Privacy policy.

We collect information you provide directly (when you register, order, contact us) and information generated automatically as you use the site.

Specifically this includes:

• Identification data: name, email address, password (hashed), phone number
• Order information: shipping address, purchase history, preferences
• Technical data: IP address, browser type, OS, pages you visit, time of visit
• Cookies and similar technologies for core site functions and analytics

We only use personal data for purposes that are necessary for the service to function or that you have explicitly approved.

• Processing and shipping orders
• Managing your account and communicating with you
• Sending marketing messages (only if you've subscribed)
• Improving our products and services based on anonymised data
• Fulfilling legal obligations (accounting, taxes, fraud prevention)

We use cookies to store your session, language preferences, and cart. Analytics cookies help us understand which products are searched for, without identifying you personally.

You can manage cookies through your browser settings. Note that disabling essential cookies may break site functionality (such as login or cart).

We don't sell your data. We share it only with providers who help us deliver the service:

• Courier companies (to ship your package — only address and name)
• Payment processors (to process payment — we never store card data)
• Infrastructure providers (hosting, mail server, analytics) under GDPR-compliant contracts

We keep your data for as long as your account is active, and up to 5 years after that (a requirement of Bulgarian accounting law).

Marketing data is deleted as soon as you unsubscribe. Technical logs are kept for a maximum of 30 days.

Under GDPR you have the following rights regarding your personal data:

• Access: you can request a copy of all data we hold about you
• Correction: if something is wrong, we can fix it
• Deletion: you can request full erasure ("right to be forgotten")
• Portability: we can send your data to you in a machine-readable format
• Object to processing: you can opt out of marketing or analytics

We use SSL/TLS encryption on all connections, hashed passwords (bcrypt), and limited database access. We do not store credit card details — they pass directly through a PCI-DSS certified payment processor.

For any privacy questions or to exercise your rights, write to us at sokobeauty@gmail.com or at our address: 56 Alabin Str., fl. 3, 1000 Sofia, Bulgaria.

We may update this policy when we add new features or the law changes. We'll notify you by email about material changes at least 30 days in advance.