Privacy Policy

Privacy Policy

1. Introduction

This Privacy Policy describes how Outlina (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit or make a purchase from our website.

We process personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)

  • The Bulgarian Personal Data Protection Act (PDPA)

  • Applicable European Union and Bulgarian legislation

By using this website, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Personal Information We Collect

When you visit the site, we may collect certain information about your device, your interaction with the site, and information necessary to process your orders.

2.1 Device Information

  • Browser type and version

  • IP address

  • Time zone

  • Cookies and usage data

2.2 Order Information

When you make or attempt to make a purchase, we collect:

  • Name and surname

  • Billing and shipping address

  • Email address

  • Phone number

  • Payment information (processed securely by third-party providers)

2.3 Customer Support

Information you provide when contacting us, including messages, emails, or form submissions.

3. Purpose and Legal Basis for Processing

We process personal data for the following purposes and legal bases under Article 6 of the GDPR:

Purpose Legal Basis
Processing and fulfilling orders Performance of a contract
Communication with customers Performance of a contract / Legitimate interest
Payments and fraud prevention Legal obligation / Legitimate interest
Website analytics and security Legitimate interest
Marketing communications Consent

4. Sharing Personal Information

We share your personal information only with trusted third parties necessary to operate our Shopify store, including:

  • Shopify Inc. – for hosting and e-commerce functionality

  • Payment processors (e.g. Shopify Payments, PayPal, Stripe)

  • Courier and delivery services

  • Analytics and marketing services (e.g. Google Analytics)

All third parties process personal data in compliance with GDPR.

5. International Data Transfers

Some service providers may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards are applied, including Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by Bulgarian or EU law.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right to access your personal data

  • Right to rectification

  • Right to erasure (“right to be forgotten”)

  • Right to restrict processing

  • Right to data portability

  • Right to object to processing

  • Right to withdraw consent at any time

To exercise your rights, please contact us through the website.

8. Cookies

Our website uses cookies to ensure proper functionality, improve user experience, and analyze website traffic. You can manage or disable cookies through your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

10. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated revision date.

11. Contact

For any questions regarding this Privacy Policy or the processing of personal data, please contact us through the Outlina website.