red.bg

Privacy Policy

Consent Declaration for the Privacy Policy

The protection of personal data and safeguarding the personal and financial information of our clients is our priority. We process your information in accordance with applicable legislation, including Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act (PDPA), and the Electronic Commerce Act (ECA).

This policy aims to inform you how "RETAIL GROUP" Ltd. collects, processes, stores, and protects your personal data when using red.bg and the services associated with the platform.

Administrator

"RETAIL GROUP" Ltd.

  • Company ID: 208660583
  • Address: Sofia, Ring Road 251, Ring Tower, 3rd floor
  • Email: legal@red.bg

Scope

Who the policy applies to

The policy applies to website visitors, platform users, clients, merchants, partners, and individuals who communicate with us regarding the services of red.bg.

What personal data we collect

We collect and process personal data that is necessary to provide our services, including an e-commerce platform, marketing, and related functionalities.

  • names, email address, and phone number
  • shipping and billing address
  • customer or business account data
  • information about orders, payments, transactions, and their status
  • communication with us, including inquiries, messages, and support requests

Information about orders and transactions

When you make or try to make an order through a store that uses the platform, we may process information necessary for order fulfillment, support, accountability, and protection against abuse.

Order Processing

We use the data for confirmation, fulfillment, tracking, and servicing of orders.

Communication

We use contact information to respond to inquiries, support requests, and important service messages.

Service Improvement

We analyze aggregated and technical information to improve performance, security, and user experience.

Cookies

The platform uses cookies to function properly, maintain secure sessions, and enhance the experience. Some of the cookies are strictly necessary and cannot be disabled by the system.

XSRF-TOKEN

Used to protect against malicious requests.

redbg_session

Maintains an active and secure user session.

preferredLang / preferredLocale

Preserves the selected language settings.

We may also use additional analytical, functional, or marketing cookies, where applicable and permissible. You can manage cookies through your browser settings.

Legal grounds for processing

We process personal data only when we have a valid legal basis.

  • performance of a contract or taking steps prior to entering into a contract
  • fulfillment of a legal obligation
  • legitimate interest, for example security, prevention of abuse, and improving services
  • explicit consent, when such is required

Protection and storage

We apply appropriate technical and organizational measures to protect personal data, including access control, secure servers, limiting access to information, and measures to prevent unauthorized processing.

We store personal data only for the period necessary to achieve the purposes for which it was collected or for the period required by applicable law.

Your rights

Under applicable law, you have rights regarding your personal data. You can exercise them by contacting us at legal@red.bg.

  • right of access to data
  • right to correct inaccurate or incomplete data
  • right to deletion when legal conditions are met
  • right to restrict processing
  • right to data portability
  • right to object to processing
  • right to withdraw consent when processing is based on consent

You have the right to file a complaint with the Commission for Personal Data Protection (CPDP) if you believe that the processing violates your rights.

Provision of data to third parties

We do not provide personal data to third parties, except when it is necessary for providing the service, fulfilling a legal obligation, or protecting our legitimate interests.

  • couriers and logistics partners
  • payment operators and providers of financial services
  • providers of hosting, maintenance, security, analytics, and communication services
  • competent authorities, when required by law

External websites

The platform may contain links to external websites. We are not responsible for the content and privacy policies of these websites.

Updates

We may update this policy in case of changes to services, legal requirements, or processing methods. The current version is published on this page.

Consent

By using our services, you confirm that you have read this Privacy Policy, understand its content, and, where applicable, give your free, informed, and unambiguous consent for your personal data to be processed by "RETAIL GROUP" Ltd. in accordance with this policy.