Last Updated: January 2026
Effective Date: January 2026
1. Introduction
We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and your rights under applicable European data protection laws, including the General Data Protection Regulation (GDPR).
This policy applies to personal data collected through our website, order processing, customer service, and other direct interactions.
2. Data Controller
The data controller for your personal information is:
Linay Art Shop
Address: Linay Art Ltd., Debar St. 24, Fl.5, Ap.9, Varna 9000, Bulgaria
Email: linay.art.shop@gmmail.com
3. Information We Collect
We collect and process the following personal data:
a. Account & Contact Information
- Name
- Email address
- Billing and shipping addresses
- Phone number (optional)
b. Transaction & Order Information
- Order details (items, quantities, prices)
- Payment method and transaction data (processed securely by MyPOS)
- Billing information
c. Technical & Usage Data
- IP address
- Browser type and version
- Device information
- Pages visited, time and date of visit
- Cookies and tracking technologies
d. Customer Service & Communications
- Emails or messages you send us
- Support requests and responses
4. Legal Basis for Processing
We process your data only when we have a lawful basis to do so, including:
- Contract performance: to fulfill orders and deliver products.
- Legal obligation: tax, accounting, and regulatory compliance.
- Legitimate interests: improving our website, preventing fraud, and enhancing customer service.
- Consent: for marketing communications (you may withdraw consent at any time).
5. How We Use Your Information
We use personal data for these purposes:
- Process and fulfill orders
- Manage payments via MyPOS
- Communicate order status and customer support
- Improve website functionality and user experience
- Send marketing emails (only with your consent)
- Comply with legal requirements
Your payment card data is not stored on our servers; it is handled securely by MyPOS. We only receive payment confirmation and related transaction identifiers necessary for order processing and accounting.
6. Sharing Your Information
We may share data with:
- Service providers: hosting, payment processors (MyPOS), email services, shipping partners.
- Legal authorities: if required by law or to defend legal rights.
- Business transfers: in case of sale, merger, or asset transfer (with notice).
We do not sell or rent your personal data to third parties for marketing.
7. International Data Transfers
Your data may be processed or stored outside the European Economic Area (EEA). When this occurs, we ensure safeguards like Standard Contractual Clauses are in place to protect your data in compliance with GDPR.
8. Data Retention
We retain personal data only as long as necessary:
- Transactional data: 7 years (for tax/compliance)
- Account data: as long as your account is active or needed
- Marketing data: until you opt out
We securely delete or anonymize data when no longer needed.
9. Your Rights Under GDPR
You have the right to:
- Access your data
- Correct inaccurate data
- Delete your personal data (“right to be forgotten”), where applicable
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority (e.g., the Bulgarian Commission for Personal Data Protection)
To exercise any rights, contact us at: [Your Business Email]
10. Cookies & Tracking
We use cookies to:
- Enable cart and checkout functionality
- Analyze website performance
- Provide personalized experiences
You can control or disable cookies in your browser settings. Blocking certain cookies may affect site functionality.
11. Security Measures
We implement reasonable technical and organizational measures to protect data, including SSL/TLS encryption, secure servers, access control, and regular security reviews.
12. Children’s Privacy
Our services are not directed to children under 16. We do not knowingly collect data from minors. If you believe we have, contact us to remove it.
13. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or business changes. We will post updates on this page with a revised “Last Updated” date.
14. Contact Information
If you have questions or requests related to privacy:
Email: linay.art.shop@gmail.com
Address: Linay Art Ltd., Debar St. 24, Fl.5, Ap.9, Varna 9000, Bulgaria