Privacy policy
This Privacy Policy describes how DNB Solutions EOOD (Ди Ен Би Солюшънс ЕООД), trading as Blessed by Dea-Victoria or BlessedByDV (the "Site", "we", "us", or "our"), collects, uses, and discloses your personal information when you visit blessedbydv.com, place an order, subscribe to our mailing list, or otherwise communicate with us (the "Services").
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed.
Data Controller
For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Bulgarian Personal Data Protection Act, the data controller of your personal information is:
DNB Solutions EOOD (Ди Ен Би Солюшънс ЕООД)
Druzhba 2, bl. 225, ent. A, ap. 23
Sofia 1582, Bulgaria
ЕИК / UIC: 203524017
VAT number: BG203524017
Manager: Atanas Kaloferov
Email: hello@blessedbydv.com
Instagram: @blessed.by.dv
Blessed by Dea-Victoria and BlessedByDV are trading names of DNB Solutions EOOD. You may see DNB Solutions EOOD on your invoice, on your bank or card statement, and on correspondence from us.
We have not appointed a Data Protection Officer, as we are not required to do so. Any question about your personal information should be sent to hello@blessedbydv.com.
Personal Information We Collect
Depending on how you interact with the Services, we may collect the following categories of personal information:
- Contact details including your name, email address, phone number, billing address and delivery address.
- Order information including the items you view, add to your basket or purchase, your order value, your order history, and any returns or exchanges.
- Payment information including your payment method, transaction confirmation, and the card type and last digits. We never receive or store your full card number - payments are handled entirely by our payment provider.
- Account information including, if you create an account, your username, password and saved preferences.
- Communications including anything you write to us by email, through our contact form, or on Instagram.
- Marketing preferences including whether you have subscribed to our mailing list and whether you have since unsubscribed.
- Technical information including your IP address, browser and device type, and how you move through the Site.
We do not collect special categories of personal data, such as information about health, religion or biometrics, and we ask that you do not send such information to us.
Where We Collect It From
- Directly from you - when you place an order, create an account, subscribe to our mailing list, or contact us.
- Automatically - from your device and browser as you use the Site, through cookies and similar technologies.
- From our service providers - for example when a payment provider confirms that a payment succeeded, or a carrier confirms a delivery.
How We Use Your Personal Information, and Our Legal Basis
Under the GDPR we must have a lawful basis for each use of your personal information. Ours are set out below.
| What we do | Legal basis |
|---|---|
| Take and fulfil your order, take payment, arrange delivery, handle returns and exchanges, and answer your questions about an order | Performance of a contract - Article 6(1)(b) |
| Issue invoices, account for VAT, and keep accounting and tax records | Legal obligation - Article 6(1)(c), under Bulgarian accounting, VAT and tax law |
| Keep the Site secure, prevent and investigate fraud, diagnose technical errors, and understand which products and pages are popular so that we can improve the shop | Legitimate interests - Article 6(1)(f). Our interest is in running a secure, functioning shop. We have considered your rights and consider this processing proportionate |
| Send marketing emails | Consent - Article 6(1)(a), which you may withdraw at any time |
| Set non-essential cookies | Consent - Article 6(1)(a), given through our cookie banner |
Marketing
Our Site includes a newsletter signup form. At the date of this Privacy Policy we are not sending marketing emails. If you subscribe, your email address is stored so that we may write to you about new pieces and restocks in future. We will only do so on the basis of your consent, every marketing email will contain an unsubscribe link, and you may ask us to delete your address at any time by emailing hello@blessedbydv.com.
We do not carry out automated decision-making or profiling that produces legal effects concerning you.
How We Disclose Personal Information
We do not sell your personal information. We share it only with the following recipients, and only so far as is necessary:
| Recipient | Purpose |
|---|---|
| Shopify Inc. | Hosting our store, processing orders, and store analytics |
| Shopify Payments, including Shop Pay, Apple Pay and Google Pay | Taking payment and carrying out fraud checks. Our payment provider acts as a controller in respect of its own legal obligations |
| Delivery carriers | Delivering your order. They receive your name, delivery address and phone number |
| Nfcube Ltd (Instafeed) | Displaying our Instagram feed on the Site |
| Bugsnag | Reporting technical errors so that we can fix them |
| Our accountant | Bookkeeping and statutory tax filings |
We may also disclose personal information where we are required to do so by law - for example to a court, a tax authority, or the police acting under proper legal authority.
