Privacy policy.

We collect the data you provide when you create an account, place an order or contact us. Some technical information is collected automatically while you use the site.

This includes:

• Account data: name, email address, phone number and a hashed version of your password
• Shopping data: delivery addresses, order history, products you’ve saved and skincare quiz answers
• Technical data: IP address, browser and operating system, pages visited and time of visits
• Cookie and similar technology data: essential site functions and usage analytics
• Google or Facebook sign-in data: if you sign in this way, we receive your name, email address and profile photo from that service. We use the photo as your account avatar, and you can change it at any time. We don’t receive your password, friends list or posts.

We use your personal data only for the purposes listed below and when we have a lawful basis to do so.

• Processing and shipping orders
• Managing your account and communicating with you
• Sending marketing messages only with your consent
• Improving our products and services based on anonymised data
• Meeting legal obligations, such as accounting and tax requirements, and preventing fraud

We use essential cookies to keep your session, selected language and cart. With your consent, we use analytics cookies to understand how visitors use the site, which products they view, and which channel brought them here - a link from Instagram or from the newsletter, for instance. Only the channel name is kept, for up to 30 days.

You can manage cookies in your browser settings. If you disable essential cookies, features such as signing in, using the cart and completing checkout may not work properly.

We don’t sell your personal data. We share it only with companies whose services we need to process orders and operate the site:

• Courier companies: your name, phone number and delivery details needed to ship your order
• Payment processors: the data needed to process your payment. We don’t store your full card details.
• Technical service providers: hosting, image storage, email delivery and website usage analytics

We keep your data while your account is active. After it is closed, we retain only the information needed to comply with legal obligations or defend legal claims. Data related to orders and accounting records is retained for the periods required by Bulgarian law.

Marketing data is deleted as soon as you unsubscribe. Technical logs are kept for a maximum of 30 days.

You have the following rights regarding your personal data:

• Access: you can ask what personal data we process about you and receive a copy of it
• Correction: you can ask us to correct inaccurate or incomplete personal data
• Erasure: you can ask us to delete your personal data unless we have a legal obligation or another lawful reason to retain it
• Portability: you can receive the data you provided to us in a structured, commonly used and machine-readable format
• Objection and withdrawal of consent: you can object to the use of your data for direct marketing or withdraw your consent to analytics cookies
• Deleting data after signing in with Facebook or Google: request deletion under Account → Settings → “Delete account”, or email us at contact@sokobeauty.bg. Deleting your account also deletes the data we received from Facebook or Google, including your profile photo. You can also remove our access from the service itself: on Facebook under Settings & privacy → Settings → Apps and websites, and on Google under Google Account → Security → Your connections to third-party apps & services.

We protect your personal data with encrypted connections, hashed passwords and restricted access to our systems. Card payments are processed by Stripe, and we don’t store your full card number.

If you have a question about your personal data or want to exercise any of your rights, contact us at contact@sokobeauty.bg. You can also write to us at: 14 Ana Feliksova Str., 9000 Varna, Bulgaria.

We may update this policy when our services or applicable laws change. If the changes are material, we’ll email you at least 30 days before they take effect.