Controller: PARADOX PROJECT LTD, Address: BULGARIA, Gorna Oryahovitsca Bozhur 12 , Email:contact@artpostery.com, Phone: +359 885 932 585.

1. What We Collect
   Identity & contact: name, email, phone, billing/shipping address.
   Order & payment data (via processors: Stripe/credit card, PayPal). We do not store full card details.
   Technical data: IP, device, cookies (see Cookie Policy).
   Marketing/analytics: e.g., Google Analytics, e.g., Meta Pixel.
2. Purposes & Legal Bases
   Order fulfillment (contract Art.6(1)(b) GDPR)
   Invoicing, VAT/OSS compliance (legal obligation Art.6(1)(c))
   Site security, fraud prevention (legitimate interest Art.6(1)(f))
   Marketing with consent where required (consent Art.6(1)(a))
3. Sharing
   We share with carriers PostOne,Bulgarian Post, payment providers (Stripe/credit card, PayPal), hosting PARADOX PROJECT LTD, analytics/ads vendors Google.inc.
4. International Transfers
   Where data leaves the EEA/UK, we use adequacy decisions or SCCs.
5. Retention
   Orders/invoices:ONE YEARS (tax law). Accounts: until deletion. Marketing data: until you withdraw consent.
6. Your Rights
   Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact: offise@artpostery.com. Supervisory authority: Bulgaria DPA.
7. Security
   HTTPS, access controls, encryption at rest where applicable.
8. Cookies
   See Cookie Policy. Manage via banner/preferences.
9. Contact: offise@artpostery.com