PRIVACY POLICY

Last updated: 18/01/2026

1. General Provisions

This Privacy Policy describes how BALAHON (“we”, “our”, “us”) collects, uses, and protects personal data of users when visiting the website and placing orders.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and all applicable Bulgarian and European legislation.

Data Controller:
BALAHON
Country of registration: Bulgaria
Privacy contact email: support@balahon.co

2. Personal Data We Collect

Depending on how you interact with the website, we may collect the following categories of personal data.

2.1. Data Provided by the User

      • first and last name
      • email address
      • phone number
      • shipping and billing address
      • order information
      • information provided when contacting customer support

2.2. Data Collected Automatically

When visiting the website, certain technical information may be collected automatically, including:

      • IP address
      • browser type and version
      • device information
      • pages visited and duration of visits
      • technical cookies and similar technologies

Such data is used solely to ensure proper website functionality and to improve user experience.

3. Purposes of Personal Data Processing

Personal data is processed only where lawful grounds exist and exclusively for the following purposes:

      • processing and fulfilling orders
      • arranging delivery
      • communicating with users regarding orders or inquiries
      • providing customer support
      • complying with legal, accounting, and tax obligations
      • improving website functionality and services
      • sending informational communications and newsletters — only with prior, voluntary, informed consent and never as a condition for making a purchase

4. Legal Basis for Processing

Personal data is processed on one or more of the following legal grounds:

      • performance of a contract
      • compliance with legal obligations
      • legitimate interest
      • user consent (where required)

Users may withdraw their consent at any time.

5. Payment Transactions

Payments are processed through independent third-party payment service providers (e.g., Stripe, PayPal, Viva Wallet, or other certified payment services), which are solely responsible for processing payment data in accordance with applicable security standards and legislation.

We do not receive, store, or have access to users’ full payment details, including bank card numbers.

6. Delivery

To fulfill deliveries, we share the minimum necessary personal data (name, address, phone number) with delivery service providers, including:

      • Geniki Taxidromiki — for local deliveries
      • UPS — for international deliveries

Data is shared exclusively for delivery purposes and is not used for marketing or unrelated activities.

7. Newsletters and Communications

We may offer subscriptions to informational emails or newsletters.

      • Subscription is voluntary and based on explicit user consent.
      • Users may unsubscribe at any time using the link in each email.
      • Where applicable, a double opt‑in procedure is used.

If a user is not subscribed, they will receive only service-related communications connected to orders or inquiries.

8. Cookies and Website Technologies

The website uses technical and functional cookies necessary for its proper operation. These:

      • enable core functionalities (secure access, navigation, checkout)
      • are not used for marketing
      • cannot be disabled as they are essential

We may also use limited analytical tools to understand aggregate user behavior. Data collected this way is anonymized and used only to improve website performance.

We do not use cookies to create advertising profiles or perform hidden tracking.

Users may manage cookies through their browser settings. Note that disabling required cookies may affect functionality.

Where legally required, a cookie banner or notice is displayed.

9. Third-Party Services

To ensure stable website operation and to fulfill obligations to users, we may engage trusted third-party service providers who process personal data strictly on our behalf and only for purposes listed in this Privacy Policy.

These providers are not permitted to use personal data for their own purposes and must follow applicable data protection laws.

10. Data Retention Periods

Personal data is retained only for as long as necessary for the respective purposes:

      • order and accounting data — retained per legal requirements
      • user correspondence — retained for customer support
      • newsletter subscription data — retained until the user unsubscribes

After the retention period expires, data is securely deleted or anonymized.

11. User Rights

Users have the right to:

      • access their personal data
      • request correction of inaccurate data
      • request deletion of personal data
      • restrict or object to processing
      • withdraw consent
      • request data portability

We respect users’ control over their personal data and handle all requests promptly and in good faith.

Requests may be sent to: support@balahon.co

12. Data Security

We implement appropriate technical and organizational measures to protect personal data from loss, unauthorized access, alteration, or disclosure.

However, no method of internet transmission can guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy in response to changes in legislation, technology, or internal processes.

The current version is always published on the website, together with the date of the latest update.

 

14. Contact Information

For questions related to personal data processing or this Privacy Policy, please contact:

Email: support@balahon.co