Privacy Policy

This Privacy Policy explains how L’unica collects, uses, stores and protects your personal data when you visit www.lunicaofficial.com, create a customer account, place an order, subscribe to marketing communications or contact us. L’unica събира, използва, съхранява и защитава Вашите лични данни при посещение на сайта www.lunicaofficial.com, създаване на клиентски профил, извършване на поръчка, записване за получаване на маркетингови съобщения или осъществяване на контакт с нас.

We process personal data in accordance with applicable Bulgarian and European data-protection law, including Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR).

This policy applies to website visitors, registered users, customers and people who contact us through the available communication channels.

Personal data we process

Order and delivery data

When you place an order, we process the information needed to accept, fulfill and deliver it. This may include your name, telephone number, email address, delivery address or selected courier office, parcel locker or other collection point, as well as information about the selected provider. We also process data about the products ordered, their size, color, quantity and value, the status and history of the order, and any return, exchange, complaint or refund.

Payment data

Depending on the selected payment method, we process information needed to carry out and confirm payment, including the payment method, transaction amount, status and identifier, and limited information provided by the payment operator. For card, Apple Pay or Google Pay payments, payment-instrument data is processed by the relevant payment service provider. L’unica does not store the full card number, security code or other complete payment-card data. For cash on delivery, we may receive information from the courier about collection and transfer of the amount due. L’unica не съхранява пълния номер на банковата карта, кода за сигурност или други пълни данни за платежната карта. При плащане с наложен платеж можем да получим информация от куриерската компания относно събирането и превеждането на дължимата сума.

Billing data

When you request an invoice, we process the information required to issue it, such as the name of an individual or legal entity, address, UIC where applicable, and other information required by law.

Customer account data

When you create and use a customer account, we process your name, email address, telephone number, delivery addresses, order history and saved preferences. Password data is stored in cryptographically protected form, so L’unica cannot access the original password. L’unica няма достъп до нея в нейния първоначален вид.

Communications data

When you contact us by email, contact form, social media or another channel, we process the information you provide, including your name, email address, telephone number, message, any attachments, and information relating to a particular order, product, return, exchange or complaint.

Returns, exchanges and complaints data

When handling a return, exchange or complaint, we may process customer and order data, the reason for the request, a description of the issue, delivery information, bank-account details where required for a refund, and correspondence relating to the case.

Marketing communications data

When you subscribe to our newsletter or consent to marketing communications, we process your name, if provided, email address and evidence of consent. If a newsletter platform is used, we may also process limited information about message delivery and interaction to improve our communications with you.

Technical data

When you visit the website, technical information is collected automatically, such as IP address, device and browser information, pages visited, date and time of the visit, and information collected through cookies and similar technologies.

Details about the use of cookies are set out in our Cookie Policy. Cookie Policy.

Purposes of processing

Accepting and fulfilling orders

We use the necessary personal data to accept, process and fulfill your order, arrange payment and delivery, inform you of its status, and assist with returns, exchanges or refunds. The data is also processed to perform all rights and obligations arising from the sales contract.

Arranging delivery

We provide the necessary data to the selected courier so that a waybill can be created, the parcel delivered and tracking information provided.

Processing payments and refunds

We process the necessary information to accept payment, determine the transaction result, prevent abuse and issue refunds where applicable.

Creating and managing a customer account

We use the data to create and maintain your account, give you access to your order history and make future purchases easier.

Customer service

We process data to respond to enquiries, provide information about products and orders, and assist with any issues.

Returns, exchanges, complaints and consumer claims

We process the information needed to review the request, establish the relevant circumstances and fulfil our legal and contractual obligations.

Accounting and tax obligations

Certain data is processed and stored for issuing documents, accounting and fulfilling obligations to competent authorities.

Protecting our rights and legitimate interests

In certain cases, we may process personal data to prevent fraud and abuse, protect the security of the website and our information systems, and establish, exercise or defend our rights and legitimate interests.

Sending marketing communications

We may send you news, offers, collection information and other marketing communications when you have given the necessary consent or another applicable legal basis permits it.

You can unsubscribe at any time using the unsubscribe link in the relevant message or by contacting us.

Improving the website and user experience

When you have consented to optional cookies, we may analyse how the website is used to improve its content, structure and functionality.

