Controller: PARADOX PROJECT LTD, Address: BULGARIA, Gorna Oryahovitsca Bozhur 12 , Email:offise@artpostery.com, Phone: +359 885 932 585. 1. What We Collect Identity & contact: name, email, phone, billing/shipping address. Order & payment data (via processors: Stripe/credit card, PayPal). We do not store full card details. Technical data: IP, device, cookies (see Cookie Policy). Marketing/analytics: e.g., Google Analytics, e.g., Meta Pixel. 2. Purposes & Legal Bases Order fulfillment (contract Art.6(1)(b) GDPR) Invoicing, VAT/OSS compliance (legal obligation Art.6(1)(c)) Site security, fraud prevention (legitimate interest Art.6(1)(f)) Marketing with consent where required (consent Art.6(1)(a)) 3. Sharing We share with carriers PostOne,Bulgarian Post, payment providers (Stripe/credit card, PayPal), hosting PARADOX PROJECT LTD, analytics/ads vendors Google.inc. 4. International Transfers Where data leaves the EEA/UK, we use adequacy decisions or SCCs. 5. Retention Orders/invoices:ONE YEARS (tax law). Accounts: until deletion. Marketing data: until you withdraw consent. 6. Your Rights Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact: offise@artpostery.com. Supervisory authority: Bulgaria DPA. 7. Security HTTPS, access controls, encryption at rest where applicable. 8. Cookies See Cookie Policy. Manage via banner/preferences. 9. Contact: offise@artpostery.com