Privacy policy
Privacy Policy
Last updated: September 20, 2026
1. Who We Are
This Privacy Policy explains how ALPI 12 LTD, trading under the Pure Natura brand, collects, uses, stores and protects personal data when using the online store purenatura.eu.
Data Controller:
ALPI 12 LTD
ulitsa “364-ta”, 1360 Sofia, Bulgaria
UIC/BULSTAT: 207355689
Email: info@purenatura.eu
Phone: +359 896 366 498
2. What Personal Data We Collect
Depending on how you use the website, we may process the following categories of data:
Order Data
- first and last name;
- delivery address;
- telephone number;
- email address;
- order details;
- selected delivery method;
- selected payment method;
- information necessary to process the payment.
We do not store full payment card details when payment is processed by an external payment provider.
Contact Data
When you contact us by email, telephone or through another communication form, we may process the data you provide and the content of the communication.
Technical Data
When using the website, technical data may be processed, such as:
- IP address;
- browser type and version;
- device;
- operating system;
- information about visits and actions on the website;
- technical identifiers;
- data related to cookies and similar technologies.
3. Purposes for Which We Use Personal Data
We use personal data for the following purposes:
- accepting and processing orders;
- processing and delivering purchased products;
- communicating regarding orders;
- processing payments;
- customer service;
- processing returns, withdrawals and complaints;
- fulfilling legal and accounting obligations;
- preventing fraud and abuse;
- maintaining and protecting the security of the website;
- analyzing and improving the operation of the online store;
- sending marketing communications when we have the necessary legal basis and, where applicable, your consent.
4. Legal Bases for Processing
We process personal data only when we have an applicable legal basis under the GDPR.
Performance of a Contract
When processing is necessary for the performance of a contract or for taking steps at your request before entering into a contract.
This includes, for example:
- processing an order;
- arranging delivery;
- communicating regarding an order;
- processing a return.
Legal Obligation
When we are required to process data under applicable law, including accounting, tax and other regulatory requirements.
Consent
When processing is based on your consent, for example for certain marketing communications or non-essential cookies.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Legitimate Interest
In certain cases, processing may be based on our legitimate interest, for example for:
- protecting the website and information systems;
- preventing fraud;
- improving our services;
- protecting legal rights and interests.
In these cases, we assess whether our legitimate interest is not overridden by the interests or fundamental rights and freedoms of the individual.
5. Who We May Share Personal Data With
In order to fulfill orders and operate the online store, we may provide necessary personal data to service providers where this is necessary and lawful.
This may include:
- Shopify — the technology platform through which the online store operates;
- courier companies — for order delivery;
- payment providers — for processing payments;
- accounting and professional service providers;
- technical and IT service providers;
- electronic communication providers;
- marketing and analytics services, where applicable and where there is an appropriate legal basis.
We provide only the data necessary for the relevant purpose.
6. Shopify and Data Processing
The Pure Natura online store is operated through the Shopify platform.
Shopify may process personal data on behalf of the trader as part of providing its services.
When certain services are used, data may be transferred to or processed outside the European Economic Area.
For such transfers, the relevant mechanisms and safeguards provided for under applicable data protection legislation are applied.
7. International Transfers
When personal data is transferred outside the European Economic Area, this is done only where an applicable legal basis under the GDPR exists.
Depending on the specific provider and transfer, the following may be used:
- an adequacy decision by the European Commission;
- Standard Contractual Clauses;
- other mechanisms and safeguards permitted under the GDPR.
8. Data Retention Periods
We retain personal data only for as long as necessary for the relevant purpose or for as long as we are required to retain it by law.
Data related to orders and accounting documents may be retained for the periods required by applicable accounting, tax and other legislation.
Data used on the basis of consent for marketing purposes is processed until consent is withdrawn or until there is no longer a need to process it.
Technical and analytical data is retained for a period determined by the specific service and the website settings, where applicable.
9. Cookies
Pure Natura uses cookies and similar technologies for the operation, security and improvement of the website.
Cookies may be used for:
- basic website functionality;
- saving preferences;
- analyzing website usage;
- measuring performance;
- marketing purposes, where applicable.
Some cookies are strictly necessary for the operation of the website and cannot be disabled through the usual consent settings.
For non-essential cookies, where required by law, the relevant consent will be requested.
You can manage cookies through the available website settings and your browser settings.
10. Marketing Communications
We may send marketing communications only when we have an appropriate legal basis to do so.
When marketing communications are sent on the basis of consent, you may withdraw your consent at any time.
Where applicable, each marketing communication will provide an option to opt out of future communications.
11. Your Rights
Subject to the conditions and limitations provided for under the GDPR, you have the right:
- to access your personal data;
- to correct inaccurate or incomplete data;
- to erase data where the legal requirements are met;
- to restrict processing;
- to data portability where the applicable conditions are met;
- to object to certain types of processing;
- to withdraw your consent where processing is based on consent.
To exercise your rights, you may contact us at:
12. Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable law, you have the right to lodge a complaint with the competent supervisory authority.
For Bulgaria, this is:
Commission for Personal Data Protection (CPDP)
Sofia, Bulgaria
More information about the CPDP and how to lodge a complaint is available on the institution's official website.
13. Security
We implement appropriate technical and organizational measures to protect personal data against:
- unauthorized access;
- loss;
- unauthorized alteration;
- unauthorized disclosure;
- destruction;
- other forms of unlawful processing.
Despite the measures taken, no system for transmitting or storing data can be guaranteed to be completely secure.
14. Children's Data
The online store is not intended for children.
We do not intend to collect children's personal data through the website.
If we become aware that we have received a child's personal data without the necessary legal basis or consent, we will take reasonable steps to delete it where applicable.
15. External Websites and Services
The website may contain links or integrations to external websites and services.
We are not responsible for the privacy policies or practices of third parties.
We recommend that you review the privacy policies of the relevant external services before providing them with personal data.
16. Changes to the Privacy Policy
We may update this Privacy Policy in the event of changes in legislation, the services we use, the way the website operates or other circumstances that require a change.
The current version is always published on the website.
In the event of material changes, we may take additional steps to notify you where required under applicable law.
17. Contact Information
For questions regarding the processing of personal data or the exercise of your rights:
Pure Natura
ALPI 12 LTD
ulitsa “364-ta”, 1360 Sofia, Bulgaria
UIC/BULSTAT: 207355689
Email: info@purenatura.eu
Phone: +359 896 366 498