Privacy Policy

Effective Date: 17.08.2025

This Privacy Policy describes how House of Deer (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit our website, purchase our products, or interact with us. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Bulgarian laws.

Having said that, a privacy policy is a statement that discloses some or all of the ways a website collects, uses, discloses, processes, and manages the data of its visitors and customers. It usually also includes a statement regarding the website’s commitment to protecting its visitors’ or customers’ privacy, and an explanation about the different mechanisms the website is implementing in order to protect privacy. 

 

Different jurisdictions have different legal obligations of what must be included in a Privacy Policy. You are responsible to make sure you are following the relevant legislation to your activities and location.

1. Data We Collect
We may collect and process the following personal data:

• Contact Information: Name, email address, phone number, billing/shipping address.

• Order Details: Products purchased, payment details (processed securely by third-party providers), and delivery information.

• Account Information: If you create an account, we store your login credentials in encrypted form.

• Communications: Messages sent via our website, email, WhatsApp, or other channels.

• Technical Data: IP address, browser type, operating system, device information, and browsing behavior (through cookies and similar technologies).
   

2. How We Use Your Data
We process your personal data for the following purposes:

• To process and fulfill your orders.

• To communicate with you about orders, inquiries, and customer service.

• To process payments via secure third-party payment processors (e.g., Stripe).

• To send you marketing communications (only if you have consented).

• To improve our website, products, and services.

• To comply with legal obligations.
   

3. Legal Basis for Processing
We process your personal data under the following legal grounds:

• Performance of a contract – when fulfilling your purchase.

• Legal obligation – when required by Bulgarian or EU law.

• Legitimate interest – for business operations, fraud prevention, and analytics.

• Consent – for marketing and certain cookies (you may withdraw consent at any time).
   

4. How We Share Your Data
We do not sell your data. We may share it with:

• Service Providers: Payment processors, shipping companies, IT support, marketing services.

• Legal Authorities: When required by law or to protect our rights.

• Business Transfers: In case of a merger, acquisition, or sale of assets.

All third parties are required to protect your data in accordance with GDPR.

5. International Data Transfers
Your personal data may be transferred outside the EU/EEA only to countries with adequate data protection safeguards or under contracts ensuring GDPR compliance.

6. Data Retention
We keep your personal data only as long as necessary for the purposes collected, including legal, accounting, or reporting requirements. For tax and accounting, we may retain certain data for up to 10 years under Bulgarian law.

7. Your Rights Under GDPR
You have the right to:

• Access your personal data.

• Rectify inaccurate or incomplete data.

• Request erasure of your data.

• Restrict or object to processing.

• Data portability.

• Withdraw consent at any time (for marketing, cookies).

• Lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
   

8. Cookies and Tracking
Our website uses cookies and similar technologies for functionality, performance, and analytics. You can manage your cookie preferences in your browser settings.

9. Security
We implement technical and organizational measures to protect your personal data, including encryption, secure payment gateways, and limited access controls.