- Introduction
Welcome to Baycushionnest (“we,” “our,” or “us”). We respect your privacy and are committed to protecting your personal data. This privacy policy informs you as to how we look after your personal data when you visit our website www.baycushionnest.com and tells you about your privacy rights and how the law protects you.
This policy complies with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) and the applicable laws of the Republic of Bulgaria.
- Data Controller
The data controller responsible for your personal data is:
Brand: Baycushionnest
Website: www.baycushionnest.com
Registered Address: ul. Tsar Petar 4, Ground Floor, Shumen 9700, Bulgaria
Contact Email: cushion@baycushionnest.com
Contact Phone: +359 889632164
- The Data We Collect About You
Personal data, or personal information, means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
Identity Data: Includes first name, last name, username, or similar identifier.
Contact Data: Includes billing address, delivery address, email address, and telephone numbers.
Financial Data: Includes payment card details. Please note that all online payments are processed securely by our third-party payment processor, Stripe. We do not store full credit or debit card details on our servers.
Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.
Technical Data: Includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
Profile Data: Includes your purchases or orders made by you, your preferences, feedback, and survey responses.
Usage Data: Includes information about how you use our website and products.
- How We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
Performance of a Contract: Where we need to perform the contract we are about to enter into or have entered into with you (e.g., processing and delivering your orders).
Legal Obligation: Where we need to comply with a legal obligation under Bulgarian or European Union law (e.g., tax, accounting, and consumer protection regulations).
Legitimate Interests: Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
- International Payments and Stripe Integration
To process your payments securely, we utilize Stripe as our primary payment processing service provider. When you make a purchase on www.baycushionnest.com, your payment details are transmitted directly to Stripe.
Stripe processes your personal and financial data in accordance with its own privacy policies and international compliance standards.
We ensure that any data transfer associated with payment processing complies with strict European data protection standards, including the use of Standard Contractual Clauses (SCCs) where applicable.
- Data Retention
We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Tax and Accounting Records: In accordance with the Accountancy Act of the Republic of Bulgaria and applicable EU tax legislation, financial transactions, invoices, and associated billing data are retained for a mandatory period of 10 years from the end of the calendar year in which the transaction occurred.
Customer Account Data: If you create an account on our website, your profile data is retained until you request deletion or close your account, subject to any statutory retention requirements.
Order and Shipping Data: Non-financial order fulfillment records are retained for a period of 5 years to address potential warranty claims, consumer rights inquiries, or legal disputes under applicable European consumer laws.
Technical and Browsing Data: Log files and analytics data are typically retained for a period not exceeding 12 months, unless a longer retention period is required for security investigations or legal compliance.
- Your Legal Rights
Under the GDPR and Bulgarian data protection laws, you have rights in relation to your personal data, including the right to:
Request Access: Access your personal data and obtain a copy of the personal data we hold about you.
Request Correction: Rectify inaccurate or incomplete personal data we hold about you.
Request Erasure: Ask us to delete or remove personal data where there is no good reason for us continuing to process it.
Object to Processing: Object to processing of your personal data where we are relying on a legitimate interest.
Request Restriction of Processing: Suspend the processing of your personal data in certain scenarios.
Request Transfer: Request the transfer of your personal data to you or to a third party in a structured, commonly used format.
Withdraw Consent: Withdraw consent at any time where we are relying on consent to process your personal data.
To exercise any of these rights, please contact us at cushion@baycushionnest.com.
- Data Security
We have put in place appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. Access to your personal data is restricted to authorized personnel and trusted service providers who have a business need to know. - Supervisory Authority
If you believe that our processing of your personal data infringes applicable data protection laws, you have the right to lodge a complaint with a supervisory authority. In the Republic of Bulgaria, the competent authority is:
Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg
- Changes to the Privacy Policy
We keep our privacy policy under regular review. Any updates or changes will be posted directly on this page with an updated revision date. We encourage you to review this policy periodically to stay informed about how we protect your information.