we collect
- When you place an order — name, email, telephone, shipping address, items ordered, and a payment confirmation token. We never see your full card number; that goes directly to our payment provider.
- When you write to us — your name, email and the contents of your message.
- When you visit the site — the IP address sent by your browser, and a small bag cookie that lets you keep items between pages.
3. Why we use it
- To accept and ship your order — basis: contract.
- To answer your messages — basis: legitimate interest in customer service.
- To meet our bookkeeping and tax obligations — basis: legal obligation.
- To keep the website safe — basis: legitimate interest.
4. Who else sees your data
We share the minimum personal data needed with: our payment provider (to take payment), our courier (Speedy, Econt or Bulgarian Posts — to deliver your parcel), and our accountant (for tax filings). We do not sell or rent personal data to anyone, ever.
5. How long we keep your data
Order records are kept for ten years to satisfy Bulgarian tax law. Email correspondence is kept for two years. The bag cookie lasts thirty days. If you give us marketing consent, we keep that consent until you withdraw it.
6. Your rights under the GDPR
You may ask us to show you the data we hold about you, to correct it, to delete it, to limit how we use it, or to send it to another service in a portable format. Email [email protected] and we'll reply within thirty days. If our reply doesn't satisfy you, you may complain to the Bulgarian Commission for Personal Data Protection (CPDP) at cpdp.bg.
7. Cookies
The site sets a bag cookie that we need for the shop to work, plus an analytics cookie (only if you accept it via the cookie banner). The full table is on the cookie page.
8. Updates to this notice
If we change anything material, we update the date at the top and post a small note on the homepage for thirty days.