Privacy
1. Who processes your data
The controller of your personal data is NetPartners Ltd (НетПартнерс ООД), company number 206803456, registered at Berkovitsa, Zaryanitsa complex, bl. 13, ap. 11, Bulgaria ("we", "us").
This policy covers the online shop E-cvete (e-cvete.com).
We are not required to appoint a Data Protection Officer. Questions about your personal data are handled directly by NetPartners Ltd — write to [email protected].
2. What we collect
When you place an order
- Your first name, last name, email address and phone number
- The recipient's name, phone number and delivery address
- The card message, if you write one
- Your chosen delivery date and time slot
- The value and contents of the order
When you create an account
- Name, email address, phone number and saved delivery addresses
- Your order history
When you pay
Your card details are entered directly with the payment provider and never reach our servers. We store only the amount, the payment method and a reference to the transaction.
Automatically, when you visit
- IP address and the country derived from it
- Device type, browser and operating system
- Pages viewed and actions taken (only with your consent — see section 7)
When you contact us
- The content of the correspondence, including chat messages
When you leave a review
- Your rating, the review text and the name you signed it with
3. Why we use it, and on what basis
- Fulfilling your order and delivery
- Performance of a contract
- Running your account
- Performance of a contract
- Processing payments and refunds
- Performance of a contract
- Issuing and keeping accounting records
- Legal obligation
- Order status notifications
- Performance of a contract
- Fraud prevention and site security
- Legitimate interest
- Understanding how the site is used
- Your consent
- Advertising and measuring our ads
- Your consent
- Publishing reviews
- Your consent
You can withdraw consent at any time (section 7). Doing so does not affect the lawfulness of processing carried out before you withdrew it.
4. Who we share it with
We do not sell your personal data. We share it only with:
- Florists and couriers — the recipient's name, phone, address, the delivery date and slot, and the card message. Delivery is impossible without these.
- Payment providers — Stripe and PayPal for card payments, and our bank for payments made by bank transfer.
- Google — for traffic analysis (Google Analytics) and ad measurement (Google Ads). If you consent to advertising, hashed values of your email, phone and name are also sent to Google so a conversion can be attributed correctly. Google does not receive these in readable form.
- Tawk.to — the content of conversations in the site's chat.
- Sentry — technical details when a fault occurs on the site, which may include your IP address and the address of the page where it happened.
- Hetzner Online GmbH (Germany) — hosting of the site and its databases.
- Cloudflare — protecting and accelerating the site; every request to the site passes through this service, including your IP address.
- Our other shops — E-cvete is operated alongside the other online shops run by NetPartners Ltd. Orders, customer accounts and reviews are held in a shared administrative system so that orders and customer service are handled in one place. NetPartners Ltd is the sole controller for all four shops.
- Competent authorities — where we are required by law.
5. Transfers outside the EU
Some of the providers above (Google, Stripe, PayPal, Tawk.to, Sentry and Cloudflare) process data outside the European Economic Area, including in the United States.
Transfers are made on the basis of standard contractual clauses adopted by the European Commission. Some of these providers are additionally certified under the EU–US Data Privacy Framework.
The site is hosted with Hetzner in Germany, which is not a transfer outside the EU.
6. How long we keep it
- Orders and accounting records
- 5 years
- Account and saved addresses
- Until you delete your account
- Abandoned baskets
- 1 year
- Reviews
- Until you withdraw consent
- Email correspondence
- 1 year
- Chat conversations
- Up to 1 month
- Site analytics data
- 2 months
- Your recorded cookie choice
- 180 days
7. Cookies and your choice
On your first visit we ask which cookies you accept. There are three groups:
- Necessary — Needed so you can sign in to your account, add products to your cart and place an order. These cannot be turned off.
- Analytics — Help us see which pages are used and where checkout gets stuck, so we can fix it.
- Advertising — Allow measuring our ads and showing more relevant ones off-site.
Until you make a choice, we set no analytics or advertising cookies.
To change your choice, open "Preferences". Your choice is kept for 180 days, after which we ask again.
8. Your rights
You have the right to:
- access the data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict how we process it;
- receive your data in a machine-readable format (portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time.
You can edit some of your data yourself in your account. For anything else, write to [email protected]; we respond within one month.
Note on erasure: a delivery address you delete from your account is hidden from you but retained as part of the record of orders already placed, to the extent we are required to keep accounting records.
If you believe your rights have been breached, you may complain to the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, Bulgaria, cpdp.bg.
9. Security
The connection to the site is encrypted. Access to data is limited to staff and partners who need it to fulfil orders. Your card details are not stored by us.
No system is completely secure. If we become aware of a breach affecting your data, we will notify you as required by law.
10. Age restrictions
The shop is not intended for anyone under 18 — our range includes alcoholic drinks, which may not be sold to minors. We do not knowingly collect personal data from anyone below that age.
11. Changes
When this policy changes we publish a new version with a new date at the top of the page. Where a change materially affects your consent, we will ask you again.