Privacy policy

Last updated: October 2026

This policy explains how Bechiva Ltd ("Bechiva", "we", "us"), ul. Veliko Tarnovo 39, 4000 Plovdiv, Bulgaria, VAT BG204772058, handles your personal data when you visit www.bechiva.com or place an order. We are the data controller. Contact: info@bechiva.com.

1. What data we collect

Order data: name, delivery and billing address, email, phone number, items ordered, order notes.
Payment data: processed by our payment providers (Shopify Payments, PayPal and others shown at checkout). We never see or store your full card number.
Account data: if you create an account, your login email and order history.
Communication data: messages you send us by email, contact form or social media.
Marketing data: your email address if you subscribe to our newsletter.
Technical data: IP address, device and browser type, pages visited, cookies and similar technologies.

2. Why we use it and our legal basis

To process and deliver your order, handle returns and give support (contract, Art. 6(1)(b) GDPR).
To meet accounting, tax and consumer-law obligations (legal obligation, Art. 6(1)(c)).
To prevent fraud and keep the website secure (legitimate interest, Art. 6(1)(f)).
To send newsletters and promotions (your consent, Art. 6(1)(a)). You can unsubscribe at any time using the link in every email.
To measure website traffic and show relevant advertising (your consent through the cookie banner).

3. Who we share data with

We share data only with service providers needed to run the shop: Shopify (online store platform and checkout), payment providers, courier and postal companies, email and marketing tools, analytics and advertising partners (such as Google and Meta, only with your consent), our accountant, and authorities where the law requires it. These providers act on our instructions or under their own legal duties.

4. International transfers

Some providers are located outside the EU/EEA. In that case the transfer relies on the EU-US Data Privacy Framework, standard contractual clauses or another safeguard recognised by the GDPR.

5. How long we keep data

Order and invoice data is kept for the period required by Bulgarian tax and accounting law (up to 10 years). Newsletter data is kept until you unsubscribe. Account data is kept until you ask us to delete the account. Technical data is kept according to the cookie lifetimes of each provider.

6. Cookies

We use essential cookies to run the shop (cart, checkout, security). With your consent we also use analytics and marketing cookies. You can change your choice at any time through the cookie settings on the website or in your browser.

7. Your rights

You have the right to access, correct, delete or restrict the use of your data, to object to processing, to withdraw consent at any time, and to receive your data in a portable format. Write to info@bechiva.com and we will answer within one month. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the data protection authority in your country.

8. Children

Our website is not intended for children under 16 and we do not knowingly collect their data.

9. Changes

We may update this policy. The current version is always published on this page.