Privacy policy
This policy explains what we do with your personal data when you visit enamelift.com, buy from us, or contact us. It is written to the GDPR, and it is meant to be readable rather than exhaustive. If anything here is unclear, email us and we will answer in plain words.
Last updated: 4 September 2026.
Who is responsible for your data
ENAMELIFT is the data controller. Bul. D-R G. M. Dimitrov 58, 1172 Sofia, Bulgaria. Email hi@enamelift.com. Full trader details are in the legal notice. We are small enough that the same address handles every request in this policy, and a person reads it.
What we collect
- What you give us when you order: name, delivery and billing address, email address, phone number if you add one, and what you bought.
- Payment details: handled by our payment providers at checkout. We receive a confirmation that the payment succeeded and the last digits and type of card. We never see or store your full card number.
- Your account, if you open one: your email address, your order history and your subscription settings. An account is optional.
- What you write to us: the content of emails and contact-form messages, so we can answer them.
- Technical data from your visit: IP address, browser and device type, and the pages you opened, collected by our platform to serve the site, keep your cart and stop fraud.
We do not ask for and do not want any special category data. Please do not send us health information in a message.
Why we use it, and on what legal basis
| What we do | Why | Legal basis |
|---|---|---|
| Take, pack, ship and track your order; run your subscription | To give you what you paid for | Performance of a contract, Art. 6(1)(b) |
| Send order confirmations, tracking, and subscription notices | They are part of the order | Performance of a contract, Art. 6(1)(b) |
| Answer your emails and handle refunds, complaints and claims | To support what we sold | Contract, and our legitimate interest in running the shop, Art. 6(1)(b) and (f) |
| Keep invoices and order records | Tax and accounting law | Legal obligation, Art. 6(1)(c) |
| Keep the site working, prevent fraud and abuse | To stay secure and available | Legitimate interest, Art. 6(1)(f) |
| Send marketing email | Only if you asked for it | Consent, Art. 6(1)(a), withdrawable any time |
Who else sees it
Only the companies that have to, and only for the job in front of them. None of them may use your data for their own purposes.
- Shopify, which hosts this store, our checkout and our customer accounts.
- Our payment providers, to take the payment and process refunds.
- The carrier that delivers your parcel, which needs your name, address and a contact detail.
- Our accountants and advisers, and any authority we are legally required to answer.
We do not sell your personal data, and we do not share it with advertising networks or data brokers.
Cookies and tracking
We do not run advertising trackers or analytics pixels on this site. The cookies we set are the ones the shop needs to work: keeping your cart, keeping you signed in, remembering your country, and protecting checkout from fraud. You can clear or block them in your browser, though the cart will stop working if you do.
If we ever add anything that is not strictly necessary, you will be asked for consent before it runs.
Where your data goes
Our platform and some of our providers are outside the European Economic Area, mainly in Canada and the United States. Where data leaves the EEA it travels under the safeguards the GDPR allows for that, normally the European Commission's Standard Contractual Clauses or an adequacy decision. Ask us and we will tell you which applies to a given provider.
How long we keep it
- Orders and invoices: for as long as tax and accounting law requires us to keep them, then deleted.
- Your account: until you ask us to close it.
- Emails to support: up to three years, so we can pick up a returning conversation and defend a claim.
- Marketing consent: until you unsubscribe.
Your rights
Under the GDPR you can ask us to:
- give you a copy of the data we hold about you, and tell you what we do with it;
- correct anything that is wrong;
- delete it, where we are not required to keep it;
- restrict what we do with it, or object to processing we base on legitimate interest;
- send it to you or to another company in a portable format;
- withdraw a consent you gave, at any time, without affecting what we did before you withdrew it.
Email hi@enamelift.com. We answer within one month, and it costs you nothing. We may ask one question to confirm it is really you.
Complaints
If we get it wrong, tell us first and we will fix it. You can also complain to a supervisory authority: ours is the Bulgarian Commission for Personal Data Protection, cpdp.bg, and you may instead go to the authority in the EU country where you live or work.
Automated decisions
We do not make decisions about you by automated means alone, and we do not profile you.
Children
This shop is for adults. We do not knowingly collect data from anyone under 18. If you think we have, email us and we will delete it.
Changes
When this policy changes we update the date at the top. If a change matters to you, we will say so by email before it takes effect.