Effective Date: October 28, 2026

Introduction

Your trust is of utmost importance to Френдс Ивентс ЕООД, and we fully recognize the critical value of your personal information. We are committed to implementing corresponding security protection measures in strict compliance with relevant legal regulations, to strive to ensure your personal information is safe and controllable during your use of our services on www.friendseventsstore.com. This Privacy Policy is formulated to clearly explain how we collect, use, store, protect and process your personal information, as well as the rights you hold in relation to your personal data.

This Privacy Policy applies to all products and services provided by us through our official website www.friendseventsstore.com, including but not limited to browsing our desktop decor collections, registering for a user account, placing product orders, completing payment procedures, subscribing to our newsletter, contacting our customer support team, and accessing all other interactive features on our platform. Please carefully read and fully understand the contents of this policy before using any of our services, especially the terms marked with key reminders. Once you start using our services, it means that you have fully understood and agreed to all the provisions of this Privacy Policy. If you do not agree with any part of this policy, please do not access or use our website services.

1. Data Controller Information

The controller of your personal information collected and processed through this website is:
‌Френдс Ивентс ЕООД‌
Contact Address: ж.к. Младост, бл. 425, вх. 4, магазин 4, Sofia, 1715
Contact Telephone: +359 70190089
Contact Email: [email protected]

We are the responsible operating entity for the www.friendseventsstore.com e-commerce platform, and we take full legal responsibility for all personal information processing activities carried out on this website.

2. Principles of Personal Information Processing

When we collect, store, use, transmit and otherwise process your personal information, we strictly abide by the following core principles in accordance with applicable data protection laws and regulations:

• ‌Lawfulness, Fairness and Transparency‌: All processing activities of your personal information are based on legal and legitimate grounds, and all relevant processing rules are presented to you in a clear, easy-to-understand and fully transparent manner.
• ‌Necessity and Data Minimization‌: We only collect the minimum scope of personal information that is directly necessary to provide you with the complete e-commerce services you request, and we do not collect any irrelevant information beyond the stated service purposes.
• ‌Purpose Limitation‌: All collected personal information will only be used for the specific purposes explicitly notified to you at the time of collection, and will not be reused for any other unrelated new purposes without obtaining your separate additional consent.
• ‌Accuracy and Traceability‌: We take reasonable measures to ensure that your stored personal information is accurate and up-to-date, and we maintain complete, auditable records for all data processing operations.
• ‌Security and Confidentiality‌: We implement comprehensive technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction or any form of illegal processing.

3. Scope and Purposes of Personal Information We Collect

We collect different types of personal information for the following specified service scenarios:

3.1 Information You Proactively Provide to Us

• ‌Account Registration Information‌: When you choose to create a user account on our website, we will collect your email address, username, and password you set for the account. This information is used to verify your identity, manage your account status, and provide you with personalized account-related services.
• ‌Order and Transaction Information‌: When you place an order to purchase our desktop decor, candle holders, ceramic vases, small ornaments and other products, we will collect your full name, delivery address, contact phone number, and order details including the products you select, order quantity and order amount. This information is essential to complete the order fulfillment, arrange product delivery, process after-sales requests and smoothly complete the entire transaction process.
• ‌Payment Information‌: When you complete the payment for your order, we will collect the necessary payment related information required to confirm the successful transaction. We do not store complete sensitive payment card information on our own servers, and all payment processing is completed through compliant and certified third-party payment service providers who have independently met strict data security standards.
• ‌Newsletter Subscription Information‌: When you voluntarily subscribe to our newsletter service to receive updates on new arrivals, promotional offers, and home decor styling tips, we will collect your submitted email address. We will only send you relevant marketing content in accordance with your subscription preferences, and you can opt out of such communications at any time through the unsubscribe link contained in each marketing email.
• ‌Customer Support Information‌: When you contact us via email, telephone or online message to consult product details, raise service concerns, or submit refund and return requests, we will collect the content of the information you send to our support team, which is used to efficiently respond to your requests, resolve your issues and continuously improve our customer service quality.

3.2 Information We Automatically Collect When You Use Our Website

When you browse and interact with www.friendseventsstore.com, our system will automatically collect the following information through cookies, web beacons and other similar tracking technologies:

• ‌Device Information‌: This includes your device model, operating system type and version, unique device identifier, browser type and language settings, and network connection information. This information is used to optimize the display adaptation of our website interface for different devices, ensure the stable operation of our website services, and prevent malicious network attacks.
• ‌Log Information‌: This includes your IP address, the time you access our website, the pages you view, the search keywords you enter on our site, the duration of your stay on each page, and the click and browsing operation records. This information is used to analyze user usage habits, optimize our website product layout and product recommendation logic, so as to provide you with a more smooth and in line with your preferences shopping experience.
• ‌Location Information‌: With your explicit separate consent, we may collect your approximate geolocation information derived from your IP address, which is used to provide you with region-specific product price display, reasonable shipping fee calculation, and targeted regional service prompts. You have the full right to withdraw your consent to our processing of your location information at any time.

