Privacy (shop)
Last updated: 11 November 2026.
This page supplements the general Garage 31 privacy policy with the data processing specific to the online shop: orders, customer accounts and enquiries.
Data controller
Eastern Industrial Zone Iztochen, bul. "Maritsa" 196, 4000 Plovdiv, Bulgaria
office@garage31.eu
+359894777042
What data we collect
When you order: name, email, phone, delivery address or courier office and, if you ask for an invoice, invoicing details. When you register: also your account login. When you send an enquiry: name, email and/or phone and the message. Card details are entered directly with the payment provider Stripe and are not stored by us.
Purpose of processing
Responding to inquiries, processing orders, and meeting legal obligations (e.g. accounting).
Retention period
Order, invoice and payment data are kept for 10 years from 1 January of the year after the order, as the Bulgarian Accountancy Act requires. Account data are kept while the account exists and are deleted or anonymised when it is closed, except what the law requires us to keep. Enquiries are kept for up to 12 months after the last contact.
Recipients of data
Data is processed by us and by hosting/email providers bound by data-processing agreements. We do not pass data to third parties for marketing purposes.
Cookies
The shop uses only strictly necessary cookies (session, CSRF protection, cart identifier). Analytics (Plausible) is cookieless. No cookie banner is shown as a result.
Your rights
You have the right to access, rectify, erase and object to the processing of your personal data — contact us via the Contact page.