Privacy Policy
Last updated: August 31, 2026
This Privacy Policy explains what personal data PinkPact collects when you visit this website, request access, create an account or place an order, why we process it, who we share it with, and the rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR). It applies to visitors everywhere, not only in the European Union.
1. Data controller
The data controller responsible for your personal data is ИДЖЕЙ ЕНТЪРПРАЙСЕС ООД (UIC/ЕИК: 208675724, VAT: BG208675724), registered at бул. “Столетов” 150, 5300 Gabrovo, Bulgaria, trading as The Pink Pact (“PinkPact”, “we”, “us”), the operator of this website.
Contact email: support@thepinkpact.shop
2. Personal data we collect
Depending on how you use the website, we may collect:
- Identity and contact data: full name, email address, phone number.
- Order data: shipping and billing address, order history, product preferences.
- Account data: password (stored as a salted hash), language preference, Lounge rewards balance and tier.
- Technical data: IP address, browser type, device information, and pages visited.
- Communications: messages you send through the contact form and their replies.
We do not collect payment card details — payments are handled directly by Shopify Payments (see “Who we share it with”).
3. Why we use it, and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Granting invite-only access and creating your account | Performance of a contract (Art. 6(1)(b)) |
| Processing and delivering orders, payment confirmation | Performance of a contract (Art. 6(1)(b)) |
| Customer support and replying to contact messages | Legitimate interest (Art. 6(1)(f)) |
| Fraud prevention and website security | Legitimate interest (Art. 6(1)(f)) |
| Lounge rewards, referral tracking and order-related emails | Performance of a contract (Art. 6(1)(b)) |
| Analytics cookies (understanding site usage) | Your consent (Art. 6(1)(a)) — see Cookies below |
| Compliance with legal and tax obligations | Legal obligation (Art. 6(1)(c)) |
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.
6. International data transfers
Some of the providers listed above may process data outside the European Economic Area. Where that happens, we rely on safeguards recognized under GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, to keep your data protected.
7. How long we keep your data
We keep personal data only for as long as necessary for the purposes described above: account data for as long as your account is active, order data for as long as required by applicable tax and accounting rules, and contact-form messages for as long as needed to resolve your query. When data is no longer needed, we delete or anonymize it.
8. Your rights
Under the GDPR (and equivalent laws in other countries), you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data (“right to be forgotten”).
- Restrict or object to certain processing, including for direct marketing.
- Request a portable copy of the data you provided to us.
- Withdraw consent at any time (for analytics cookies, via the cookie settings link) without affecting past processing.
- Lodge a complaint with your national data protection supervisory authority.
To exercise any of these rights, contact us at support@thepinkpact.shop. We will respond within one month, as required by the GDPR.
9. Children’s privacy
This website is intended for users who are at least 18 years old, as stated in our Terms & Conditions. We do not knowingly collect personal data from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date at the top of this page.
11. Contact
Questions about this policy or your personal data? Email support@thepinkpact.shop or use the Contact us link in the site footer.
