Privacy Policy

This Privacy Policy aims to inform you how "LutacovTechLabs", as the owner of the website lutacovshop.com (the "Site"), processes your personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation - GDPR).

Contact Information

We collect and process your personal data for specific, predetermined purposes and on a valid legal basis under the GDPR.

2.1 When you visit the Site

2.2 When you create a user account

Purpose: To create and manage your account; to identify you as our customer; to provide you with access to your purchased products and services.

Legal Basis: The performance of a contract to which you are a party (Article 6(1)(b) of the GDPR) – the user agreement for our Site and services.

2.3 When you make a purchase

Data: Details of your order (purchased templates/subscriptions), billing information (if applicable for invoicing).

Purpose: To process and fulfill your order; to deliver the digital content; to comply with our legal accounting obligations.

Legal Basis: The performance of a contract (Article 6(1)(b) of the GDPR) and compliance with a legal obligation (Article 6(1)(c) of the GDPR).

2.4 When you contact us

Data: Your name, email address, and the content of your communication.

Purpose: To respond to your inquiries, questions, or comments.

Legal Basis: Our legitimate interest (Article 6(1)(f) of the GDPR) to provide quality customer service.

Our Site uses cookies to enhance your user experience.

3.1 Types of Cookies

4.1 Third-Party Partners

4.2 Data Retention Period

• User Account Data: We store this for as long as you maintain an active account with us.
• Order and Accounting Data (Invoices): We retain this data for a period of 10 years as required by Bulgarian accounting law.
• Contact Inquiry Data: We store this for a reasonable period necessary to resolve the matter.

4.3 International Data Transfers

Some of our partners (such as Stripe and Google) are based in the United States. The transfer of data to them is carried out in compliance with strict security measures and legal mechanisms approved by the European Commission, such as Standard Contractual Clauses (SCCs), to ensure your data is protected.

You have the following rights regarding your personal data:

5.1 Your Data Rights

• The right to access: To receive a copy of the personal data we hold about you.
• The right to rectification: To request the correction of inaccurate or incomplete data.
• The right to erasure ("right to be forgotten"): To request the deletion of your data under certain conditions.
• The right to restrict processing.
• The right to data portability: To receive your data in a structured, machine-readable format.
• The right to object: To object to the processing of your data based on our legitimate interest.
• The right to lodge a complaint with a supervisory authority: In Bulgaria, this is the Commission for Personal Data Protection (CPDP).

We implement appropriate technical and organizational measures to protect your personal data from accidental loss, unauthorized access, or disclosure.

6.1 Security Measures

6.2 Changes to This Policy

We reserve the right to update this Privacy Policy. In the event of significant changes, we will notify you in an appropriate manner (e.g., via a notice on the Site or by email).