Privacy Policy - FunyDeco

PRIVACY POLICY

funydeco.com

Last updated: 26 March 2026

1. Introduction

This Privacy Policy explains how ФЪНДЕКО ООД (FunyDeco Ltd.), (“we”, “us”, “our”), collects, uses, and protects your personal data when you visit or make a purchase from https://funydeco.com/.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and all applicable EU and Bulgarian data protection laws.

2. Data Controller

ФЪНДЕКО ООД (FunyDeco Ltd.)

VAT Number: BG208716651

Address: 14 Trapezitsa Str., Tsentralen District, Floor 3, Apartment 2, Plovdiv 4000, Bulgaria

Email: office@funydeco.com

Responsible Manager: Ivo Ivanov Radev

3. Who This Website Is For

funydeco.com is open to all customers — individuals and businesses alike. Our website is intended for users aged 18 or older. We do not knowingly collect personal data from minors.

4. Personal Data We Collect

Depending on how you use the website, we may collect the following categories of personal data:

a) Account & Order Information

Full name
Email address
Phone number
Billing and shipping address
Company name and VAT or registration details (if provided)

b) Transaction Information

Order details and history
Invoices and payment status
Payment information (such as card details) is processed securely by Stripe. We do not store or have direct access to your full card details.

c) Technical & Usage Data

IP address
Browser and device information
Pages visited and on-site interactions

This data is collected via:

WordPress & WooCommerce
Google Site Kit (analytics)
Microsoft Clarity (behavioural analytics)
Complianz (cookie consent management)

5. Purpose of Data Processing

We process your personal data in order to:

Process and fulfil orders
Create and manage user accounts
Communicate with you regarding orders, inquiries, or support
Meet our legal, accounting, and tax obligations
Improve website performance and user experience
Prevent fraud, abuse, or illegal activities

6. Legal Basis for Processing

Under GDPR, we rely on the following legal bases:

Contractual necessity — to process and fulfil your orders
Legal obligation — to comply with accounting, tax, and regulatory requirements
Legitimate interests — to ensure site security, prevent fraud, and conduct analytics
Consent — for non-essential cookies and optional tracking tools

7. Cookies & Tracking

We use cookies to ensure proper website functionality and to understand how visitors use our site. Cookie consent is managed via Complianz, which allows you to:

Accept or reject non-essential cookies
Modify your cookie preferences at any time

Analytics tools currently in use:

Google Site Kit
Microsoft Clarity (behavioural analytics)

No marketing or advertising cookies are currently in use.

8. Data Sharing

We do not sell your personal data. Your data may be shared only with trusted third parties where necessary:

Hosting and infrastructure providers
Payment processing — Stripe Payments Europe, Ltd., for secure card transactions
Accounting and invoicing partners
Analytics providers (Google, Microsoft)
Legal or regulatory authorities, when required by law

All third-party processors are required to comply with GDPR or equivalent data protection standards. Stripe processes payment data in accordance with applicable laws and its own privacy policy.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Policy:

Order and invoice data: retained for the period required by Bulgarian accounting and tax law
Account data: retained until deletion is requested or the account is no longer active
Analytics data: anonymised or aggregated where possible

10. Your GDPR Rights

As a data subject, you have the following rights:

Access — to request a copy of the personal data we hold about you
Rectification — to correct any inaccurate or incomplete data
Erasure — to request deletion of your personal data (“right to be forgotten”)
Restriction — to limit how we process your data in certain circumstances
Objection — to object to processing based on legitimate interests
Portability — to receive your data in a structured, commonly used format
Withdrawal of consent — at any time, where processing is based on consent

To exercise any of these rights, please contact us at: office@funydeco.com

You also have the right to lodge a complaint with the Commission for Personal Data Protection (KZLD) in Bulgaria or any other competent supervisory authority within the EU.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or misuse. All card payments are processed through PCI-DSS compliant infrastructure provided by Stripe.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The latest version will always be available at https://funydeco.com/. We encourage you to review this page periodically.