Privacy Policy

1. Controller

The controller for all personal data processed through Elegant Coffee (elegant-coffee.com) is:

IGS Consult Ltd., EIK 208041638, VAT BG208041638, ul. Boris Rumenov 5A, Sofia 1407, Bulgaria — managing director Simeon Hristov. Contact: support@elegant-coffee.com · +359 88 6159858

2. What we process, why, and on which legal basis

Account data — your email address, your name if you provide it, your chosen language and region, and your sign-in method (email/password, a sign-in link sent to your email, or Google). Purpose: providing your customer account, order history, downloads and returns. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Order and payment data — the products you order, delivery and billing addresses, order totals, invoices, and payment status. Card details are entered directly with our payment processor and never reach our systems. Purpose: fulfilling your order, issuing legally required invoices, handling returns and refunds. Legal basis: performance of a contract, Art. 6(1)(b), and legal obligations under Bulgarian tax and accounting law, Art. 6(1)(c).

Consent records — the versions of the legal documents you accepted at checkout and, for digital content, your acknowledgment of immediate delivery. Purpose: proving consent. Legal basis: legal obligation, Art. 6(1)(c), and legitimate interest, Art. 6(1)(f).

Support correspondence — messages you send to support@elegant-coffee.com. Purpose: answering you. Legal basis: legitimate interest, Art. 6(1)(f), or contract performance where the message concerns an order.

Technical logs — IP addresses and request timestamps kept by our hosting provider for security and operation. Legal basis: legitimate interest, Art. 6(1)(f).

Analytics — see the Cookie Policy. Analytics runs only with your consent, Art. 6(1)(a), and collects a randomly generated identifier, a shortened form of your IP address, the pages you view, and general information about your browser and device.

3. Recipients and processors

We use the following processors under data-processing agreements:

• Stripe (Stripe Payments Europe Ltd.) — payment processing; the checkout payment page is served by Stripe.
• Google Cloud / Firebase (Google Ireland Limited) — hosting, database, and account authentication (Firebase Authentication — password, emailed sign-in link, and the optional "Continue with Google" sign-in).
• ImprovMX — delivery of transactional and support email.
• Google Ireland Limited — analytics (only with consent; see the Cookie Policy).

Data is not sold and is not shared with third parties for their own marketing.

4. International transfers

Some processors may process data outside the European Economic Area. Where that happens, transfers rely on the European Commission's standard contractual clauses together with the provider's supplementary measures.

5. Retention

• Invoices and accounting records: 10 years, as required by Bulgarian accounting and tax law.
• Order records and consent records: for the duration of the statutory limitation and warranty periods.
• Account data: until you delete your account, subject to the retention above.
• Technical logs: per the hosting provider's rotation settings.
• Analytics data: deleted automatically when the retention period configured in the analytics property expires.

6. Your rights

You may request access to your data, correction, erasure, restriction of processing, and data portability, and you may object to processing based on legitimate interest. Where processing relies on consent, you may withdraw it at any time without retroactive effect. Write to support@elegant-coffee.com.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, www.cpdp.bg) or with your local supervisory authority.

7. Cookies

See the separate Cookie Policy for the cookies and similar technologies this shop uses and how consent works.