Privacy Policy

Last updated: 29 August 2026

1. Data controller

The controller of your personal data is МЕРМЕР ФУУДС ООД (MERMER FOODS LTD), a limited liability company (OOD) registered in the Bulgarian Commercial Register under company number (EIK) 208508497, with registered seat at ul. "Tsar Osvoboditel" 99, floor 6, 9700 Shumen, Bulgaria. For any question or request concerning your personal data, contact us at info@mermerfoods.com or by phone at +359 54 833 345.

2. What we collect

We only process the data that running this shop actually requires:

• Orders and delivery: your name, email address, delivery and billing address, phone number if provided, the contents of your order, and its payment status.
• Payments: payments are processed by Shopify Payments, operated by Shopify. Your card details go directly to Shopify Payments and its acquiring partners over an encrypted connection; we never see or store your full card number.
• Trade inquiries: if you use our business inquiry form, we process the company name, email address, buyer type, estimated volume, products of interest, and message you submit.
• Correspondence: anything you send us by email.
• On your device: your cart (session storage), language preference and cookie choice (local storage) are stored in your browser only — they are not sent to us. See the Cookie Policy.

If you accept them in the cookie banner, Shopify sets its own first-party analytics and marketing cookies for this shop, which we use to see visitor and sales statistics in our Shopify admin. They are not set if you decline. We make no automated decisions about you that produce legal effects. The exact cookie names and what each one does are listed in the Cookie Policy.

3. Why we use it (legal bases)

• Performance of a contract (Art. 6(1)(b) GDPR): processing and delivering your order, handling payments, and responding to order-related questions.
• Legal obligation (Art. 6(1)(c) GDPR): keeping the accounting and tax records Bulgarian law requires of us.
• Legitimate interests (Art. 6(1)(f) GDPR): answering trade and other inquiries you send us, and keeping the site and checkout secure and free of fraud and abuse.

4. Sharing & processors

We never sell your data. We share it only with service providers needed to run the shop, and only for the purposes above:

• Shopify — Shopify Inc. and its group companies provide the hosting for this site, the checkout, card payment processing through Shopify Payments, and the store analytics we see in our admin. Your order, account and payment data is processed on Shopify's platform.
• Delivery partners — the name, address, and contact details needed to ship your order to you.
• Static-file providers — the site loads fonts from Google Fonts and one script library from Cloudflare's cdnjs; when your browser requests those files, those providers receive your IP address as part of the request. No other data is shared with them.

Where a provider processes data outside the European Economic Area, the transfer takes place under the safeguards the GDPR provides for, such as the European Commission's Standard Contractual Clauses.

5. Retention

Order and invoicing records are kept for the periods required by Bulgarian accounting and tax legislation, then deleted or anonymised. Inquiry and email correspondence is kept only as long as needed to deal with your request and any follow-up. Cart, language, and cookie-choice data lives in your own browser and can be cleared by you at any time.

6. Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. To exercise any of these rights, email info@mermerfoods.com — we will respond within one month. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, cpdp.bg) or with the supervisory authority of the EU country where you live.

7. Cookies

Strictly necessary storage is always active. Shopify's analytics and marketing cookies are set only if you accept them in the cookie banner, and are not set if you decline. For exactly what is stored in your browser and why, see the Cookie Policy.