PRIVACY POLICY

Last updated: 10.08.2026

This Privacy Policy describes how Spar Spray ("we", "us", "our") collects, uses, and protects personal data when you visit or make a purchase from our website, in accordance with the General Data Protection Regulation (GDPR) and Bulgarian law.

1. Data Controller

The data controller responsible for your personal data is:

2. Personal Data We Collect

a) Data You Provide

When you interact with our website or place an order, we may collect:

  • Full name

  • Email address

  • Phone number

  • Shipping address

  • Billing details (excluding full payment card data)

b) Automatically Collected Data

When you browse our website, we may collect:

  • IP address

  • Browser type and device information

  • Pages visited and usage data

3. Payment Processing (Stripe)

All payments on this website are processed securely by Stripe.

  • We do not store or process your card details

  • Stripe acts as an independent data controller for payment data

  • Stripe processes data in accordance with its own Privacy Policy and GDPR obligations

  • Stripe may process your data outside the EU using approved legal safeguards

4. Shipping & Delivery Data

To fulfill your orders, we share necessary personal data with local shipping providers, including:

  • Ekont

  • Speedy

Shared data may include:

  • Name

  • Phone number

  • Shipping address

This data is used solely for delivery purposes.

5. Purpose of Data Processing

We process personal data for the following purposes:

  • Order processing and fulfillment

  • Payment handling

  • Shipping and delivery

  • Customer support and communication

  • Legal and accounting obligations

6. Legal Basis for Processing

Under GDPR, we process your data based on:

  • Contractual necessity (order fulfillment)

  • Legal obligation (accounting, tax compliance)

  • Legitimate interest (website security, fraud prevention)

7. Data Retention

We retain personal data only as long as necessary:

  • Order and invoice data: as required by Bulgarian law

  • Customer communication: until resolved

  • Marketing data (if applicable): until consent is withdrawn

8. Your Rights Under GDPR

You have the right to:

  • Access your personal data

  • Request correction or deletion

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

To exercise these rights, contact us at: sparspray@gmail.com

9. Data Security

We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

10. Changes to This Policy

We may update this Privacy Policy when required. Updates will be posted on this page with a revised date.

11. Contact

If you have questions about this Privacy Policy, contact: sparspray@gmail.com