Privacy Policy

1. Data controller

"UEBAYDIASLAB" EOOD, UIC 206613987 (VAT No. BG206613987), with registered seat and address of management: Sofia, Mramor village 1261, 4 Zahari Stoyanov St., operates Label Shop with working address: Sofia, Reduta district, 15 Kutlovitsa St.

For questions about this policy: hey@labelshop.bg or +359 883 366 972.

2. What data we collect

• Order data — name, email, phone, delivery address (or a chosen Econt office).
• Invoicing data — for a requested company invoice: company name, UIC, VAT number, registered address, authorized representative.
• Account data — if you create a profile: email and password (stored hashed, not in plain text).
• Content you upload — images, logos, and text used for your print design.
• Technical data — IP address and cookies, described in our cookie policy.

Card payment data (card number, etc.) is not stored by us — it is processed directly by our payment provider, myPOS.

3. What we use it for and on what legal basis

• Performance of a contract — processing and delivering your order.
• Legal obligation — issuing and retaining accounting documents (invoices).
• Legitimate interest — preventing abuse (e.g. unpaid cash-on-delivery parcels), tracking orders placed through partner promo codes.
• Consent — for marketing cookies (Google Ads, Meta Pixel) and similar optional purposes, only if you choose "Accept all" in the cookie banner.

4. Who we share data with

We work with providers who process data on our behalf, only to the extent necessary for the service:

• Supabase — database and account sign-in.
• myPOS — card payment processing.
• Econt — parcel delivery (receives name, phone, and address/office).
• Resend — sending order confirmation emails.
• Google Ads and Meta (Facebook/Instagram) — only if you have accepted marketing cookies: displaying ads and measuring their performance. See Cookies.

We do not sell your data to third parties.

5. Retention

Order and invoice data is kept for a minimum of 10 years under the Bulgarian Accountancy Act. Data for an inactive account with no orders may be deleted earlier upon request.

6. Your rights

At any time you can request that we:

• give you access to the personal data we hold about you;
• correct inaccurate data;
• erase it ("right to be forgotten"), to the extent this does not conflict with a legal obligation (e.g. accounting documents);
• restrict or object to certain processing;
• provide your data in a structured, portable format;
• let you withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, write to us at hey@labelshop.bg. If you believe your rights have been violated, you can file a complaint with the Commission for Personal Data Protection (cpdp.bg).

7. Minors

Label Shop is not directed at children and does not knowingly collect data from individuals under 16.

8. Changes to this policy

If the way we process data changes, we will update this page.