Privacy policy

Last updated: 5 October 2026

Who processes your data

The controller is [company details to be added]. Questions: [contact email to be added].

What we collect

From the demo form: company name, contact person, email, phone, the number of products, what you use today and what you sell (the last two optional), as well as the page language and the moment you gave consent. If you came from the shop builder, also the look you chose (design, colours, name).

From the marketplace: which product was opened in the supplier's shop, and when. No IP address, no cookie and no visitor profile.

From a free account: email, password (only as a hash), when you confirmed the email and which version of the terms and of this policy you accepted. At sign-up we keep a keyed hash of your internet address — not the address itself — to see accounts created from one place; nothing is blocked automatically.

From the Companies directory: the company details you entered. For a sole trader (ЕТ) the company name and phone are personal data: we show them only on your own application, with no address, and the phone and email only after a click. A report of an inaccuracy may contain the sender's email (optional).

What we use it for

Form data only to contact you about your request and, if you become a customer, for the contract and invoicing. The legal basis is your consent. Marketplace clicks are counted to show each supplier how many buyers it sent them. We don't sell data or share it for advertising.

How long we keep it

Demo requests: 24 months, then deleted. Marketplace clicks: 25 months. Contract data: as long as accounting law requires.

Free account: until you delete it; an unconfirmed account 30 days. Address hash: 90 days. Rejected and unfinished company applications: 90 days. Reports: 12 months.

Where

The data is stored on servers in the European Union. We do not write it to logs or use it for visitor analytics.

Your rights

Access, correction, erasure, restriction and objection. You can withdraw consent at any time; this does not affect processing already done. You can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg).

Cookies

Only necessary ones: protection of the forms against forged requests, a session that remembers the form was sent, and the supplier panel's session. No tracking cookies.