Privacy Policy

The data controller for personal data processed in connection with the La Cocona online shop is the trader listed below.

Retailer

АРТ КОКО ЕООД

EIK

208163791

Introducing

Теодора Николова Георгиева

Registered office address

8000 Burgas, ‘Izgrev’ residential estate, Block 190, 7th floor, Flat 25, Bulgaria

Email

sales@lacocona.com

Telephone

+359 879 651 567

If you have any questions or requests regarding your personal data, please email sales@lacocona.com.

• Orders and delivery: name, telephone number, email address, delivery and billing addresses, products ordered, total amount, chosen delivery method and payment status. We use this information to conclude and fulfil the purchase contract.
• Payment: Card payments are processed by the selected payment provider within the secure WooCommerce environment. La Cocona receives information regarding the status and the necessary accounting data, but does not store the full card number or its security code.
• User profile: login details, addresses and order history when you create an account on WooCommerce. This processing is necessary to provide the requested functionality.
• Contact and customer service: the data you send by email, as well as the information required to respond to enquiries, handle complaints, process returns or defend against legal claims.
• Product reviews: name, email, rating and review text. The email address is used for verification and will not be published. Once approved, the name, rating, text and Gravatar avatar (if available) may be displayed.
• Email newsletter: When you subscribe voluntarily, we process your email address, the source and the time of your consent. This record is stored in the secure WordPress admin panel and sent to Klaviyo so that you can receive news, new collections and special offers. You can unsubscribe via the link in any marketing email.
• Security and technical logs: IP address, date and time, billing address, browser, device and diagnostic data. These are used for security purposes, to prevent misuse and to ensure the reliable operation of the service.

• Performance of a contract or actions prior to the conclusion of a contract, for example, the processing and delivery of an order.
• Legal obligations, including accounting, tax and consumer legislation.
• Legitimate interest in security, fraud prevention, protection against claims and improving the shop’s core operations, subject to a balancing of your rights.
• Consent to optional analytics or marketing technologies and to digital marketing, where such services are enabled. Consent may be withdrawn at any time with future effect.

Only where necessary may the following details be provided:

• hosting providers, WordPress, WooCommerce and technical support;
• courier and logistics partners;
• banks and payment service providers;
• accountants, legal advisers and competent public authorities;
• e-marketing providers, including Klaviyo, and analytics or advertising service providers, only where valid consent has been given.

We do not sell personal data. Service providers receive only the information necessary for the specific service and are bound by contractual and legal obligations.

Some technology providers may process data outside the European Economic Area. In such cases, a recognised protection mechanism applies, such as an adequacy decision or standard contractual clauses, together with appropriate additional measures where necessary.

• order and invoice details: for the legally required accounting and tax deadlines;
• profile: whilst the profile is active and thereafter for the applicable statutory periods;
• correspondence: whilst necessary for responding to enquiries, providing customer service and handling claims;
• Unapproved or withdrawn reviews: until moderation is complete or the request is resolved;
• technical logs: for a limited period, necessary for security and diagnostics;
• Newsletter data: whilst consent is active, and after unsubscribing, only to the extent that limited data retention is necessary to prove consent, fulfil the unsubscription request or defend legal claims;
• Other data based on consent: until consent is withdrawn or until the expiry date specified for the relevant technology.

The shopping basket in the main shop is stored locally in your browser until you clear it. The ‘Favourites’ list is only stored for the current session on this page. This data is not sent to WooCommerce until you proceed to checkout.

Details on essential, analytical and marketing technologies can be found in Cookie Policy.

Under applicable legislation, you may request access to, rectification of, erasure of, restriction of, or data portability regarding your personal data, or object to its processing. You may withdraw your consent without this affecting the lawfulness of the processing carried out prior to withdrawal.

To exercise your rights, please write to sales@lacocona.com. We may request further information solely to verify your identity. The usual response time is up to one month.

You also have the right to lodge a complaint with The Personal Data Protection Commission.

We implement appropriate technical and organisational measures, including an encrypted connection, restricted access and regular updates. No system can guarantee absolute security.

This policy is updated whenever there are changes to our services or legal requirements. Significant changes will be clearly highlighted, and the date at the top will be updated.