Privacy policy

PRIVACY POLICY

PRIVACY AND PERSONAL DATA PROTECTION POLICY

Last updated: July 2026

"Ikigai Max" OOD (trading as Incasso) operates this store and website, including all related information, content, features, tools, products and services, to provide you, the customer, with a personalised shopping experience ("the Services"). The company is registered in the Commercial Register of the Republic of Bulgaria with UIC: 207741274 and registered office and address of management: Bulgaria, Dobroslavtsi, PC 1247. Incasso is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services, or communicate with us in any other way. If there is a conflict between our Terms of Use and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been collected anonymously or that has been anonymised so that it cannot be identified or reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from that personal information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

Contact data: including your name, address, billing address, delivery address, telephone number and email address.

Financial information: including payment card information, payment method, payment confirmation and transaction data. Important: When you choose to pay by credit or debit card, your card details are processed securely and directly by our certified payment processor Shopify Payments in accordance with the PCI-DSS standard. We do not store and do not have access to the full numbers and security codes (CVV) of your bank cards.

Account information: including your username, password, security questions, preferences and settings.

Transaction information: including the items you view, place in your cart, add to your wish list or purchase, return, exchange or cancel, as well as your past transactions.

Communications with us: including the information you include in communications with us, for example when you send an enquiry to our customer service department.

Device information: including information about your device, browser or network connection, your IP address and other unique identifiers.

Usage information: including information about your interaction with the Services, including how and when you interact with or navigate the Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you: including when you create an account, visit or use the Services, communicate with us or otherwise provide us with your personal information.

Automatically through the Services: including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies (including analytical and technical tools provided by Shopify).

From our service providers and partners: including when we engage third parties to support our technology (such as the Shopify platform) or to securely process financial transactions (such as our payment processor Shopify Payments), who collect or process your personal information on our behalf for payment and fraud prevention purposes.

From our partners or other third parties: in accordance with applicable data protection legislation.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

Providing, adapting and improving the Services: We use your personal information to provide the Services to you, including to fulfil our contract with you, to process your payments through our payment partner Shopify Payments, to fulfil your orders, to remember your preferences and items you are interested in, to send you notifications related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange delivery, to facilitate returns and exchanges, to enable you to post reviews and to create a personalised shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better personalise and improve the Services.

Marketing and advertising: We use your personal information for marketing and promotional purposes, such as sending marketing, advertising and promotional messages by email, text message or post, and to display online advertisements for products or services in the Services or on other websites, including based on products you have previously purchased or added to your cart, and other activities in the Services.

Security and fraud prevention: We use your personal information to authenticate your account, ensure secure payment and shopping, detect, investigate or take action in connection with potential fraudulent, illegal, dangerous or malicious activity, protect public safety and secure our services. When processing payments, our partner Shopify Payments uses technical transaction verification mechanisms to prevent financial fraud and unauthorised card use. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password or other access credentials with others.

Communicating with you: We use your personal information to provide you with customer service, to respond to you promptly, to provide you with effective services and to maintain our business relationship with you.

Legal and accounting purposes: We use your personal information to comply with applicable legislation (including the accounting and tax legislation of the Republic of Bulgaria for declaring income and sales to the National Revenue Agency) or to respond to valid legal processes, including requests from law enforcement or government authorities, to investigate or participate in civil discovery, potential or actual litigation or other legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Your Personal Information

In certain circumstances, we may disclose your personal information to third parties for lawful purposes, in accordance with this Privacy Policy. Such circumstances may include:

With Shopify, payment service providers and other third parties who perform services on our behalf: This includes the Shopify platform for technical support, the licensed payment processor Shopify Payments for the secure processing of online card payments, and courier companies (such as Econt) for the physical delivery of your orders. These providers have access to your personal information solely to carry out the tasks assigned to them on our behalf. The payment processor Shopify Payments may also process your data as an independent controller for the purposes of financial fraud prevention and compliance with regulatory requirements in the banking sector.

With business and marketing partners to provide you with marketing services and to advertise to you: We use Shopify, for example, to support personalised advertising with third-party services based on your online activity across different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy statements. In accordance with GDPR and applicable data protection legislation, you have the right at any time to instruct us not to share information about you for targeted advertising purposes.

