This policy explains which personal data we use when you visit or shop on minimotohub.net, why, and who else receives it.
Controller
Aleks Anastasov (private individual), Blagoevgrad, Bulgaria, [email protected]. MiniMotoHub is a one-person handmade shop — you always write directly to the person who paints your helmet.
What we collect
• Orders: name, email, phone, delivery address, ordered products, personalisation text and, for delivery outside the EU, the customs details the carrier needs.
• Account (optional): email, name, a securely hashed password, saved addresses and favourites. If you sign in with Google, we receive your name and email from Google.
• Messages you send us, with any photos you attach.
• Newsletter (only if you sign up): email and language.
• Visit statistics: pages viewed, the link or ad you came from (e.g. utm tags, ad click ids), device type, browser, country (from the browser language or network) and what you put in the cart. We do not store your IP address for this; visitors are counted with a code that changes every day and cannot identify you.
• Payment: card data goes directly to Stripe and is never seen or stored by us.
Why and on what basis
• Making, shipping and supporting your order, your account and your messages — performance of the contract (Art. 6(1)(b) GDPR).
• Records required by tax and accounting law — legal obligation (Art. 6(1)(c)).
• Newsletter and the first-order discount code — your consent (Art. 6(1)(a)); you can unsubscribe with the link in every e-mail.
• One reminder e-mail if you started a checkout and didn't finish — our legitimate interest in helping you complete the order (Art. 6(1)(f)). It is sent only once; reply or write to [email protected] if you don't want it.
• Our own anonymous visit statistics, preventing fraud and keeping the shop secure — legitimate interest (Art. 6(1)(f)).
• Google Analytics, Google Ads and Meta (Facebook/Instagram) measurement and advertising — only with your consent in the cookie banner (Art. 6(1)(a)). You can change your choice at any time with “Cookie settings” at the bottom of every page.
Who receives your data
• Stripe Payments Europe (payments, Ireland).
• Mailgun / Sinch (sending our e-mails, EU servers).
• DigitalOcean (hosting, servers in Frankfurt, Germany) and Cloudflare (network protection and speed).
• Google (sign-in with Google; Analytics and Ads only with consent) and Meta Platforms (Pixel and Conversions API only with consent). With marketing consent, your email and phone are sent to Google and Meta only as irreversible hashes, to measure which ads led to orders.
• A1 Post / the postal operators and customs authorities along the route (delivery of the parcel).
Some of these companies are based in the USA. Transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell your data.
How long we keep it
Order data: as long as tax law requires (up to 10 years). Account and messages: until you ask us to delete the account. Newsletter: until you unsubscribe. Visit statistics: up to 26 months.
Cookies and browser storage
• Always on (needed for the shop to work): cart, chosen language and delivery country, login session, your cookie choice. Our own visit statistics use no cookies.
• Only with consent — Analytics: Google Analytics (_ga, _ga_*), up to 2 years.
• Only with consent — Marketing: Google Ads (_gcl_*) and Meta Pixel (_fbp, _fbc), up to 3 months; the source of your visit is remembered for 30 days so an order can be matched to the ad.
You can accept all, keep only the necessary ones, or choose per category in the banner, and change it at any time in “Cookie settings”.
Your rights
You can ask for access to, correction or deletion of your data, restriction of processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time — write to [email protected]. You can also complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or to the authority in your country.