1. Who We Are

This website is operated by Vital Garden EOOD, a company registered in Bulgaria (referred to as “Vital Garden”, “we”, “us”, or “our”).

  • Website: https://vital-garden.com
  • Email: info@vital-garden.com
  • Registered address: Sofia, Bulgaria

We are the data controller for personal data collected through this website.

2. What Data We Collect and Why

2.1 Order Data

When you place an order, we collect: name and surname, delivery address, phone number, and email address. This data is necessary to process and deliver your order and to communicate with you about its status. The legal basis is performance of a contract (Article 6(1)(b) GDPR).

2.2 Payment Data

We offer cash-on-delivery (COD) as our primary payment method. We do not collect or store payment card details. Payment is handled directly upon delivery through our courier partners.

2.3 Communication Data

If you contact us by email or through the contact form, we retain your message and contact details to respond to your inquiry. The legal basis is our legitimate interest in responding to customer communications (Article 6(1)(f) GDPR).

2.4 Cookies and Tracking

We use cookies and similar technologies as described in Section 5 below.

2.5 Technical Data

Our website automatically collects standard technical information such as your IP address, browser type, and pages visited. This is used for website security and performance. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

3. How We Share Your Data

We share your data only where necessary:

  • Courier partners (Speedy / Econt): We provide your name, delivery address, and phone number to our courier partners in order to deliver your order. They are data processors acting under our instructions.
  • Hosting provider (Hostinger): Our website and its data are hosted with Hostinger. They process data on our behalf under a data processing agreement.
  • Facebook / Meta: We use Facebook Pixel to measure the effectiveness of our advertising. This may involve transmitting anonymised usage data to Meta Platforms Ireland Ltd. You can opt out through your cookie preferences.
  • Legal obligations: We may disclose data where required by Bulgarian law or EU regulation.

We do not sell or rent your personal data to third parties.

4. How Long We Keep Your Data

  • Order records: Retained for 5 years after the order date, as required by Bulgarian accounting and tax law.
  • Communication records: Retained for up to 2 years after your last contact with us.
  • Cookie data: Retention periods vary per cookie type — see Section 5.

After the relevant retention period, we securely delete your data.

5. Cookies

Cookies are small text files stored on your device. We use the following categories:

  • Essential cookies: Required for the website and shopping cart to function. These cannot be disabled. Examples: WooCommerce session cookies, CSRF protection.
  • Functional cookies: Remember your preferences (e.g., language, cart contents). These last up to 1 year.
  • Analytics cookies: Help us understand how visitors interact with the site. Data is aggregated and anonymised where possible.
  • Marketing cookies (Facebook Pixel): Track actions on our website to measure ad performance and allow Facebook to show you relevant ads. You can opt out at any time via our cookie banner or through Facebook’s ad settings.

You can manage or withdraw your cookie consent at any time through your browser settings or our cookie consent tool.

6. Your Rights Under GDPR

As an EU resident, you have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Ask us to correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your data, where we are not legally required to retain it.
  • Right to restriction: Ask us to restrict processing of your data in certain circumstances.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests, including direct marketing.
  • Right to withdraw consent: Where processing is based on consent (e.g., marketing cookies), you may withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at info@vital-garden.com. We will respond within 30 days.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the Bulgarian supervisory authority:

Commission for Personal Data Protection (КЗЛД / CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, Bulgaria
Website: https://www.cpdp.bg
Email: kzld@cpdp.bg

8. Data Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Our website uses HTTPS encryption for all data in transit. Access to order data is restricted to authorised personnel only.

9. Children’s Privacy

Our products and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Significant changes will be communicated to active customers by email.

11. Contact Us

For any questions about this Privacy Policy or your personal data, please contact:

Vital Garden EOOD
Email: info@vital-garden.com
Website: https://vital-garden.com

Last updated: April 2026