Privacy Policy

We respect your privacy and process your data in line with the EU General Data Protection Regulation (GDPR). This page explains what we collect and why.

1. Data controller

WoollyWear is the data controller. Contact details are on our Contact page.

2. What we collect

• Account data: name, email, password hash (if you create an account).
• Order data: shipping address, phone, items ordered, order history.
• Payment data: processed by Stripe; we only store payment intent and session identifiers, never card numbers.
• Technical data: minimal cookies for authentication, IP for security/abuse prevention.

3. Why we use it

• To fulfil and ship your orders (contract — Art. 6(1)(b) GDPR).
• To meet tax and accounting obligations (legal obligation — Art. 6(1)(c)).
• To secure the site and prevent fraud (legitimate interest — Art. 6(1)(f)).

4. Who we share it with

• Printify — print and fulfilment of physical products.
• Stripe — payment processing and tax calculation.
• Lovable Cloud (Supabase) — hosting and database (EU region).

These are our only processors. We never sell personal data.

5. Retention

Order records are kept for the period required by Bulgarian tax law (currently 10 years). Account data is kept until you ask us to delete it.

6. Your rights

You may request access, correction, deletion, or portability of your data, and lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP). Write to the email on our Contact page.

7. Cookies

See our Cookie Policy.