Privacy policy
Last updated: 29 September 2026
This policy explains how Pottery & Poetry collects and uses your personal data when you visit potteryandpoetry.com, place an order or contact us.
Who we are
The data controller is POTERY EOOD, trading as Pottery & Poetry, UIC (ЕИК) 204829317, VAT number BG204829317, registered address 55 Krastyo Sarafov St., 1421 Sofia, Bulgaria. Email: hi@potteryandpoetry.com, phone: +359 88 931 2498.
What data we collect
- Contact and delivery details: name, email address, phone number, delivery and billing address.
- Order details: the products you buy, personalisation choices, amounts paid, order history and our correspondence with you.
- Payment details: payments are processed by our payment providers. We do not see or store your full card number.
- Account details: if you create a customer account, the information you keep in it.
- Newsletter: your email address and your subscription preferences.
- Device and usage data: IP address, browser and device type, pages visited and similar information collected through cookies, as described below.
Why we use it and on what legal basis
- To take, make, deliver and support your order, and to answer your questions — performance of a contract (Art. 6(1)(b) GDPR).
- To keep invoices and accounting records and meet our tax obligations — legal obligation (Art. 6(1)(c) GDPR).
- To send you our newsletter and marketing emails — your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link in each email.
- For analytics and advertising cookies — your consent, given through the cookie banner.
- To keep the website secure, prevent fraud and handle business enquiries — our legitimate interests (Art. 6(1)(f) GDPR).
Who we share it with
We share your data only as far as needed with:
- Shopify, the platform that hosts our online store and processes orders;
- payment providers that process your payment;
- courier and postal services that deliver your order;
- our accountants and IT, email and marketing service providers;
- analytics and advertising partners (for example Google and Meta), only if you have accepted the related cookies;
- public authorities, when the law requires it.
We do not sell your personal data.
Transfers outside the EU
Some of these providers, including Shopify, may process data outside the European Economic Area, for example in Canada or the United States. Such transfers rely on an adequacy decision of the European Commission (including the EU–US Data Privacy Framework) or on the Commission's standard contractual clauses.
How long we keep it
- Order, invoice and accounting records: 10 years, as required by the Bulgarian Accountancy Act.
- Customer account: until you close it.
- Newsletter data: until you unsubscribe.
- Enquiries and correspondence not linked to an order: up to 2 years after our last contact.
- Cookies: for the periods shown in the cookie banner.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and to withdraw your consent at any time. To use any of these rights, write to hi@potteryandpoetry.com. We will reply within one month.
You can also lodge a complaint with the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, www.cpdp.bg, or with the data protection authority in your country.
Cookies
Cookies are small text files that a website stores on your device. We use:
- Necessary cookies, which make the shop work (cart, checkout, login, security). These do not need consent.
- Preference cookies, which remember choices such as language and currency.
- Analytics cookies, which show us how visitors use the site so we can improve it.
- Marketing cookies, which help us and our advertising partners show relevant ads.
Preference, analytics and marketing cookies are set only if you accept them in the cookie banner. You can change your choice at any time through the cookie banner or in your browser settings. A list of the cookies set by the Shopify platform is available at shopify.com/legal/cookies.
Children
Our website is not intended for children under 16, and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.