When you instruct, request or otherwise consent to the disclosure of certain information to third parties: For example, to have products sent to a desired address or through the use of social media widgets and external platform login integrations.

With our partners or otherwise within our corporate group: For internal administrative and operational purposes.

In connection with business transactions and legal obligations: In the event of corporate changes such as a merger, acquisition or restructuring, as well as to comply with all applicable legal obligations (including responding to subpoenas, search warrants, requests from the National Revenue Agency or other government authorities), to enforce our Terms and Conditions or policies and to protect the Services, our rights and the rights of our users.

Relationship with Shopify

The Services are hosted on the Shopify platform, which collects and processes personal information about your access to and use of our Services in order to support the operation of our online store. The information you provide when using the Services is transmitted to and shared with Shopify, as well as with its associated third parties, who may be located in countries outside the European Economic Area (including the United States), for the purpose of providing, supporting and securing the Services. These international data transfers are carried out in compliance with the legal mechanisms under GDPR (such as Standard Contractual Clauses).

In addition, to protect, grow and improve our business, we use certain enhanced analytical features of Shopify that incorporate data and information derived from your interaction with our store. To provide these enhanced features, Shopify may process personal information collected about your interaction with our store together with data from other merchants in its network. In these circumstances, Shopify acts as a joint controller or independent controller for the processing of your personal information, including for responding to your requests to exercise your rights regarding the use of your data for these purposes. To learn more about how the platform uses your personal information, you can visit Shopify's official Consumer Privacy Policy and Shopify's Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites that are not associated with or controlled by us, you should review their own privacy and security policies and their terms and conditions. We do not guarantee and are not responsible for the privacy or security of such external sites, including the accuracy, completeness or reliability of information found on them.

Note: This limitation does not apply to our directly integrated and certified partners providing payment services (Shopify Payments) and logistics services, whose platforms are used in accordance with the highest security standards.

Information you provide in public or semi-public places, including information you share on our pages on third-party social media platforms (Facebook, Instagram, etc.), may also be visible to other users of the Services and/or users of those platforms, without limitation as to its use by us or a third party. The inclusion of such links on our site does not in itself imply endorsement of the content of those platforms or of their owners or operators, unless this is expressly stated in the Services.

Children's Data

Our Services are not intended for use by children and we do not knowingly collect or process personal information about persons under the age of 16. If you are a parent or legal guardian of a child who has provided us with their personal information without your consent, you may contact us immediately using the contact details provided below to request that this information be deleted from our systems. In accordance with GDPR and applicable legislation, we maintain a strict policy of not selling, sharing or transferring personal information to third parties for marketing purposes, particularly with regard to minors.

Security and Storage of Your Information

We take serious technical and organisational security measures to protect your data from unauthorised access, alteration or loss. Our website uses a secure SSL/TLS (HTTPS) connection that encrypts information between your browser and our server. All online payments are made in an encrypted environment through the secure gateways of Shopify and our payment processor Shopify Payments, in accordance with the international PCI-DSS security standard. However, please note that no internet security measure is absolutely impenetrable. We recommend that you do not use insecure channels (such as open social networks) to communicate sensitive information to us.

The period for which we store your personal information depends on the legal requirements in the Republic of Bulgaria and our operational needs:

Transaction data and accounting documents (invoices, sales reports): stored for a period of 10 years from 1 January of the year following the year in which the payment was made, in accordance with the requirements of the Tax and Social Insurance Procedure Code (TSIPC) for the purposes of the National Revenue Agency.

Profile and account data: stored until you decide to delete your account or for as long as you maintain an active business relationship with us.

Communication and complaint data: stored until the final resolution of the case and for the duration of the statutory warranty on the products.

Your Rights and Choices

Depending on where you live (with the General Data Protection Regulation — GDPR — applying to citizens of the European Union), you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may only apply in certain circumstances and in certain cases we may decline your request if this is permitted or required by law — for example where we are obliged to retain your order data for tax and accounting reporting purposes with the National Revenue Agency.

