Privacy policy

At Groove Crust, we are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and applicable Bulgarian and EU law.

1. Data Controller

The data controller responsible for processing your personal data is:

Groove Crust
sales@groovecrust.com


2. Personal Data We Collect

We collect only the personal data necessary to operate our online store and fulfill our contractual and legal obligations, including:

  • Full name
  • Billing and shipping address
  • Email address
  • Phone number
  • Payment information (processed securely by third-party payment providers)
  • Order and purchase history
  • Communication data (emails, messages, customer support inquiries)

We do not collect sensitive personal data.

3. Purpose and Legal Basis for Processing

Your personal data is processed for the following purposes and legal bases:

  • Order processing and delivery (performance of a contract)
  • Payment processing (performance of a contract)
  • Customer support and communication (legitimate interest)
  • Legal and accounting obligations (legal obligation)
  • Website security and fraud prevention (legitimate interest)

4. Sharing of Personal Data

We share your personal data only when necessary and only with trusted third parties, including:

  • Courier companies (Econt, Speedy, Bulgarian Posts) for order delivery
  • Payment service providers for secure payment processing
  • Accounting or legal service providers where required by law

All third parties act as data processors under GDPR and are contractually obligated to protect your data.

5. International Data Transfers

For international shipments, personal data may be transferred to postal or courier services outside your country. Any such transfers are conducted in compliance with GDPR requirements.

6. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfill orders and contracts
  • Comply with legal and accounting requirements
  • Resolve disputes

When data is no longer required, it is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (“right to be forgotten”)
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time (where applicable)
  • Lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:
sales@groovecrust.com

8. Cookies

Our website may use cookies to ensure proper functionality and improve user experience. For detailed information, please refer to our Cookie Policy (if applicable).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or disclosure.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time.
The version published on our website is the one currently in force.

12. Contact Information

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
sales@groovecrust.com