Privacy policy

PRIVACY POLICY

Last updated: 17.02.2026

This Privacy Policy describes how 24 Delux EU Svyat Ltd. (“24 DELUXE”, “we”, “us”, “our”) collects, uses, stores and protects personal data when you visit www.24deluxe.eu (the “Website”), create an account, place an order, or otherwise interact with our services.

This Policy complies with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)

  • Applicable EU data protection legislation

  • Bulgarian Personal Data Protection Act

1. DATA CONTROLLER

The Data Controller responsible for processing personal data is:

24 Delux EU Svyat Ltd.
UIC: 202719498
87 Ralevitsa Street, Entrance A
Sofia, Bulgaria
Email: hello@24deluxe.eu
Phone: +359 898 88 19 11

2. PERSONAL DATA WE COLLECT

2.1 Data you provide directly

We may collect:

  • First and last name

  • Delivery and billing address

  • Phone number

  • Email address

  • Order details

  • Customer account credentials (username and password)

  • Date of birth (if voluntarily provided)

  • Messages sent through contact forms or social media

When you pay by card, payment details are processed by a licensed payment service provider. We do not store or have access to full card details.

2.2 Data collected automatically

When you use the Website, we may collect:

  • IP address

  • Device type and browser information

  • Browsing behavior

  • Time spent on pages

  • Cookie identifiers

2.3 Data from third parties

We may receive data from:

  • Payment service providers

  • Courier and logistics companies

  • Hosting providers

  • Email and SMS marketing platform Omnisend

  • Analytics and advertising platforms including Google Analytics 4, Meta, Google Ads and TikTok

3. LEGAL BASIS FOR PROCESSING

We process personal data on the following legal grounds:

  • Performance of a contract

  • Compliance with legal obligations

  • Consent

  • Legitimate interest

4. PURPOSES OF PROCESSING

We use personal data to:

  • Process and deliver orders

  • Manage customer accounts

  • Process payments

  • Provide customer support

  • Send email and SMS marketing communications where consent has been given

  • Send personalized campaigns, including birthday offers when date of birth is provided

  • Improve our services and user experience

  • Prevent fraud and misuse

5. EMAIL AND SMS MARKETING

Where you have provided consent, we may send:

  • Newsletters

  • Promotional offers

  • Personalized recommendations

  • SMS marketing messages

Marketing communications are managed through Omnisend, which processes personal data on our behalf as a data processor.

You may withdraw your consent at any time by clicking the unsubscribe link in emails or using the opt-out instructions in SMS messages.

6. PROFILING, ANALYTICS AND REMARKETING

We use analytics and advertising technologies including:

  • Google Analytics 4

  • Meta Pixel

  • Google Ads

  • TikTok Pixel

These tools collect information about user interactions, online identifiers, device data and browsing behavior in order to:

  • Measure website performance

  • Analyze traffic

  • Improve user experience

  • Deliver personalized advertising

Such technologies are activated only after you provide consent through the cookie banner, except for strictly necessary cookies required for the functioning of the Website.

7. COOKIES

The Website uses:

  • Strictly necessary cookies

  • Analytics cookies

  • Marketing cookies

You can manage your cookie preferences via the cookie consent banner or your browser settings.

Further details are available in our separate Cookie Policy.

8. SHARING OF PERSONAL DATA

We share personal data only when necessary for:

  • Order delivery

  • Payment processing

  • Email and SMS marketing

  • Website hosting and technical support

  • Compliance with legal obligations

We do not sell personal data.

9. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside the European Economic Area.

In such cases, appropriate safeguards are implemented in accordance with GDPR, including standard contractual clauses or other approved legal mechanisms.

10. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this Policy:

  • Order-related data – up to 10 years

  • Marketing data – until consent is withdrawn

  • Customer account data – until the account is deleted

11. YOUR RIGHTS

Under GDPR, you have the right to:

  • Access your personal data

  • Request correction

  • Request erasure

  • Restrict processing

  • Withdraw consent

  • Receive a copy of your data

  • Lodge a complaint with a supervisory authority

Supervisory Authority in Bulgaria:
Commission for Personal Data Protection
www.cpdp.bg

12. DATA SECURITY

We implement appropriate technical and organizational measures to protect personal data.

However, no method of transmission over the Internet is completely secure.

13. CHILDREN’S DATA

The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

14. CONTACT

If you have questions or wish to exercise your rights, please contact:

hello@24deluxe.eu
87 Ralevitsa Street, Entrance A
Sofia, Bulgaria