Privacy policy

Last updated: 5 October 2026

Who is responsible

Estrad LTD, trading as Codeclear, registered office Barzaritsa Str. 4A, ap. 15-16, 1618 Sofia, Bulgaria, company ID (EIK) 206095975, is the controller of the personal data processed through this store. Contact: contact@codeclear.net.

This policy explains what personal data we collect when you visit or buy from this store, why, and what rights you have under the EU General Data Protection Regulation (GDPR).

What we collect

  • Order and contact details: name, email, phone number (if you give it), billing and delivery address, items ordered, order history.
  • Payment details: processed directly by our payment providers. We do not see or store your full card number.
  • Messages: what you write to us, for example about a delivery or a return.
  • Device and usage data: IP address, browser, device type, pages viewed and similar data collected through cookies, depending on your cookie choices.

Why we use it, and on what legal basis

  • To process and deliver your order, handle returns and answer you (performance of a contract, Art. 6(1)(b) GDPR).
  • To keep invoices and accounting records and meet tax and consumer-law duties (legal obligation, Art. 6(1)(c)).
  • To prevent fraud and keep the store secure (legitimate interests, Art. 6(1)(f)).
  • To send marketing emails and use advertising or analytics cookies only with your consent (Art. 6(1)(a)). You can withdraw consent at any time, for example with the unsubscribe link or your cookie settings.

Who we share it with

We share only what is needed for each purpose, with:

  • Shopify, which hosts our store and checkout;
  • payment providers that process your payment;
  • our suppliers, warehouses and carriers, so your order can be packed, shipped and tracked;
  • email, analytics and advertising providers, where you have consented;
  • authorities, where the law requires it.

We do not sell your personal data.

Transfers outside the EU

Some of these providers are located, or process data, outside the European Economic Area, for example in Canada, the United States and Asia. Where a country does not have an EU adequacy decision, transfers are protected by the European Commission's Standard Contractual Clauses or another safeguard recognised by the GDPR. You can ask us for more information about these safeguards.

How long we keep it

  • Order, invoice and accounting records: as long as tax and accounting law requires (in Bulgaria, up to 10 years).
  • Customer service messages: up to 3 years after your last order or message.
  • Marketing data: until you unsubscribe or withdraw consent.

Cookies

We use cookies that are necessary for the store and checkout to work. We use analytics and advertising cookies only if you accept them in the cookie banner; you can change your choice at any time.

Your rights

You have the right to access your data, have it corrected or deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. To use these rights, email us. We reply within one month.

You can also complain to the Bulgarian Commission for Personal Data Protection (www.cpdp.bg) or the data protection authority in your country.

Children

This store is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy. The latest version is always on this page, with the date it was last updated.