Privacy Policy

This Privacy Policy aims to inform you in a clear and comprehensive manner about how Madman Fashion Ltd., operating under the trademark ArtyShocks, collects, uses, stores, and protects the personal data of users of the website artyshocks.bg, in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Directive 2002/58/EC (ePrivacy Directive), and the applicable Bulgarian and European legislation.

Data Controller

The Data Controller within the meaning of the GDPR is Madman Fashion Ltd.,
Company ID (UIC): 205261629,
with registered office and management address at: 35 Mladezhka St., Block D, Apt. 30, Troshevo District, 9009 Varna, Bulgaria,
telephone: +359 876 003 343,
email: info@artyshocks.bg.

Scope of This Policy

This Privacy Policy applies in all cases where you visit the website, place an order, create a user account, use the services provided by us, or otherwise communicate with us in connection with the website and its content.

Categories of Personal Data Processed

When using the website, the following categories of personal data may be processed: identification and contact data such as first and last name, billing and shipping address, telephone number, and email address; information related to orders placed, deliveries, returns, complaints, and correspondence; as well as technical data including IP address, device type, browser type, visited pages, and user actions on the website.

Payments by bank card are processed through the certified payment service provider Stripe. The Controller does not store and has no access to bank card details. Stripe acts as an independent data controller with respect to payment information and processes such data in accordance with its own Privacy Policy and internationally recognized security standards (PCI DSS).

Purposes and Legal Grounds for Processing

Personal data are processed only where a valid legal basis exists. Processing is necessary for the performance of a contract to which the data subject is a party, including order processing and delivery, payment handling, returns, and customer support.

In certain cases, processing is carried out to comply with legal obligations related to accounting and tax legislation.

On the basis of legitimate interest, the Controller processes personal data to ensure website security, prevent fraud, protect the rights and legitimate interests of the merchant, and improve the security and technical functionality of the website.

Where explicit consent has been given by the user, personal data may be processed for marketing and analytical purposes, including through tools such as Google Analytics and Meta Pixel (Facebook / Instagram). Data collected through these tools may include information about user actions on the website but is not used for direct identification of individuals. Consent may be withdrawn at any time.

Cookies and Similar Technologies

The website uses cookies and similar technologies to ensure its proper functionality, analyze traffic, and provide personalized advertising content. Analytical and marketing cookies are activated only after explicit user consent through the cookie management banner. Refusal of analytical and marketing cookies does not affect the ability to use the core functionalities of the website.

Recipients of Personal Data

Personal data may be disclosed to third parties only where necessary for the provision of services, such as e-commerce platform providers (Shopify), payment service providers (Stripe), courier and logistics partners, as well as analytics and marketing service providers, where a valid legal basis exists. All such parties process personal data under contractual arrangements and in compliance with GDPR requirements.

International Data Transfers

Some personal data may be processed outside the European Union by service providers such as Stripe, Google, Meta, and Shopify. In such cases, appropriate safeguards are applied, including Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms in accordance with applicable legislation.

Data Retention Periods

Personal data are retained for no longer than necessary for the purposes for which they were collected, unless a longer retention period is required by applicable law. Data related to accounting and tax documentation are retained in accordance with statutory requirements.

Rights of Data Subjects

You have the right to access your personal data, the right to rectification, erasure, restriction of processing, objection to processing, data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with the Commission for Personal Data Protection (www.cpdp.bg).

Children’s Data

The website is not intended for individuals under the age of 16, and the Controller does not knowingly collect personal data from children.

Data Security

The Controller implements appropriate technical and organizational measures to protect personal data. However, absolute security of data transmission over the internet cannot be guaranteed.

Contact Information

For any questions regarding the processing of personal data or to exercise your rights, you may contact us at info@artyshocks.bg, by phone at +359 876 003 343, or at the following address: 35 Mladezhka St., Block D, Apt. 30, 9009 Varna, Bulgaria.

Changes to This Policy

The Controller reserves the right to amend this Privacy Policy at any time. Any changes will be published on the website.

Last updated: [09.01.2026]