Privacy policy

Controller

Invert Logic Ltd., company ID 205248311, Lyulin 7, bl. 724, entr. B, fl. 3, apt. 44, 1324 Sofia, Bulgaria, bobi@bathandbrush.eu.

What we collect and why

  • When you order: name, delivery address, phone, email, order contents. Basis: performance of a contract. Without these we cannot deliver.
  • When you subscribe to back-in-stock alerts or the newsletter: email. Basis: your consent, which you can withdraw via the link in any email.
  • When you contact us: email and the content of your message. Basis: our legitimate interest in replying.
  • When you visit the site: technical data (IP address, browser, pages) and cookies. Basis: legitimate interest in running and securing the site, and your consent for analytics and marketing cookies.

Who we share data with

  • Shopify International Ltd. (Ireland), the platform the shop runs on and which stores the data.
  • Econt Express Ltd. or Speedy AD, for delivery: name, address, phone.
  • The back-in-stock notification app (Notify Me!), your email only if you subscribe.
  • Meta Platforms (Facebook, Instagram), if we use their analytics and advertising tools and you have consented to cookies. We do not sell personal data.

Transfers outside the EU

Shopify and Meta may process data in the USA. Transfers rely on the EU standard contractual clauses and the EU-US Data Privacy Framework.

How long we keep data

Order data: 5 years after the end of the year of the order, under accounting and tax law. Newsletter email: until you withdraw consent. Correspondence: 2 years.

Your rights

Access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to bobi@bathandbrush.eu. We reply within 30 days. You may complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

Cookies

We use necessary cookies for the cart and session and, with your consent, analytics and marketing cookies. Manage your consent in the cookie banner and your browser settings.

Children

The shop is not intended for persons under 18 and we do not knowingly collect their data.

Last updated: September 2026.