PLACEHOLDER — complete before going live. Fill in the bracketed details and have the final text reviewed. Last updated: [DATE].

1. Data controller

Mermer Foods, ul. "Tsar Osvoboditel" 99, 9700 Shumen, Bulgaria. Contact for data matters: info@mermerfoods.com. [Add DPO details if applicable.]

2. What we collect

When you order, we process the data needed to fulfil it: name, email, shipping/billing address, order contents, and payment status. Card details are handled by Stripe — we never see or store your full card number. We also use local storage to remember your cart and language preference.

3. Why we use it (legal bases)

To perform our contract with you (processing and delivering orders), to comply with legal obligations (e.g. tax/accounting), and where relevant our legitimate interests (fraud prevention, service improvement). [Confirm bases.]

4. Sharing & processors

We share data only with processors needed to run the shop: Stripe (payments), our hosting provider, and our shipping carrier. [List carriers and any other processors; note any transfers outside the EEA and safeguards.]

5. Retention

We keep order records for as long as required by law (e.g. accounting) and then delete or anonymise them. [State retention periods.]

6. Your rights

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing. To exercise these rights, email info@mermerfoods.com. You may also complain to the Bulgarian Commission for Personal Data Protection (CPDP).

7. Cookies

See our Cookie Policy for details on cookies and local storage.