Privacy & cookies policy
This policy explains what personal data we collect, why, how long we keep it and what your rights are. We only process the data we need to answer your enquiry and fulfil your order.
1. Data controller
- Seller
- D'STUDIO (company registration pending)
- Company ID
- registration pending
- VAT
- registration pending
- Address
- Work & Share Coworking Space, Sofia, Bulgaria
- contact@dstudio-bg.com
- Phone
- +359 899 866 187
For any question about your personal data, write to contact@dstudio-bg.com.
2. What data we collect and why
| When | Data | Purpose | Legal basis (GDPR) |
|---|---|---|---|
| Contact form, email, phone | name, email, phone, message | to answer your enquiry | Art. 6(1)(b) — steps before a contract; Art. 6(1)(f) — legitimate interest in replying |
| Project questionnaire | name, contact details, project information (property, size, style, budget, timing) | to prepare an interior design offer | Art. 6(1)(b) |
| Shop order | name, email, phone, delivery and billing address, products ordered, payment status (no card details) | to fulfil, deliver and account for the order; complaints | Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation (accounting, tax) |
| Visiting the website | IP address, browser, page visited, time (server logs) | security and abuse prevention | Art. 6(1)(f) — legitimate interest |
We do not use your data for advertising, do not profile you and make no automated decisions. We never sell personal data.
3. Who receives the data
- Shopify (Shopify International Limited, Ireland) — the platform for the cart, checkout and orders, together with its payment providers. Shopify may process data outside the EU (for example in Canada, which has a European Commission adequacy decision) with appropriate safeguards.
- Hostinger (Hostinger International Ltd., Cyprus) — hosting of the website, server and email.
- Couriers and carriers — name, phone and address, to deliver your order.
- Our accountant — data on sales documents.
- Public authorities — only where the law requires it.
4. How long we keep data
- Enquiries and questionnaires that do not lead to an order — as long as needed to answer and follow up on them, after which we delete them.
- Orders — up to 5 years after delivery (for complaints and possible disputes); sales documents — 10 years, as required by the Bulgarian Accountancy Act.
- Server logs — 14 days.
5. Your rights
You have the right to access your data, to have it corrected or erased (“right to be forgotten”), to restrict processing, to data portability, and to object to processing based on legitimate interest. Write to us at contact@dstudio-bg.com — we reply within one month. You also have the right to lodge a complaint with the Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, cpdp.bg).
6. Cookies and browser storage
We do not use advertising, analytics or tracking cookies, so we do not ask for your consent. The website only stores what is strictly necessary for a service you have requested:
| Name | Type | Purpose | Duration |
|---|---|---|---|
dstudio_cart_id | local storage (localStorage) | keeps your cart after you add a product | until you order or empty the cart |
| Shopify | cookies on the checkout pages | cart, payment, security; Shopify may also use analytics cookies — Shopify asks for your consent for those | see Shopify's cookie policy |
If we ever add statistics or advertising tools that require consent, we will ask for your consent before they are switched on.
7. Security
The website runs only over a secure connection (HTTPS). Access to data in our admin panel is limited to authorised people and protected with two-factor authentication.
8. Changes
We may update this policy; the new version is published on this page with its effective date.