Privacy policy
Privacy Policy
Last updated: October 20, 2026
1. Who we are
Paleste is an online store operated from Bulgaria (European Union). We are the data controller for the personal information described here. Questions or requests: contact.paleste@gmail.com.
2. What we collect
- Order and contact details: name, email, shipping and billing address, phone number (if provided), items ordered and order history.
- Payment confirmation: payments are handled by our payment providers. We never see or store your full card number.
- Messages: anything you send us by email or our contact form.
- Device and browsing data: collected through cookies and pixels, such as IP address, browser, pages viewed and products added to cart.
3. How we use it, and our legal bases
- To process, ship and support your order (performance of a contract).
- To send order and shipping emails (performance of a contract).
- To send marketing emails, only if you sign up; you can unsubscribe at any time (consent).
- To measure and improve our ads and website (consent where required by law, otherwise our legitimate interests).
- To prevent fraud and keep our store secure (legitimate interests).
- To keep tax and accounting records (legal obligation).
4. Who we share it with
- Shopify, which hosts our store and checkout.
- Payment providers: Shopify Payments and PayPal.
- Our fulfillment partner and shipping carriers, who receive your name, address and phone number to deliver your order. Our fulfillment partner may be located outside the US and EU, including in China.
- Advertising and analytics providers, such as Meta (Facebook/Instagram) and Google, through cookies and pixels.
- Authorities, when required by law.
We do not sell your personal information for money. Under some US state laws, sharing data with advertising partners for targeted ads may count as a "sale" or "sharing". You can opt out at any time (see section 8).
5. International transfers
Your information may be processed in the United States, Canada, the European Union and China. Where EU data protection law applies, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. Cookies
We use necessary cookies to run the store and cart, and, where you allow it, analytics and advertising cookies (such as the Meta Pixel). You can manage your choices through our cookie banner and your browser settings. We honor Global Privacy Control (GPC) signals as an opt-out of targeted advertising.
7. How long we keep it
Order records are kept for as long as tax and accounting laws require. Marketing data is kept until you unsubscribe. Customer support messages are kept for up to 2 years. After that we delete or anonymize the information.
8. Your rights
Depending on where you live, you can ask us to access, correct, delete or transfer your information, object to or restrict how we use it, withdraw your consent, or opt out of targeted advertising. US residents of states with privacy laws (such as California) have the right to know, delete, correct and opt out of the sale or sharing of their information, and will not be treated differently for using these rights. Email contact.paleste@gmail.com and we'll respond within one month (or the time required by your local law). You can also contact Shopify about the data it processes at privacy.shopify.com.
If you're unhappy with how we handle your data, you can complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or your local data protection authority.
9. Children
Our store is not intended for children, and we don't knowingly collect information from anyone under 16.
10. Security
Our store runs on Shopify's secure platform, and all data is encrypted in transit. No method is 100% secure, but we take reasonable steps to protect your information.
11. Changes
We may update this policy from time to time. The "Last updated" date shows the latest version.
12. Contact
Paleste · contact.paleste@gmail.com