Privacy Policy

Data controller

The controller of personal data collected via nidobaby.net is EngiBox EOOD, UIC: 205865615, registered office: 1336 Sofia, Lyulin district, Lyulin residential complex, bl. 811, entr. A, fl. 6, apt. 15, Bulgaria, email: contact@nidobaby.net.

What data we collect

• order data: names, email, phone, delivery address, order history;
• email address for newsletter subscription;
• technical data required for site operation (cookies, language preferences).

Purposes and legal bases

• Order fulfilment — performance of a contract;
• Invoicing and accounting — legal obligation;
• Newsletter — your consent, which you may withdraw at any time via the unsubscribe link in every email;
• Service improvement — legitimate interest.

Who we share data with

Data is shared only as necessary to fulfil orders: with the Shopify platform (store hosting), courier companies (Econt, Speedy), suppliers involved in order fulfilment, and payment processors (PayPal). We do not sell personal data to third parties.

Retention periods

Order and invoice data is stored for the periods required by accounting and tax legislation (up to 10 years). Newsletter email addresses are stored until you unsubscribe.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent. Requests can be sent to contact@nidobaby.net. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection — cpdp.bg.

Cookies

The site uses cookies necessary for its operation — for the cart, user session and language preferences.

Policy changes

This policy may be updated. The current version is the one published on this page.