This "Privacy Policy" describes how and when Bright Capital EOOD (UIC 202100318) collects, uses and shares with third parties the information that you have provided to us when purchasing goods from www.bright-toys.com or when contacting us (via the contact form on the page or at the e-mail and telephone number indicated on the page) or when subscribing to our newsletter. It aims to inform you about all the aspects of the processing of your personal data by Bright Capital EOOD and the rights you have in relation to this processing.
When collecting and processing your personal data, Bright Capital EOOD is subject to a number of laws and regulations that dictate how these actions are to be carried out, for what purposes and what guarantees for the protection of personal data are to be applied. The relevant legislation includes, but is not limited to, the General Data Protection Regulation (Regulation (EU) 2016/679 (GDPR)), the Personal Data Protection Act, as well as related acts.
Principles for processing personal data
We strive to process your personal data:
- in accordance with the law, fairly and in a transparent manner;
- only for the specific, explicit and legitimate purposes for which we have collected them;
- in the minimum amount necessary and while maintaining their accuracy and relevance;
- for specified periods depending on the purpose of the specific processing activity;
- by implementing appropriate technical and organizational measures that guarantee an appropriate level of security.
Personal information we collect
In order for us to fulfill your order, you must provide us with the following information: name, e-mail address, telephone number, postal address, information about the payment and delivery methods you have chosen, and information about the product(s) you are ordering; information about your username and password, if you are a registered customer.
We also process the following types of personal data: payment history, shopping history, and information about your e-mail newsletter subscription.
Why we need your information and how we use it
The legal grounds for requesting this information from you and then using and providing it to third parties are as follows:
1. Consent – we collect and process your personal data only when you have explicitly consented to the use of this information (which consent you can withdraw at any time) – for example, when you have subscribed to our newsletter. By accepting the General Terms and Conditions and registering in the online store or placing an order without registration, a contractual relationship is created between Bright Capital EOOD and you, on the basis of which we process your personal data.
2. We need the information:
- for the purposes of concluding and performing a distance contract - so that we can process, fulfil and account for your order;
- so that we can register and maintain your customer profile at www.bright-toys.com; to provide full functionality when using the online store (Registration and creating an account to use the online store is not a mandatory step in providing the service and the functionality of the store is accessible to a significant extent without creating an account.);
- sending a newsletter – only upon confirmed subscription;
- for accounting and statistical purposes;
- as well as to resolve disputes or to be able to provide you with information and assistance on the use of the products, their storage, etc.;
- if it is necessary to comply with the requirements of the Law in relation to your purchases - for example, with tax legislation;
-as necessary for the purpose of our legitimate interests, if those legitimate interests are not overridden by your rights or interests - for example, to improve the services and maintenance provided by us.
Information Sharing and Disclosure
Information about our customers is important to our business. We share your personal information for very limited reasons and in limited circumstances, as follows:
• Service providers. We engage certain trusted third parties to perform functions and provide services to our shop, such as delivery companies. We will share your personal information with these third parties, but only to the extent necessary to perform these services.
• Compliance with laws. We may collect, use, retain, and share your information if we have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce our agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of our customers, or others.
• We use service providers in the processing of personal data for certain purposes, such as measuring and tracking user behaviour on the site and obtaining feedback on our services and products. These companies are:
- Google – (with Google Analytics, Google Ads): https://privacy.google.com
- Trustpilot - Bright Capital Ltd. may contact you via e-mail to invite you to review our services and/or products you received from us in order to collect your feedback and improve our services and products (the “Purpose”). We use an external company, Trustpilot A/S (“Trustpilot”), to collect your feedback which means that we will share your name, email address and reference number with Trustpilot for the Purpose. If you want to read more about how Trustpilot process your data, you can find their Privacy Policy here.
• When you make payments to us, depending on the payment method you choose, your personal data may be transferred by us or you may provide it to third parties. You can review the practices and policies applied by these companies and make an informed choice on their pages – Paysera (www.paysera.com), PayPal (www.paypal.com), ePay.bg (www.epay.bg).
Data Retention
We retain your personal information only for as long as necessary to provide you with our services and as described in the Privacy Policy. However, we may also be required to retain this information to comply with legal and regulatory obligations, to resolve disputes, and to enforce our agreements. In other cases, the maximum period for which we retain your information is 1 year.
Your Rights
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. We describe these rights below:
• Access. You have the right to access the personal data we have about you, including receiving a copy of it. You can exercise this right in one of the following ways:
1. using the "My Personal Data" section in your account on www.bright-toys.com;
2. contacting us using the contact information provided on www.bright-toys.com or below.
You have the right to know what personal data we process about you, what we use it for and how we store it.
• Change, restrict, delete. You have the right to request the modification, restriction of use or deletion of your personal data. Absent exceptional circumstances (like where we are required to store data for legal reasons) we will generally delete your personal information upon request.
• Object and opt-out. You may refuse to give your consent to the processing of part of your personal data, as well as withdraw your consent to receive marketing communications from us. You can object to (i) our processing of some of your information based on our legitimate interests and (ii) receiving marketing messages from us after providing your express consent to receive them. In such cases, we will delete your personal information unless we have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
• Complain. If you reside in the EU and wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
Information about the competent supervisory authority for personal data protection in Bulgaria:
Name: Personal Data Protection Commission
Registered office and address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Correspondence address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
Website: www.cpdp.bg
How to Contact us
If you have any questions or concerns, you may contact us at info@toys-bg.com.
Alternately, you may mail us at:
Bright Capital Ltd.
kv. Borovo, bl. 231
1680 Sofia
Bulgaria
Information about the company that processes your data:
Name: Bright Capital EOOD
UIC/BULSTAT: 202100318
Registered office and management address: Sofia, Borovo district, block 231
Correspondence address: Sofia, Borovo district, block 231
Phone: +359 889292949
E-mail: info@toys-bg.com
Website: bright-toys.com
Update
This policy is updated by Bright Capital EOOD periodically, in order to be as clear, accurate, transparent as possible and to cover changes that have occurred with us (in case of need).
Date of last update - February 2025