Nature of providing data

Providing personal data for an order, delivery, payment or complaint is contractually or legally required. Without this data, we cannot enter into the sales contract or deliver the requested items. contractually or legally required. Without this data, we cannot enter into the sales contract or deliver the requested items.. Без тези данни не можем да сключим договора за покупко-продажба или да доставим желаните артикули.

Providing data to receive newsletters and marketing communications is entirely voluntary and is not a condition of purchase. напълно доброволно и не е условие за извършване на покупка.

Data retention period

We retain personal data only for as long as necessary for the purposes for which it was collected, unless applicable law requires or permits a longer period.

Accounting and tax documents: retained for the periods required by applicable law (up to 10 years under the Tax and Social Security Procedure Code). retained for the periods required by applicable law (up to 10 years under the Tax and Social Security Procedure Code).

Customer account data: processed until the account is deactivated or deleted by the user. processed until the account is deactivated or deleted by the user.

Marketing data: processed until consent is withdrawn or the unsubscribe link is clicked.

Cookies: according to the periods specified in the Cookie Policy. Cookie Policy.

Sharing data with third parties

Courier and logistics companies

To arrange and fulfil deliveries, we provide the necessary personal data to the courier and logistics partners we use to fulfil your order. These companies process the data provided to them as independent controllers in accordance with their own privacy policies.

Payment service providers

For electronic payments, the necessary data is processed by the payment service provider, including Stripe, as well as participating banks, card schemes, Apple Pay or Google Pay when you select the relevant payment method.

Technical service providers

To operate and maintain the online store, we may use external service providers for hosting, e-commerce platforms, email systems, cybersecurity and technical support. We provide these suppliers only with the data necessary to perform the relevant service, and they are bound by confidentiality obligations and GDPR security standards.

Your rights

Right of access
You have the right to request confirmation and a copy of the data processed about you.

Right to rectification
You may request correction of inaccurate or incomplete data.

Right to erasure
Where the legal grounds apply, you may request deletion of your personal data. The right to erasure is not absolute. In certain cases, we may continue to retain the data, for example when necessary to comply with a legal obligation or to establish, exercise or defend legal claims. The right to erasure is not absolute. In certain cases, we may continue to retain the data, for example when necessary to comply with a legal obligation or to establish, exercise or defend legal claims.

Right to lodge a complaint
If you believe that we are infringing your rights, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP). Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Email: kzld@cpdp.bg | Website: www.cpdp.bg www.cpdp.bg

Other rights
Under the conditions provided by applicable law, you have the right to request restriction of processing and portability of personal data, to object to its processing, or to withdraw consent where processing is based on consent.

How to exercise your rights

To exercise any of these rights, you can send us a request at office@lunicaofficial.com. We will review your request within the statutory period of one month. office@lunicaofficial.com. We will review your request within the statutory period of one month.

Security

We apply modern technical and organisational security measures, including encryption, access controls, secure SSL/TLS protocols and backups. Nevertheless, no internet data transmission can guarantee absolute security, so we will respond promptly to any incident in accordance with legal requirements.

Cookies

The website uses cookies and similar technologies to function properly, remember user preferences and improve its use. Optional analytics and marketing cookies are used according to your selected settings. More information is available in our Cookie Policy.  Optional analytics and marketing cookies are used according to your selected settings. More information is available in our Cookie Policy. Повече информация можете да намерите в нашата Cookie Policy.

Links to external websites

The website may contain links to third-party websites or services. We are not responsible for how those third parties process personal data. We recommend reviewing the relevant website or provider’s privacy policy before providing personal information. We are not responsible for how those third parties process personal data. We recommend reviewing the relevant website or provider’s privacy policy before providing personal information.

Children’s data

The website and the services offered through it are not intended for children. We do not knowingly collect their personal data without parental consent. If we determine that we have received a child’s personal data in breach of applicable requirements, we will take steps to delete it. We do not knowingly collect their personal data without parental consent. If we determine that we have received a child’s personal data in breach of applicable requirements, we will take steps to delete it. If we determine that we have received a child’s personal data in breach of applicable requirements, we will take steps to delete it.

Changes

We may update this Privacy Policy when legislation, the website’s operation, the services used or personal-data processing activities change.

The current version is published on the website and takes effect from the date stated in it.

For material changes, we may provide an additional notice in an appropriate manner.

Last updated: 24 July 2026