Privacy Policy
In force from 17 October 2026
This policy explains what personal data Sout Buddy EOOD processes through solnichki.com, why, who we share it with, and what rights you have under the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1. Controller
The controller of your personal data is Sout Buddy EOOD (Соут Бъди ЕООД), UIC 208847063, 16B Knyaz Alexander I St., 1000 Sofia, Bulgaria. Contact us at solnichki.bg@gmail.com or +359 878 531 050.
2. What we collect
When you order: name, email, phone, delivery address or chosen courier office, the name of the person the figurine is for, and the photos and descriptions you upload. When you pay by card, the card details are processed by Stripe; we never see or store them. If you write to us through the site's report form, we receive your message, the page address, browser version, IP address and technical details about the error. The site also records technical information about photo uploads (size, type, success or failure), without the photos themselves. We have no user accounts and require no registration. Unless you decline advertising cookies, Meta Pixel receives which pages and products you view, what you add to the cart, when you start an order and whether you complete it, together with your browser's identifiers in the _fbp and _fbc cookies. If you have not declined them, we also store your IP address and browser details with the order, so we can report the purchase to Meta (section 7).
3. Why and on what basis
We process order data to perform our contract with you: making, status notifications, delivery, warranty (Article 6(1)(b) GDPR). We keep accounting records under a legal obligation (Article 6(1)(c)). Protecting the site from abuse, rate limiting and technical error logs rest on our legitimate interest in keeping the site working and secure (Article 6(1)(f)). Using photos and figurines in marketing rests on your consent (Article 6(1)(a)), described in section 4. Meta's advertising cookies and reporting the purchase to Meta are on by default, and you can decline them at any time in the cookie banner (section 7).
4. Photos and figurines in our publications
By ordering you consent to us publishing photos and video of the finished shaker and, in a "photo and figurine" comparison, the photos you provided: on Solnichki's social media, on the site, in advertising and printed material. We do not publish names, addresses, phone numbers or other data that identifies you, and we do not use photos of children without a parent's explicit consent. You can withdraw consent at any time by emailing solnichki.bg@gmail.com; withdrawal applies going forward and does not affect the lawfulness of what was done before. If you do not want anything published, say so in the order note when you order.
5. Who has access to the data
We share only what is needed with the providers that help us fulfil the order: Econt (courier: name, phone, address or office); Stripe (card payments); Resend (email delivery); Uploadthing (storage of uploaded photos); Neon (database); Vercel (site hosting and cookieless visit statistics); Sanity (catalog content management). Each is bound by a data processing agreement and uses the data only for that purpose. Unless you decline advertising cookies, Meta Platforms Ireland Ltd. (Facebook and Instagram) also receives data, as described in section 7. For collecting and transmitting it through Meta Pixel, Meta is a joint controller with us; for any further processing Meta is solely responsible, under its own privacy policy (facebook.com/privacy/policy). Some of these providers are established in the United States; transfers take place under GDPR safeguards (standard contractual clauses or the EU-US Data Privacy Framework). We do not sell data. Apart from what section 7 describes for Meta, we do not give data to third parties for their own purposes. We disclose data to public authorities only where the law obliges us to.
6. How long we keep data
We keep order data and photos until the order is fulfilled and the statutory warranty has run (2 years from delivery), then delete or anonymise them. Photos uploaded without a completed order are deleted automatically 30 days after upload. Material published with your consent is kept while the consent stands. The IP address and Meta identifiers stored with an order are deleted as soon as we report the purchase to Meta or the order is cancelled. Accounting records are kept for 10 years under the Bulgarian Accountancy Act. If you want earlier deletion, write to us; we delete everything the law does not oblige us to keep.
7. Cookies, local storage and statistics
Some tools are technical and the site does not work without them: your cart and unfinished orders are kept in your browser (localStorage), one cookie stores your language choice, and another stores your answer to the cookie banner for 6 months. For visit statistics we use Vercel Web Analytics, which uses no cookies and does not track individual users. Advertising cookies are on by default until you decline them. This is Meta Pixel from Meta Platforms Ireland Ltd.: it shows us which ads on Facebook and Instagram lead to visits and orders, and lets us show our ads to people who may be interested in them. The Pixel records the pages you visit, the products you view, adding to the cart, starting an order and the completed purchase with its value. On the order tracking, photo upload and payment pages the Pixel records no visit and never receives their full address, because that address opens the order. Meta's cookies (_fbp and _fbc) are kept for up to 90 days. When you order without having declined them, we also report the purchase to Meta directly from our server: value, products, email and phone in hashed form (SHA-256), IP address and browser details. After you decline, none of this loads or is sent. You can decline at any time with "Decline" in the banner or from "Cookie settings" at the bottom of every page; we then delete Meta's cookies from your browser. We do not use Google Analytics.
8. Your rights
You have the right to request access to your data, rectification, erasure, restriction of processing and data portability, to object to processing based on legitimate interest, and to withdraw any consent you have given. Write to solnichki.bg@gmail.com; we reply within one month. If you believe we are infringing your rights, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection: kzld.bg, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia.
9. Changes
If we change the way we process data, we update this page and the date at the top. For a material change we notify customers with active orders by email.
10. Contact
Sout Buddy EOOD, UIC 208847063, 16B Knyaz Alexander I St., 1000 Sofia, Bulgaria. Email: solnichki.bg@gmail.com. Phone: +359 878 531 050.