Privacy Policy
Last updated: October 2026
Kizelle (“we”, “us”, “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit kizelle.eu and use our services, in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
Kizelle
Email: info@kizelle.eu
Website: kizelle.eu
2. Data We Collect
Account Information
When you create an account: name, email address, password (stored hashed), delivery addresses, phone number.
Order Information
When you place an order: name, email, phone, delivery address (BoxNow locker), order items, payment method, order notes.
Payment Data
Card payments are processed by myPOS. We do not store your card details — they are handled entirely by the payment processor.
Cookies & Device Data
We use cookies for site functionality, analytics, and preferences. See our Cookie Policy for details.
Usage Data
Pages visited, browser type, device, IP address (collected by Cloudflare for security and performance).
3. Legal Basis for Processing
- Contract performance — processing your orders, managing your account, delivering products.
- Consent — marketing emails, analytics cookies, newsletter subscription.
- Legitimate interest — fraud prevention, site security, improving our services.
- Legal obligation — tax and accounting records.
4. How We Use Your Data
- Process and fulfil your orders
- Manage your account and saved addresses
- Send order confirmations and shipping updates
- Send marketing newsletters (only with your consent; unsubscribe anytime)
- Improve website performance and user experience
- Prevent fraud and ensure security
5. Third-Party Processors
We share your data only with trusted service providers who process it on our behalf:
| Provider | Purpose | Data Shared |
|---|---|---|
| Cloudflare | Hosting, CDN, security | IP address, usage data |
| BoxNow | Parcel delivery (lockers) | Name, phone, locker selection |
| myPOS | Card payment processing | Order total, customer email |
| Brevo (Sendinblue) | Transactional & marketing email | Name, email |
6. Data Retention
- Account data — retained while your account is active. You may request deletion at any time.
- Order records — retained for 5 years for tax and legal purposes.
- Marketing consent — until you withdraw consent (unsubscribe).
- Cookies — see our Cookie Policy for retention periods.
7. Your Rights Under GDPR
As an EU resident, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure — request deletion of your personal data (“right to be forgotten”).
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to restrict processing — limit how we use your data.
- Right to object — object to processing based on legitimate interest or direct marketing.
- Right to withdraw consent — at any time, without affecting prior processing.
To exercise any of these rights, contact us at info@kizelle.eu. We will respond within 30 days.
8. Right to Lodge a Complaint
If you believe we are not handling your data correctly, you have the right to file a complaint with the Bulgarian supervisory authority:
Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- HTTPS encryption on all pages
- Passwords stored using PBKDF2 hashing with individual salts
- Cloudflare DDoS protection and WAF
- Access controls and role-based permissions
10. Changes to This Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically.
11. Contact Us
For any questions about this Privacy Policy or your personal data, please contact us:
Email: info@kizelle.eu
Website: Contact page