Privacy policy

Privacy Policy

Last updated: 19 October 2026

This policy explains how SELECT PARTS BG OOD ("we", "SelectParts.BG") processes your personal data when you visit selectparts.bg, place an order, visit our store or contact us. We comply with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Bulgarian data protection law.

1. Who is the data controller

SELECT PARTS BG OOD, company ID (EIK) 206240144, VAT number BG206240144
Registered office: Mladost 3 residential complex, bl. 380, entrance 1, floor 8, apt. 50, 1712 Sofia, Bulgaria
Store: 39D Rozhen Blvd., 1271 Sofia, Bulgaria
Email: selectpartsbg@gmail.com
Phone: +359 888 123 185

2. What data we process

  • Contact and identity data: name, email, phone, delivery and billing address; for business customers also company name, company ID and VAT number.
  • Order data: what you order, price, delivery and payment method, returns, exchanges and complaints.
  • Payment data: payment confirmation and status. Card numbers are processed by the payment provider and we do not store them.
  • Account data: email, password (stored securely by the platform), preferences.
  • Communications: messages you send us by email, phone, Viber or through the website, and vehicle details (for example VIN) when you share them for a compatibility check.
  • Technical data: IP address, device and browser type, pages you view, and cookie data.

We receive data mainly directly from you and automatically when you use the website. We do not process special categories of data.

3. Purposes and legal bases

  • Performing an order and contract (Art. 6(1)(b) GDPR): accepting and delivering orders, payments, returns, exchanges, warranty service and helping you choose the right part.
  • Legal obligations (Art. 6(1)(c)): accounting, tax, issuing invoices, responding to requests from public authorities.
  • Legitimate interests (Art. 6(1)(f)): website security, fraud prevention, improving our services, defending against legal claims. You have the right to object to this processing.
  • Consent (Art. 6(1)(a)): newsletter and marketing messages, analytics and advertising cookies. You can withdraw consent at any time, without affecting processing before withdrawal.

4. Who receives your data

We share data only with providers who help us operate, and only as much as needed:

  • Shopify (platform, hosting, order and payment processing, security);
  • payment providers and banks (for example Shopify Payments, PayPal, Google Pay, Apple Pay);
  • couriers for delivery (Econt, BoxNow, DPD and others depending on the order);
  • our accountant and IT providers who maintain the website and order processing;
  • Google and Meta for analytics and advertising, only where you have given consent through cookies;
  • public authorities, where the law requires it.

We do not sell your personal data.

5. Transfers outside the EEA

Some providers, including Shopify, may process data outside the European Economic Area. In that case we rely on appropriate safeguards, such as a European Commission adequacy decision or Standard Contractual Clauses.

6. How long we keep data

  • Orders, invoices and accounting documents: up to 10 years, as required by accounting and tax law.
  • Communications, returns and complaints: up to 5 years after they close, to defend against possible claims.
  • Account data: while you keep your account, until you ask us to delete it.
  • Marketing: until you withdraw consent or unsubscribe.

7. Cookies

We use necessary cookies, without which the website and cart do not work. We use analytics and advertising cookies only with your consent, which you can give or withdraw through the cookie banner.

8. Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. We do not make decisions based solely on automated processing that have legal effects on you. To exercise your rights, write to selectpartsbg@gmail.com. We respond within one month. We may ask you to verify your identity.

9. Security

We apply appropriate technical and organisational measures: a secure connection (HTTPS), restricted access to data and providers with appropriate safeguards. No system is completely impenetrable, so please do not send sensitive information through unsecured channels.

10. Children

The website is not intended for persons under 18 and we do not knowingly collect data about children. If you believe a child has given us data, contact us and we will delete it.

11. Changes

We may update this policy. The current version is on this page, with the date of the last change.

12. Contact and complaints

For questions about personal data: selectpartsbg@gmail.com, +359 888 123 185. If you believe we process your data unlawfully, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority in the country where you live.