Privacy Policy

Last updated: June 1, 2026

1. General Provisions

The purpose of this Privacy Policy is to inform you in a clear and transparent manner about how “Modu Concept” EOOD processes the personal data of visitors, customers, partners, and users of the website.

This policy has been developed in accordance with:

  • Regulation (EU) 2016/679 (GDPR);

  • The Personal Data Protection Act;

  • The Electronic Commerce Act;

  • applicable European legislation.

By using this website, you confirm that you have read this Privacy Policy.

2. Personal Data Controller

Modu Concept EOOD

EIK: 208565263

VAT No.: BG208565263

Address: 58 Bulgaria Blvd., Entrance C, 1st Floor, Office 1

Email: privacy@modu-concept.com

3. What personal data do we process?

Depending on the services you use, we may process the following categories of personal data: first name, last name, phone number, email address, shipping address, billing address, company name, EIK, IP address, browser, device, and operating system information, order history, payment information (excluding credit card details), data provided via the contact form, data provided when registering a partner account, information provided when subscribing to the newsletter, and information collected through cookies.

4. Purposes of Processing

Your personal data is processed for the following purposes:

  • processing and fulfilling orders;

  • product delivery;

  • preparing proposals;

  • communication with customers and partners;

  • registration and management of partner profiles;

  • fulfillment of accounting and tax obligations;

  • improving the website's performance and security;

  • analysis of consumer behavior;

  • prevention of fraud and abuse;

  • sending marketing messages and newsletters when the relevant consent has been provided.

5. Legal Basis

Personal data is processed on the basis of:

  • performance of a contract or taking steps prior to its conclusion;

  • compliance with a legal obligation;

  • protection of the legitimate interests of Modu Concept EOOD;

  • the data subject's explicit consent, when required.

6. Cookies

This website uses cookies to:

  • the proper functioning of the website;

  • traffic analysis;

  • for statistical purposes;

  • marketing objectives;

  • personalizing content and ads.

Users may change or withdraw their consent at any time via the cookie banner available on the website.

7. External Services Used

We use the following providers to deliver our services:

  • Shopify;

  • Stripe;

  • Google Analytics;

  • Google Tag Manager;

  • Google Ads;

  • Meta Pixel;

  • TikTok Pixel;

  • Weglot;

  • Speedy.

These providers may process personal data as data processors or as independent data controllers in accordance with applicable law and the GDPR.

8. International Data Transfer

Some of the service providers we use may process personal data outside the European Economic Area.

In such cases, Modu Concept EOOD takes the necessary measures to ensure an adequate level of protection through the use of Standard Contractual Clauses (SCCs), adequacy decisions by the European Commission, or other mechanisms provided for in Regulation (EU) 2016/679.

9. Storage periods

Modu Concept EOOD retains personal data only for the period necessary to fulfill the purposes for which it was collected, to comply with applicable laws, to protect the company’s legitimate interests, and to establish, exercise, or defend legal claims.

Personal data related to orders, contracts, quotes, invoices, payments, and accounting documents is retained for up to 10 (ten) years, in accordance with applicable law.

Personal data associated with customer profiles is retained until the profile is closed, but for no longer than 10 (ten) years from the user’s last activity.

Personal data associated with partner profiles is retained until the partnership is terminated, but for no longer than 10 (ten) years from the last activity.

Data provided through the contact form, requests for quotes, and other correspondence are retained for up to 10 (ten) years after the last communication.

Personal data processed for the purpose of sending marketing communications and newsletters is retained until consent is withdrawn or for a period of up to 10 (ten) years from the last interaction with the user.

Technical data, including IP addresses, system logs, and information related to website security, is retained for up to 24 (twenty-four) months, unless a longer period is necessary to prevent fraud, protecting the company’s legitimate interests, complying with a legal obligation, or establishing, exercising, or defending legal claims.

The information collected through cookies is stored for the periods specified in the Cookie Policy and in accordance with the settings of the services used.

Once the applicable retention periods have expired, personal data is deleted or anonymized in a secure manner, unless applicable law requires or permits its further retention.

10. Who Has Access to Personal Data

Access to personal data may be granted only to individuals for whom such access is necessary for the performance of their official duties, including:

  • authorized employees of Modu Concept EOOD;

  • accounting and auditing services;

  • courier companies;

  • payment service providers;

  • hosting and IT service providers;

  • providers of marketing and analytics services.

All parties process personal data in compliance with the requirements of the GDPR and applicable law.

11. Your Rights

Under Regulation (EU) 2016/679, you have the right to:

  • the right to access your personal data;

  • to correct inaccurate data;

  • to erasure (“right to be forgotten”) when the legal conditions are met;

  • the right to restrict processing;

  • the right to object to the processing;

  • the right to data portability;

  • to withdraw your consent at any time when the processing is based on consent;

  • to file a complaint with the Personal Data Protection Commission.

12. Security

Modu Concept EOOD implements appropriate technical and organizational measures to protect personal data, including:

  • SSL-encrypted connection;

  • restricted access to personal data;

  • protection of servers and information systems;

  • backups;

  • measures to prevent unauthorized access, loss, or unauthorized disclosure of information.

13. Policy Changes

Modu Concept EOOD reserves the right to update this Privacy Policy at any time in the event of changes to applicable laws, the services used, or the manner in which personal data is processed. The current version will always be published on the website.

14. Contacts

If you have any questions regarding the processing of personal data or wish to exercise your rights, please contact us:

Modu Concept EOOD

58 Bulgaria Blvd., Entrance C, 1st Floor, Office 1

EIK: 208565263

Email: privacy@modu-concept.com

17. Complaints

If you believe that the processing of your personal data violates applicable law, you have the right to file a complaint with the Commission for Personal Data Protection (CPDP) or with the competent court in accordance with applicable law, without this limiting your right to seek redress through other legal channels.