Privacy Policy

Last Updated: February 2, 2026

1. Introduction

Welcome to CybexaTrade VCC.

At CybexaTrade, we are committed to protecting your privacy and handling your personal data in a transparent, secure, and lawful manner. This Privacy Policy explains how we collect, use, store, process, and protect your personal information when you visit our website, purchase products, communicate with us, or otherwise interact with our services.

This Privacy Policy has been prepared in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)

  • Applicable Bulgarian data protection legislation

  • European Union consumer protection regulations

  • Relevant ePrivacy and electronic communications requirements

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.


2. Data Controller

The controller responsible for processing your personal data is:

CybexaTrade VCC
(СайбексаТрейд ЕДПК)

Bratanitsa No. 12
4003 Plovdiv
Bulgaria

Company Registration Number (EIK): 208568715

VAT ID: BG208568715

Managing Director: Mariana Yakimova

Email: hello@cybexa-trade.com

Phone: +359 899 101 807


3. Personal Data We Collect

Depending on how you interact with our website, we may collect the following categories of personal data.

Identification and Contact Information
  • Full name

  • Billing address

  • Shipping address

  • Email address

  • Telephone number

Order and Transaction Information
  • Purchased products

  • Order history

  • Payment confirmation details

  • Shipping information

  • Refund and return information

Account Information

If you create an account, we may collect:

  • Username

  • Password

  • Account preferences

  • Saved addresses

Customer Service Information
  • Messages sent through contact forms

  • Customer support inquiries

  • Product customization requests

  • Feedback and reviews

Technical Information
  • IP address

  • Browser type

  • Device information

  • Operating system

  • Language preferences

  • Website usage data

Marketing Information
  • Subscription preferences

  • Newsletter interactions

  • Advertising engagement

  • Product interests


4. How We Collect Personal Data

We collect information from several sources.

Directly From You

When you:

  • Place an order

  • Create an account

  • Subscribe to our newsletter

  • Contact customer support

  • Request product information

  • Participate in promotions

Automatically Through Technology

When you visit our website, we may automatically collect information through:

  • Cookies

  • Pixels

  • Analytics tools

  • Website logs

  • Similar tracking technologies

From Service Providers and Partners

We may receive information from:

  • Shopify

  • Payment providers

  • Shipping companies

  • Advertising platforms

  • Analytics providers


5. Purposes of Processing Personal Data

We process personal data for the following purposes.

Contract Performance

To:

  • Process and fulfill orders

  • Arrange delivery

  • Manage payments

  • Process refunds and returns

  • Provide customer support

Account Management

To:

  • Create and maintain customer accounts

  • Remember customer preferences

  • Facilitate future purchases

Marketing and Communications

To:

  • Send newsletters

  • Provide promotional offers

  • Deliver personalized product recommendations

  • Display relevant advertising

You may unsubscribe from marketing communications at any time.

Website Improvement

To:

  • Analyze website traffic

  • Improve website performance

  • Enhance customer experience

  • Develop new products and services

Security and Fraud Prevention

To:

  • Prevent fraudulent activity

  • Verify transactions

  • Protect customers and business operations

  • Maintain website security

Legal Compliance

To:

  • Comply with tax regulations

  • Fulfill accounting obligations

  • Respond to lawful requests from authorities

  • Protect legal rights and interests


6. Legal Basis for Processing

Under Article 6 GDPR, we process personal data based on:

Contractual Necessity

Processing necessary for fulfilling orders and providing services.

Legal Obligations

Processing required by tax, accounting, and consumer protection laws.

Legitimate Interests

Processing necessary for:

  • Website security

  • Fraud prevention

  • Business administration

  • Service improvement

Consent

Where required, we process personal data based on your explicit consent, including:

  • Marketing communications

  • Optional cookies

  • Advertising technologies

You may withdraw consent at any time.


7. Payment Processing

We do not store complete payment card details.

Payments may be processed securely through certified payment service providers supporting:

  • Visa

  • Mastercard

  • American Express

  • Maestro

  • Apple Pay

  • Google Pay

  • Klarna

  • PayPal (where available)

All payment transactions are protected using SSL encryption and industry-standard security measures.


8. Shopify Platform

Our online store is powered by Shopify.

Shopify may process personal information to:

  • Operate our online store

  • Process orders

  • Facilitate payments

  • Prevent fraud

  • Improve platform performance

Shopify may process data in countries outside your country of residence.

More information is available at:

https://www.shopify.com/legal/privacy


9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to:

  • Enable website functionality

  • Remember preferences

  • Maintain shopping cart functionality

  • Analyze traffic

  • Improve user experience

  • Deliver relevant advertising

Detailed information is available in our Cookie Policy.


10. Analytics and Advertising Tools

We may use:

  • Google Analytics

  • Google Ads

  • Google Tag Manager

  • Google Consent Mode

  • Meta Pixel (Facebook Pixel)

  • Shopify Analytics

These services help us:

  • Measure website performance

  • Understand customer behavior

  • Improve marketing effectiveness

  • Deliver relevant advertisements

Where required by law, these technologies will only be activated after obtaining your consent.


11. Sharing Personal Data

We may share personal data only when necessary with:

Service Providers
  • Shopify

  • Payment processors

  • Shipping carriers

  • Cloud service providers

  • IT providers

Professional Advisors
  • Lawyers

  • Accountants

  • Auditors

Government Authorities

Where required by law.

We never sell personal data to third parties.


12. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

When such transfers occur, appropriate safeguards are implemented, including:

  • European Commission Standard Contractual Clauses (SCCs)

  • Adequacy decisions

  • Other lawful transfer mechanisms recognized by GDPR


13. Data Retention

We retain personal data only as long as necessary for:

  • Contract fulfillment

  • Legal obligations

  • Tax and accounting requirements

  • Dispute resolution

  • Fraud prevention

When retention is no longer necessary, data is securely deleted or anonymized.


14. Your Rights Under GDPR

If you are located within the European Economic Area, you have the right to:

  • Access your personal data

  • Correct inaccurate information

  • Request deletion of personal data

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Request data portability

  • Lodge a complaint with a supervisory authority

Requests may be submitted by contacting us using the details below.


15. Children's Privacy

Our website and services are not intended for individuals under the age of 16.

We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child, we will delete it promptly.


16. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against:

  • Unauthorized access

  • Loss

  • Misuse

  • Alteration

  • Disclosure

While we strive to protect personal information, no method of transmission over the internet can be guaranteed to be completely secure.


17. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices, content, or security of external websites.

Users should review the privacy policies of any third-party websites they visit.


18. Complaints

If you believe that your personal data has been processed unlawfully, you may contact us directly.

You also have the right to lodge a complaint with the competent data protection authority in Bulgaria or your local supervisory authority within the European Union.


19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or business developments.

The latest version will always be available on this website and will indicate the date of the most recent update.


20. Contact Information

CybexaTrade VCC

Bratanitsa No. 12
4003 Plovdiv
Bulgaria

Email: hello@cybexa-trade.com

Phone: +359 899 101 807

Managing Director: Mariana Yakimova