Privacy Policy

This Privacy Policy explains how “Herbona” OOD processes your personal data when you visit our website and place orders. We respect your privacy and process your data in accordance with Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

1. Data Controller

“Herbona” OOD (Herbona OOD)
UIC (EIK): 208876054, VAT: BG208876054
Address: Sofia 1000, Sredets district, 99 “G. S. Rakovski” St, entrance 3, floor 13, office 12
Manager: Hristo Borisov Klimentov
Email: info@herbona.bg · Phone:

2. What Personal Data We Collect

• Identification and contact data — first and last name, email, phone number;
• Delivery data — address, town/city, postal code, Speedy office;
• Order data — products purchased, amounts, order history, invoicing details;
• Technical data — IP address, browser and device data, cookies (see our Cookie Policy).

3. Purposes and Legal Grounds

• Performance of a contract (Art. 6(1)(b) GDPR) — processing and delivering your orders, managing your account, customer service;
• Consent (Art. 6(1)(a) GDPR) — marketing communications and newsletter, analytics and marketing cookies;
• Legitimate interest (Art. 6(1)(f) GDPR) — securing the website, preventing fraud and abuse, improving our services;
• Legal obligation (Art. 6(1)(c) GDPR) — accounting and tax obligations, issuing invoices.

4. Recipients and Processors

We share your data only to the extent necessary with:

• Speedy AD — courier delivery of your orders (name, phone, delivery address);
• Stripe — card payment processing. Your full card details are entered directly on Stripe’s secure page and never pass through or are stored by us;
• Our hosting and email service providers — technical operation of the website and sending transactional emails.

5. Retention Periods

• Orders and invoices — 10 years, as required by the Accountancy Act;
• Account data — until you delete your account;
• Marketing data — until you withdraw your consent.

6. Transfers Outside the EU

Some of our processors (e.g. Stripe) may process data outside the European Economic Area. Such transfers are protected by the European Commission’s Standard Contractual Clauses and appropriate safeguards.

7. Your Rights

Under the GDPR you have the right to: access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection to processing, and to withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, contact us at info@herbona.bg. You also have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP), Sofia 1592, 2 “Prof. Tsvetan Lazarov” Blvd, kzld.bg.

8. Cookies

We use cookies as described in our Cookie Policy. Analytics and marketing cookies are set only with your consent.