3.3 Sensitive Personal Information

In the course of our normal service operation, we do not actively collect any special categories of sensitive personal information including biometric information, religious belief information, specific identity information, medical health information, or other types of sensitive personal information as defined by applicable data protection laws. If in very rare circumstances we need to collect and process any type of sensitive personal information to fulfill specific service requirements, we will fully inform you of the necessity of such collection, the potential impact on your legitimate rights and interests, and obtain your explicit separate consent before proceeding with any related processing activities. We strictly follow the minimal necessary principle for all sensitive personal information processing activities.

4. How We Use Your Personal Information

All your collected personal information will only be used for the following clear and legitimate purposes:

1. To provide, maintain, optimize and improve all the e-commerce services you request on our platform, including processing your orders, delivering the products you purchased, completing after-sales services such as return and refund processing, and ensuring that you can smoothly browse product pages, add products to your shopping cart and complete the entire shopping process.
2. To verify your identity, manage your user account, send you important service related notifications, including order status updates, delivery progress alerts, service function adjustment notices, and privacy policy revision reminders.
3. To personalize your shopping experience: we will analyze your browsing and shopping preferences within a reasonable scope, to recommend suitable desktop decor products that may interest you, help you quickly find the small ornaments, candle holders or vases that match your home styling needs, and display the website interface content adapted to your usage habits.
4. To ensure the security of our platform services: we use the collected information to conduct security risk monitoring, identify and prevent fraudulent transactions, malicious account cracking, network attack and other illegal and harmful activities, to protect the security of your account, transaction information and personal property safety.
5. To conduct anonymous statistical analysis for business optimization: after fully anonymizing and de-identifying your personal information, we will carry out statistical research on user group consumption trends, product sales situation, and website operation effect, which helps us to optimize our product selection, adjust our service processes, and further improve the overall service quality of our platform. The processed anonymized statistical data can no longer be associated back to your specific personal identity.
6. To comply with our legal regulatory obligations: when we are required by the mandatory provisions of applicable laws and regulations, or by the formal lawful requests from competent governmental authorities, we may process your personal information to fulfill our corresponding legal compliance responsibilities.

5. Sharing, Disclosure and Transmission of Your Personal Information

We will never sell, rent or otherwise transfer your personal information to any third parties for their own independent marketing purposes without your explicit separate consent. We only share your personal information with third parties under the following limited circumstances:

• ‌Trusted Service Providers‌: We may share the necessary minimum scope of your personal information with our qualified third-party service partners who provide support for our normal service operation, including logistics and delivery service providers who need your delivery address and contact information to deliver your purchased products, payment service providers who process your transaction payment, cloud service providers who host our website server, and IT technical support service providers who maintain the normal operation of our website system. All of our partner service providers are required to sign strict data protection agreements with us, which clearly stipulate that they can only process your entrusted personal information in strict accordance with our instructions, and must take sufficient security measures to protect your personal information, and may not use your personal information for any purposes other than the specific services they provide to us.
• ‌Legal Required Situations‌: When we have a good faith reason to believe that accessing, retaining or disclosing your personal information is reasonably necessary to comply with the applicable laws, legal procedures, court orders or mandatory governmental requests, we may disclose your personal information to the relevant competent authorities in accordance with legal requirements.
• ‌Merger, Acquisition or Asset Transfer‌: In the event that our company undergoes a merger, acquisition, or full or partial asset transfer transaction, we will ensure the confidentiality of all your personal information involved in the transaction, and we will give you prior notice before your personal information is transferred to the successor entity and becomes subject to a new different privacy policy.

We will not transfer your personal information to any third parties outside of the above explicitly stated situations, and all shared processing activities strictly follow the requirements of relevant data protection laws and regulations.

6. Data Storage and Security Protection Measures

6.1 Data Retention Period

We will only retain your personal information for the period of time that is strictly necessary to achieve the corresponding service purposes for which the information was collected. For example:

• For the personal information related to your orders, we will retain it for the full duration required to complete the order fulfillment, and also retain the relevant data in compliance with the statutory commercial and tax document retention period required by applicable local laws. After the corresponding retention period expires, we will completely delete or anonymize the relevant personal information in accordance with our standardized data disposal procedures.
• For the information stored in your user account, we will retain it throughout the entire valid period of your account. After you submit an application to cancel your account, we will delete all your relevant personal information within a reasonable period as required by law, except for the information we are obligated to retain due to legal regulatory requirements.
• For the information you provided when subscribing to the newsletter, we will retain it until you choose to unsubscribe from the newsletter service.

