Privacy Policy
Last updated: 15 May 2026
Solnichki collects and processes only the personal data needed to fulfill your orders and maintain your account. This policy explains exactly what we collect, why we collect it, and what rights you have under the GDPR.
1. Who is the data controller
Solnichki ("we", "us") is a small family-run business registered in Bulgaria. The data controller is Solnichki. Full company details (legal name, registration number, registered address) will be added here before the public launch. For any privacy questions, write to solnichki.bg@gmail.com.
2. What data we collect
When you place an order, we collect: your name, shipping address, email, phone number, and photos plus descriptions of the people or characters to be sculpted. When you pay by card, the payment runs directly through Stripe. We never see or store your card details. When you create an account, we use magic-link sign-in and store only your email address.
3. Why we process this data
Name, address, phone and email are processed on the basis of performing the order contract (Article 6(1)(b) GDPR). Uploaded photos are processed so we can sculpt the figurine and are kept only until the order is completed. Your email is used for status notifications (confirmation, in production, shipped, delivered). Sales records are kept for accounting purposes on the basis of a legal obligation (Article 6(1)(c) GDPR).
4. Who has access to your data
We share strictly limited data with the service providers that help us fulfill orders: Econt (courier: name, address, phone for delivery); Stripe (payment processor: payment data); Resend (the email service that sends status notifications); Uploadthing (secure storage for your uploaded photos); Neon (database hosting); Vercel (website hosting); Sanity (CMS for the catalog). Each of these providers is contractually obliged to process the data only for this purpose and to protect it. We do not sell or share data with third parties for marketing.
5. How long we keep your data
Uploaded photos are automatically deleted 60 days after the order is delivered. Email and address from your account are kept while the account is active. If you delete it, we delete that data too. Financial records (invoices, payments) are kept for 10 years in line with Bulgarian accounting law.
6. Cookies and analytics
The site runs almost cookie-free. We use one technical cookie for your cart contents and one for the sign-in session. For analytics we use Plausible, a tool that does NOT use cookies and does not track individual users. We do not use Google Analytics, Facebook Pixel or similar tracking tools.
7. Your rights
Under the GDPR you have the right to: (a) request access to the data we hold about you; (b) request correction of inaccurate data; (c) request erasure ("right to be forgotten"), to the extent this doesn't conflict with legal obligations; (d) restrict processing; (e) data portability; (f) object to processing. To exercise any of these rights, write to solnichki.bg@gmail.com. We respond within 30 days.
8. Changes to this policy
We may update this policy if the way we process data changes. For material changes, we will notify you by email if you have an active account. The current version is always available on this page.
9. Contact and complaints
Questions? Write to solnichki.bg@gmail.com. If you believe we have breached your rights, you have the right to file a complaint with the Bulgarian Commission for Personal Data Protection (KZLD): kzld.bg, 2 Prof. Tsvetan Lazarov St., 1592 Sofia.