Relationship with Shopify
The Services are hosted by Shopify Inc., which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you submit to the Services is transmitted to and shared with Shopify, and may be processed in countries other than the one in which you live. In some circumstances Shopify is itself responsible for the processing of your personal information, including for responding to requests to exercise your rights. To learn more, see the Shopify Privacy Policy.
Cookies and Similar Technologies
Cookies are small files stored on your device when you visit a website.
- Strictly necessary cookies keep your basket, your session and site security working. The shop cannot function without them, and they do not require your consent.
- Analytics and performance cookies tell us, in aggregate, which pages and products people look at.
- Marketing cookies would be used to measure advertising. We do not currently run any advertising or social media tracking pixels - we use no Google Analytics, no Meta Pixel, no TikTok and no Pinterest tracking.
Non-essential cookies are set only if you accept them through the cookie banner shown on your first visit. You may change your choice at any time through that banner or through your browser settings. Refusing non-essential cookies does not prevent you from shopping with us.
International Transfers
We are established in Bulgaria and most processing takes place within the European Economic Area. Some of our service providers, including Shopify, process personal information outside the EEA. In addition, if you place an order for delivery outside the European Union - for example to the United Kingdom or the United States - your delivery details will necessarily be passed to a carrier in that country.
Where personal information is transferred outside the EEA, we rely either on an adequacy decision of the European Commission in respect of the destination country, or on the European Commission's Standard Contractual Clauses together with any additional safeguards required. You may request details of the safeguards applied by emailing hello@blessedbydv.com.
How Long We Keep Your Personal Information
| Information | Retention period |
|---|---|
| Order records, invoices and accounting documents | For the period required by Bulgarian accounting and tax law |
| Customer account information | For as long as your account remains open, and for a short period after you close it |
| Newsletter subscription | Until you unsubscribe or ask us to delete it |
| Emails and messages | Normally up to two years after the matter is closed, and longer where a dispute is possible |
| Website analytics | In aggregated or anonymised form, which is no longer personal data |
When a retention period ends, we delete the information or anonymise it irreversibly.
Your Rights
Under the GDPR you have the right to:
- Be informed about how your personal information is used - which is the purpose of this Privacy Policy.
- Access a copy of the personal information we hold about you.
- Rectification of any personal information that is inaccurate or incomplete.
- Erasure of your personal information, where no legal obligation requires us to keep it.
- Restrict processing of your personal information in certain circumstances.
- Data portability - to receive your personal information in a machine-readable format, or to have it transmitted to another controller.
- Object to processing carried out on the basis of our legitimate interests.
- Withdraw consent at any time where our processing is based on consent. Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it.
To exercise any of these rights, email hello@blessedbydv.com. We will respond within one month, and will tell you if we need longer because your request is complex. We do not charge a fee, unless a request is manifestly unfounded or excessive. We may need to verify your identity before we can act.
Complaints
Please contact us first at hello@blessedbydv.com - most matters are resolved quickly.
You also have the right to lodge a complaint with the Bulgarian supervisory authority:
Комисия за защита на личните данни (Commission for Personal Data Protection)
2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Email: kzld@cpdp.bg
Phone: +359 2 915 3519
Web: www.cpdp.bg
The Commission requires complaints submitted by email to be signed with a qualified electronic signature. Complaints may also be submitted on paper or in person. If you live in another EU country, you may instead complain to the supervisory authority in that country.
Children's Data
The Services are not directed at children, and we do not knowingly collect personal information from anyone under the age of 14. If you believe that a child has provided us with personal information, please email hello@blessedbydv.com and we will delete it.
Security
We use Shopify's secure hosting, encrypted connections (HTTPS) across the whole store, and a payment provider that is PCI-DSS compliant. We never see your full card details. Access to order information is limited to those who need it. Please be aware that no security measures are perfect, and we cannot guarantee that information sent to us over the internet is completely secure.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons. The current version is always published on this page, together with the date on which it was last updated. Where a change materially affects your rights, we will make it prominent.
Contact
DNB Solutions EOOD (Ди Ен Би Солюшънс ЕООД), trading as Blessed by Dea-Victoria
Druzhba 2, bl. 225, ent. A, ap. 23, Sofia 1582, Bulgaria
Email: hello@blessedbydv.com