6.2 Security Protection Measures

We have implemented a multi-dimensional layered data security protection system combining technical measures and management measures to fully protect your personal information security:

1. We use industry-standard SSL data encryption technology during the data transmission process on our website, which ensures that all your data transmitted between your browser and our server is encrypted and cannot be intercepted or stolen by unauthorized third parties during the transmission process.
2. All your personal sensitive information stored on our server is encrypted through advanced irreversible encryption algorithm, and we adopt strict data access control permission mechanism, which only authorizes a very limited number of specially designated personnel who need to process the data to contact your personal information, and all access operations are recorded in a full traceable security audit log.
3. We regularly carry out comprehensive information security risk assessment and internal data compliance audit, continuously update our security protection technology solutions according to the latest industry security trends, and formulate a complete personal information leakage emergency response plan. Once any personal information security incident occurs, we will immediately start the emergency mechanism, take measures to control the risk expansion, and notify you and the relevant regulatory authorities in strict accordance with the legal requirements.

7. Your Rights Over Your Personal Information

In accordance with applicable data protection laws, you enjoy the following comprehensive rights over your personal information processed by us:

1. ‌Right of Access‌: You have the right to submit a request to us to obtain a copy of all your personal information that we hold, and to get clear information about how we process your personal information.
2. ‌Right to Rectification‌: If you find that the personal information we hold about you is inaccurate or incomplete, you have the right to request us to correct and update the relevant information without any unnecessary delay.
3. ‌Right to Erasure (Right to be Forgotten)‌: Under the circumstances that the purpose for which we collected your personal information no longer exists, or you withdraw your consent to our data processing, or our processing of your personal information no longer has any legitimate legal basis, you have the right to request us to completely delete your personal information from our system. We will process your request in time, except for the information that we are legally required to retain.
4. ‌Right to Restriction of Processing‌: You have the right to request us to restrict the processing of your personal information under specific situations, for example when you contest the accuracy of your personal information, during the period that we need to verify the accuracy of the relevant data.
5. ‌Right to Data Portability‌: You have the right to request us to provide your personal information that you have provided to us in a structured, commonly used and machine-readable format, or to request us to directly transmit the relevant data to another data controller where technically feasible.
6. ‌Right to Withdraw Consent‌: You have the full right to withdraw the consent you previously granted to us for processing your personal information at any time. The withdrawal of your consent will not affect the legitimacy of any data processing activities that we have already carried out based on your consent before you withdraw it.
7. ‌Right to Object‌: You have the right to object to our processing of your personal information for the legitimate interests related purpose at any time, and we will stop the relevant processing activities unless we can demonstrate that we have compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is for the purpose of establishing, exercising or defending legal claims.

If you need to exercise any of the above rights, you can submit your request to us through the contact email [email protected], or contact our customer support team via the phone number +359 70190089. We will verify your identity in accordance with the relevant rules, and respond to your request within the time limit required by applicable data protection laws. We will not charge any unreasonable fees for processing your legitimate rights request.

8. Protection of Minors’ Personal Information

Our e-commerce platform is a consumer platform oriented to adult users, and we do not intentionally collect any personal information from minors under the age of 14. If you are a minor under 14 years old, please do not submit any of your personal information to our website, and you can only use our platform services with the guidance and explicit consent of your legal guardian. If we accidentally collect the personal information of a minor under 14 years old without the verified consent of the minor’s legal guardian, we will immediately take measures to delete the relevant information completely from our server.

9. Amendments to This Privacy Policy

We may appropriately update and revise the contents of this Privacy Policy in due course, to adapt to the adjustment of our service operation situation, meet the new requirements of the latest applicable legal regulations, and better protect your personal information rights. When we make any revisions to this Privacy Policy, we will publish the updated version on the privacy policy page of our official website www.friendseventsstore.com, and we will notify you of the relevant important revisions through appropriate notification channels, such as sending a notification email to your registered email address, or displaying a prominent prompt notice on the homepage of our website. The revised new version of the Privacy Policy will take effect on the effective date stated in the updated version. Your continued use of our services after the effective date of the revised Privacy Policy will be regarded as that you have fully understood and agreed to all the contents of the revised policy.

10. Contact Information and Complaint Resolution

If you have any questions, comments, suggestions or complaints about this Privacy Policy, or our personal information processing practices, you can contact our data protection related team at any time through the following channels:

• Mailing Address: ж.к. Младост, бл. 425, вх. 4, магазин 4, Sofia, 1715
• Telephone: +359 70190089
• Email: [email protected]

We will verify and respond to your inquiry or complaint as soon as possible after receiving your contact message, and we will try our best to resolve your relevant concerns about personal information protection satisfactorily. If you think that our personal information processing activities have violated the relevant data protection laws and harmed your legitimate rights and interests, you also have the right to submit a complaint to the competent local data protection supervisory authority.