Privacy Policy
Last updated: 17 July 2026
1. Data controller
Anomaly Ltd., UIC BG205337272, based in Sofia, Bulgaria, is the controller of personal data processed via izvanefir.bg.
Contact: contact@izvanefir.bg
2. Data we collect
- Order data: name, phone, email, delivery address and selected courier office.
- Payment data: processed by our payment provider (Revolut / Stripe). We do not store card numbers.
- Technical data: IP address, browser type and pages visited, used for security and analytics.
3. Legal basis
- Contract performance when you place an order.
- Legal obligation for accounting and tax reporting.
- Legitimate interest in fraud prevention.
- Consent for marketing communications, when provided.
4. Retention
- Order data: up to 10 years under Bulgarian accounting law.
- Technical logs: up to 12 months.
- Marketing data: until consent is withdrawn.
5. Sharing
- Couriers (Econt): only the data required for delivery.
- Payment providers: to process the payment.
- Hosting and IT providers: under strict confidentiality obligations.
We do not sell personal data to third parties.
6. Your rights
You have the right to access, correct, delete, restrict or port your data, and to object to processing. You may also lodge a complaint with the Bulgarian Data Protection Commission (kzld.bg).
Contact us at contact@izvanefir.bg and we will respond within 30 days.
7. Cookies
We use essential cookies for site functionality and the cart. Analytics cookies load only after your consent.
8. Changes to this policy
We may update this policy from time to time. The current version and the last-updated date are always available on this page.
