Skip to content
Заредено

Privacy policy

Last updated: 22.08.2026 · Draft: subject to legal review before launch. The Bulgarian text is binding.

This policy describes how Zaredeno processes its customers' personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

What we collect

  • Contact details: first and last name, email, phone.
  • Delivery address: street, city, postcode.
  • Subscription data: chosen packages, frequency, order history.
  • Consents: to the terms of service and to marketing messages, with date and time.
  • Server logs: IP address and time of requests, kept briefly, only for security and diagnostics. Statistics are first-party and only with your consent (see the cookie policy).

Payment data

We do not store card data. Payments are processed by Stripe Payments Europe Ltd. The card is entered directly in Stripe's secure form and kept there for the automatic monthly payments you explicitly consent to at checkout. We keep only the card type, its last four digits and expiry: so you can see them in “My subscription”.

Who else processes data

  • Stripe Payments Europe Ltd.: payment processing and card storage (own privacy policy).
  • Email provider: sending the service letters (confirmations, notices before payment and delivery).
  • Hosting in the European Union: all data is stored on servers in the EU.

What we use the data for

  • To perform the contract: handling the subscription and deliveries.
  • For billing and accounting.
  • For service emails: confirmation of the subscription and of every order, a notice 3 days before every payment, a reminder 3 working days before delivery and a notice on a failed payment.
  • For marketing messages: only with explicit consent, revocable at any time.

Retention

Order and payment data is kept for the period required by accounting and tax law. Marketing data is deleted when consent is withdrawn.

Your rights

  • Access to your personal data and a copy of it.
  • Correction of inaccurate data.
  • Erasure (“the right to be forgotten”), where there is no legal obligation to keep the data. Requests go to the email below and are fulfilled within 30 days: or instantly from your profile.
  • Restriction of processing and objection to it.
  • Data portability.
  • A complaint to the Commission for Personal Data Protection.

Contact

For questions about personal data write to zdravei@zaredeno.bg.