Right of access and information: You have the right to request confirmation of whether we process your personal data and to obtain access to and a copy of the information we hold about you.

Right to erasure ("right to be forgotten"): You have the right to request that we erase the personal information we hold about you. This right does not apply to data that we are legally required to retain for tax and accounting reporting purposes, or in the case of ongoing financial disputes and fraud prevention (including data required for verification by Shopify Payments and the National Revenue Agency).

Right to rectification: You have the right to request that we correct without undue delay any inaccurate or incomplete personal information we hold about you.

Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to request that we transfer it to another controller where this is technically feasible.

Managing communication preferences: We only send marketing and promotional emails with your explicit consent. You can unsubscribe at any time by using the unsubscribe link at the bottom of any of our emails. If you unsubscribe, we will continue to send you only mandatory administrative messages related to your orders, payments or account status.

If you live in the United Kingdom (UK) or the European Economic Area (EEA, including Bulgaria), subject to the exceptions and limitations provided for under applicable legislation, you may exercise the following rights in addition to those set out above:

Right to object to processing: You have the right at any time to object to the processing of your personal data where it is based on our legitimate interest or is carried out for the purposes of direct marketing. In the event of such an objection, we will cease the processing unless we can demonstrate that there are compelling legal grounds for doing so which override your interests.

Right to restriction of processing: You have the right to request that we stop or temporarily limit the processing of your personal information (for example, while we verify the accuracy of data at your request or in the event of an objection to lawfulness).

Withdrawal of consent: Where the processing of your personal information is based on your explicit consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent prior to its withdrawal.

You may exercise any of these rights through your user profile settings (where applicable in the Services) or by contacting us directly at incassowallets@gmail.com. To learn more about how Shopify uses your personal information and what rights you have in relation to data processed in the platform's cloud environment, you can visit Shopify's official Privacy Portal.

We guarantee that you will not be discriminated against or charged in any way for exercising any of your rights. Before processing your request, we may need to verify your identity by requesting additional information in order to protect the security of your data and prevent unauthorised access. In accordance with applicable legislation, you have the right to designate an authorised representative to submit a request on your behalf. Before accepting such a request, we will require written proof of authorisation and reserve the right to verify your identity directly with you. We will respond to your enquiry without undue delay and within the statutory period of 30 days from receipt of the request.

Complaints

If you have complaints or objections regarding the way in which we process your personal information, please contact us first at incassowallets@gmail.com so that we can find a quick and amicable resolution to the matter.

In accordance with GDPR, if you believe that your rights have been violated, you have the right at any time to lodge a complaint directly with the local data protection authority. For the Republic of Bulgaria this is the Commission for Personal Data Protection (CPDP):

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Email: kzld@cpdp.bg
Website: www.cpdp.bg

If you live in another country in the European Economic Area (EEA), you can find the contact details of your local supervisory authority in the official list of the European Data Protection Board.

International Data Transfers

Please note that in order to ensure the functioning of the Services, payments and deliveries, we may transfer, store and process your personal information outside the country in which you live (including outside the European Economic Area).

As our main technology partners Shopify and Shopify Payments are based in the United States, the transfer of personal data to them is carried out in strict compliance with the legal protection mechanisms under GDPR. We rely on recognised international transfer mechanisms, including the EU-U.S. Data Privacy Framework, under which our partners are certified, as well as the Standard Contractual Clauses (SCCs) approved by the European Commission. These agreements oblige recipients of data outside the EEA to ensure a level of protection of information equivalent to European standards.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our data processing practices or for other operational, legal or regulatory reasons (including upon the integration of new payment methods or services). All changes take effect at the time of their publication on the website. We will post the revised Privacy Policy on this page, updating the "Last updated" date at the top of the document. For more significant changes that affect your rights, we will provide you with additional notice (for example by email message) as required by applicable personal data protection legislation.

Contact

If you have questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, please email us at: incassowallets@gmail.com.

You can also reach us at our official correspondence address:
"Ikigai Max" Ltd.
Bulgaria, Dobroslavtsi, PC 1247

For the purposes of applicable data protection laws (GDPR), we are the Controller of your personal data.