Privacy Policy

Mandatory Information on the Rights of Individuals Regarding Personal Data Protection (Privacy Notice)

Company Information Processing Your Data

  • Company Name: "Zehira Cosmetics" Ltd.
  • Company Identification Number (EIK/BULSTAT): 206006325
  • Registered Address: Burgas, "Democracy" Street No. 1
  • Phone: +359 878 313 403
  • Email: info@zehira.com
  • Website: www.zehira.com

Supervisory Authority for Personal Data Protection

  • Name: Commission for Personal Data Protection
  • Headquarters and Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
  • Correspondence Address: Sofia 1592, Prof. Tsvetan Lazarov Blvd. No. 2
  • Phone: +359 2 915 3 518
  • Website: www.cpdp.bg

Legal Grounds for Collecting, Processing, and Storing Your Personal Data

Article 1. The data controller collects and processes your personal data in connection with the use of the online store www.zehira.com, for receiving and processing orders, and based on:

  • Your explicit consent as a customer
  • Fulfillment of the controller's contractual obligations towards you
  • Compliance with a legal obligation applicable to the controller
  • The legitimate interests of the controller or a third party

Purposes and Principles for Collecting, Processing, and Storing Your Personal Data

Article 2. (1) We collect and process personal data provided by you in relation to the use of our online store www.zehira.com and the processing of orders, including for the following purposes:

  • Creating an account and providing full functionality of the online store
  • Identifying the party to the contract
  • Accounting purposes
  • Statistical analysis
  • Ensuring the transportation of shipments (we require your name, contact phone number, and delivery address to complete deliveries via Econt Express Ltd.; your data may be shared with Econt Express Ltd. for postal service execution)
  • Protecting information security
  • Ensuring the execution of the service contract
  • Sending an informational newsletter upon your request

(2) We adhere to the following principles when processing your personal data:

  • Lawfulness, fairness, and transparency
  • Purpose limitation
  • Data minimization
  • Accuracy and timeliness
  • Storage limitation based on the purpose
  • Integrity, confidentiality, and ensuring an adequate level of data security

(3) In processing and storing personal data, the controller may process and store data to protect its legitimate interests, including:

  • Compliance with obligations to the National Revenue Agency, the Ministry of Interior, and other state and municipal authorities

What Information Do We Collect and Process When You Use Our Services?

Forms You Fill and Submit

Depending on the purpose of the form, we may collect various personal data, usually including:

  • Full Name
  • Password
  • Mobile Phone
  • Email Address
  • City
  • Physical Delivery Address
  • Correspondence Details
  • Bank Account Number (if a refund is necessary)

Types of Personal Data Our Company Collects, Processes, and Stores

Article 3. The company performs the following operations with the personal data provided by you for the following purposes:

1. User Registration in the Online Store and Execution of Distance Sales Contracts

  • Purpose: Creating an account for purchasing goods and providing contact details for delivery. Registration is optional and can also be done through Google+ or Facebook login.
  • Impact Assessment Conclusion: The operation is permissible and ensures the protection of data subjects' rights per GDPR requirements.

2. Entering and Executing a Business Transaction with a Customer or Partner

  • Purpose: Contract conclusion, execution, and administration with a trading partner or customer.
  • Given the limited scope of collected data, an impact assessment is not required.

3. Sending an Informational Newsletter (Newsletter Subscription)

  • Purpose: Administering the newsletter delivery process to customers who have explicitly requested to receive updates.
  • Given the limited scope of collected data, an impact assessment is not required.

4. Exercising the Right of Withdrawal or Filing a Complaint

  • Purpose: Managing the return, refund, and complaints process.
  • Given the limited scope of collected data, an impact assessment is not required.

Data Retention Period

Article 5. (1) The controller retains your personal data only for the duration of your online store account existence or until you explicitly request its deletion.

(2) Personal data related to online orders is stored for 5 years for legal protection purposes. Accounting documents are stored for the legally required period.

(3) The controller will inform you if data retention needs to be extended due to legal obligations or legitimate interests.

Your Rights Regarding the Collection, Processing, and Storage of Your Personal Data

Right to Withdraw Consent

Article 8. You can withdraw your consent for processing at any time via your profile settings or by submitting a written request.

Right to Access

Article 9. You have the right to request confirmation of whether your personal data is being processed and to access this data.

Right to Rectification

Article 10. You can correct or update inaccurate or incomplete personal data via your profile or by contacting the controller.

Right to Erasure ("Right to be Forgotten")

Article 11. You have the right to request deletion of all or part of your personal data, and the controller is obligated to erase it if:

  • It is no longer needed for the purposes for which it was collected
  • You withdraw consent and there is no legal basis for further processing
  • The data was unlawfully processed
  • It must be deleted to comply with a legal obligation

Sharing Your Data with Third Parties

Article 17. The controller may share your data with third-party data processors for processing purposes under GDPR compliance.

Article 18. No transfer of your data outside the EU is performed.

Security of Your Personal Data

We apply appropriate technical and organizational measures to protect your personal data. Data is stored on secure servers using encryption algorithms and backup storage.

While we take all precautions to protect your information, please note that internet data transmission is not entirely secure, and we cannot be responsible for vulnerabilities beyond our control.

Cookies and Tracking Technologies

We use cookies to enhance website functionality, remember your preferences, and serve relevant ads. You can disable cookies in your browser settings, but some features may not function properly.

We use third-party tools such as:

  • Facebook Pixel – Manages advertising preferences
  • Google Analytics – Tracks website usage for performance analysis

For more details, visit www.zehira.com/cookies-policy.

For questions or requests regarding your personal data, please contact us at info@zehira.com.