Privacy policy

This policy explains how ПН Комърс ЕООД processes your personal data when you shop at our online store, under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Controller

ПН Комърс ЕООД, Company ID 207776631, 43 Lermontov St, Burgas, Bulgaria. Questions about your data: info.zenithfit@gmail.com.

2. What we process

• Name, phone and email;
• Town and address or courier office for delivery;
• Order details — product, quantity, amount, payment method, note;
• For card payments — the payment status from Stripe. Your card details never reach us.

3. Purposes and legal bases

• Fulfilling and delivering your order and contacting you about it — performance of a contract (Art. 6(1)(b) GDPR);
• Accounting and tax obligations — legal obligation (Art. 6(1)(c) GDPR);
• Handling complaints and withdrawals — contract and legal obligation.

We do not use your data for advertising and we do not sell it.

4. Who receives data

• Econt Express or Speedy — to deliver your parcel;
• Stripe Payments Europe Ltd. — to process card payments;
• Resend (email delivery) and Netlify (hosting) — as processors.

Where a provider processes data outside the EEA (e.g. in the USA), this happens under appropriate safeguards — the EU–US Data Privacy Framework or standard contractual clauses.

5. Retention

Order data is kept as long as needed to fulfil the order and for the legal guarantee period; accounting documents are kept for 10 years under the Bulgarian Accountancy Act.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. To exercise them, email info.zenithfit@gmail.com. You may also complain to the Commission for Personal Data Protection (cpdp.bg).

7. Cookies and statistics

We use no advertising cookies. Your cart is kept only in your browser (local storage). We count visits with Umami, a cookieless analytics tool that does not identify you or track you across websites.