This Privacy Policy governs the processing of personal data collected through www.dropandperch.com.
For the purposes of the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and applicable Bulgarian data protection legislation, the company responsible for operating the dropandperch brand and determining the purposes and means of personal data processing, where applicable, is:
Brand: dropandperch
Operating Company: DIGITAL TRADE OOD
Company Registration Number: 208097423-BG208097423
Registered Address: Apartment 12, 4th Floor, Entrance A, Building 12, Iztok Residential District, Petrich, Bulgaria, Postal Code: 2850
Jurisdiction: Bulgaria, European Union
Email: control@dropandperch.com
Website: www.dropandperch.com
We process personal data in connection with the operation of our online store and the sale of entryway homeware products. The applicable processing activities and delivery arrangements depend on the services used and the customer’s transaction.
2. Personal Information Collected
We collect and process personal data that is necessary for order processing, commercial transactions, customer support, website operation, and compliance with applicable legal obligations. Depending on how you interact with our website, this may include:
Identity & Contact Data: Full name, billing address, shipping address, email address, and telephone number where provided.
Transaction Data: Details regarding products purchased, including key trays, umbrella stands, shoehorns, entryway organizers, and wall-mounted key holders, as well as order values, payment status, and order timestamps.
Technical Data: IP address, browser type, device and connection information, and session data collected through website functions, server logs, and cookies or similar technologies where applicable.
3. Purpose and Legal Basis for Data Processing
We process personal data under the legal bases established by Regulation (EU) 2016/679, depending on the purpose and circumstances of the processing:
Performance of a Contract (Art. 6(1)(b) GDPR): To process and fulfill orders, manage transaction-related records, arrange delivery where applicable, and respond to customer service inquiries.
Legal Obligation (Art. 6(1)(c) GDPR): To comply with applicable Bulgarian and European tax, accounting, consumer protection, and other statutory requirements.
Legitimate Interests (Art. 6(1)(f) GDPR): Where appropriate, to maintain website functionality, protect online operations, prevent fraud, and safeguard the security of our business, provided that these interests do not override your rights and freedoms.
Consent (Art. 6(1)(a) GDPR): Where required, to process personal data for purposes such as certain analytics, marketing activities, or non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
4. Payment Processing with Third-Party Providers
Payments made through www.dropandperch.com are handled using the payment methods and service providers made available at checkout. Where Stripe is used, it acts as a third-party payment service provider and processes payment information in accordance with its applicable privacy terms and legal obligations.
When an order is placed, payment information may be transmitted securely to the relevant payment service provider for transaction authorization, fraud prevention, and payment processing.
DIGITAL TRADE OOD does not intentionally store full payment card numbers or CVV security codes on its own website servers. The precise handling of payment information depends on the payment method and service provider used.
The processing of payment data by a third-party provider is subject to that provider’s applicable privacy policy, security practices, and legal obligations.
5. Disclosure and Third-Party Transfer
We do not sell personal data to third parties. Personal data may be shared with relevant service providers where necessary for the operation of our online store, fulfillment of customer orders, or compliance with legal obligations. Depending on the services actually used, these recipients may include:
Fulfillment & Logistics Service Providers: Where necessary to prepare, dispatch, and deliver purchased items.
Payment Service Providers: Including Stripe where used, to authorize and process financial transactions.
IT Infrastructure & Hosting Providers: To host, maintain, and secure our website and related systems.
Professional Advisers and Public Authorities: Where disclosure is necessary to comply with applicable laws, respond to lawful requests, or establish, exercise, or defend legal claims.
Where personal data is transferred outside the European Economic Area (EEA), we will rely on an applicable legal transfer mechanism where required, such as an adequacy decision or appropriate safeguards under applicable data protection law.
6. Data Retention Period
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, including applicable legal, accounting, security, and dispute-resolution requirements. Actual retention periods depend on the category of data and the circumstances of processing.
Order & Transaction Records: Retained for the period required by applicable Bulgarian tax, accounting, and other statutory record-keeping requirements.
Customer Inquiry Data: Retained for as long as reasonably necessary to respond to inquiries, manage follow-up communications, and address potential disputes, subject to applicable legal requirements.
Technical Logs: Retained for a period appropriate to website operation, security monitoring, troubleshooting, and applicable legal obligations.
Where personal data is no longer necessary and no legal basis for continued retention applies, it will be deleted or anonymized, subject to technical and legal limitations.
7. Data Protection Rights
Under applicable European Union data protection regulations, individuals whose personal data is processed have specific rights, subject to the conditions and exceptions established by law:
Right of Access: You may request confirmation of whether your personal data is being processed and obtain access to that data.
Right to Rectification: You may request correction of inaccurate personal data or completion of incomplete records.
Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data where the legal requirements are met and no overriding retention obligation applies.
Right to Restrict Processing: You may request restriction of processing in circumstances specified by law.
Right to Data Portability: Where applicable, you may request your personal data in a structured, commonly used, machine-readable format.
Right to Object: Where processing is based on legitimate interests or another applicable legal basis covered by this right, you may object to the processing in accordance with the GDPR.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights or ask questions about the handling of your personal data, please contact us at control@dropandperch.com.
8. Data Security Measures
DIGITAL TRADE OOD, as the company operating the dropandperch brand, takes appropriate organizational and technical measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or other unlawful processing. The measures applied depend on the nature of the information and the risks associated with processing.
Although reasonable safeguards are implemented to protect data integrity and confidentiality, no internet transmission or electronic storage method can be guaranteed to be completely secure.
9. Contact & Regulatory Complaints
For inquiries regarding this Privacy Policy or our personal data processing practices, please contact us using the details below:
Website: www.dropandperch.com
Brand: dropandperch
Operating Company: DIGITAL TRADE OOD
Company Registration Number: 208097423-BG208097423
Registered Address: Apartment 12, 4th Floor, Entrance A, Building 12, Iztok Residential District, Petrich, Bulgaria, Postal Code: 2850
Email: control@dropandperch.com
Telephone: +359 898 797 111
If you believe that your personal data has been processed in a manner inconsistent with applicable data protection laws, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or another competent supervisory authority, including the authority in your habitual residence, place of work, or place of the alleged infringement, where applicable.
This website uses cookies to improve your experience.
By using this website you agree to our Privacy Policy.
