Privacy policy

Privacy Policy and Personal Data Protection of Hezo Kids Ltd.

I. General Information

Hezo Kids Ltd. (“Hezo Kids”) is a limited liability company registered in the Republic of Bulgaria under company registration number 208038535, with its registered office in Sofia. Our contact details are provided at the end of this document.

Hezo Kids acts as a data controller of personal data collected through the website www.hezokids.com .We recognize the importance of protecting the personal data of our customers and website visitors and take all necessary measures to ensure the security of processed personal data in compliance with all applicable national and European legislation, including the General Data Protection Regulation (GDPR).

This Privacy and Personal Data Protection Policy (“Policy”) aims to define the principles, conditions, and procedures under which personal data of users of the website www.hezokids.com is collected, processed, used, stored, and protected. It describes the types of personal data that may be collected, the purposes for which it is used, the methods of processing, and the options available to you for managing and controlling your information. The Policy also outlines your rights as a data subject and the measures taken by Hezo Kids to ensure lawful, secure, and confidential processing.

All personal data collected directly from you or by other lawful means is processed in accordance with applicable legislation and solely for the purposes specified in this Policy.

This Policy applies to all users of the website, regardless of how they access it, including via desktop computers, laptops, mobile phones, tablets, and other internet-enabled devices.

II. Acceptance of the Privacy Policy

Before using the website and its functionalities, we recommend that you carefully review this Policy.

If you do not agree with the terms described herein and do not wish your personal data to be processed accordingly, you should discontinue use of the website and refrain from providing any personal information.

By accessing, browsing, or using the website—including creating an account, placing an order, or using any services—you confirm that you have read, understood, and expressly agree to the terms under which your personal data is processed.

III. Legal Grounds for Processing Personal Data

We collect, use, process, and store your personal data only when we have a legitimate legal basis to do so. These include:

  • Consent: When you have explicitly given consent for specific purposes (e.g., receiving newsletters, offers, or promotions).
  • Contract performance: When processing is necessary to fulfill a contract with you (e.g., product purchase and delivery).
  • Legitimate interest: When necessary to protect our legitimate interests, provided your rights do not override them (e.g., improving services, customer support, fraud prevention).
  • Legal obligation: When processing is required to comply with applicable laws.

IV. What Personal Data We Collect and Process

Personal Data Provided by You

When using the website (e.g., registration, purchases, subscriptions, promotions), we may collect:

  • First and last name, gender, and date of birth
  • Email address and phone number
  • Delivery address and invoicing details
  • Preferences, interests, feedback, order history, and shopping behavior
  • Photos, images, names, and other visual identification data provided by you, which may relate to you or another person (including children under 8 years old), used solely to create personalized animated characters or other customized products

The first categories are required for account creation and order processing. The last category is used only for fulfilling personalized product orders.

Failure to provide required data may result in inability to use certain services.

Technical and Statistical Data

We may automatically collect technical data such as:

  • Device and browser information
  • IP address
  • Visit duration and frequency
  • Pages viewed, actions taken, and order details

This data is used for analytics, security, and improving website functionality, and is typically anonymized.

Payment Data

Depending on the payment method, payment-related information (e.g., bank or card data) may be required.

Hezo Kids does not store or access your payment details. These are processed directly by payment service providers under their own privacy policies.

V. How We Use Personal Data

We use collected data for:

  • Account creation and management
  • Processing and delivering orders
  • Creating personalized products
  • Sending order updates (SMS/email)
  • Customer support and communication
  • Marketing (with consent)
  • Responding to inquiries and complaints
  • Personalizing content and offers
  • Verifying user age
  • Ensuring website security and functionality

This website is intended for adults. We do not knowingly collect data from children under 14. Users under 18 must have parental consent.

VI. Sharing Personal Data

Personal data may be shared with:

  • Employees and service providers (e.g., logistics, IT, marketing)
  • Technology partners (for image processing, limited to necessary data only)
  • Government authorities when legally required

All third parties are required to ensure data protection compliance.

Data may be transferred outside the EU/EEA where necessary, with appropriate safeguards in place.

We do not sell or disclose personal data to unrelated third parties.

VII. Data Security

Our online store operates on the Shopify platform, which uses:

  • Data encryption (SSL/TLS)
  • Access controls
  • Security monitoring systems

All technical, physical, and organizational measures are implemented to prevent unauthorized access and ensure data confidentiality.

VIII. Your Rights

You have the following rights:

  • Access: Request confirmation and access to your data
  • Correction: Update or correct inaccurate data
  • Deletion (“Right to be forgotten”): Request deletion of your data
  • Restriction: Limit processing in certain cases
  • Objection: Object to processing (especially marketing)
  • Automated decision-making: Request human review
  • Complaint: File a complaint with the Bulgarian Data Protection Commission (www.cpdp.bg)

IX. Data Retention

We retain personal data only as long as necessary:

  • Order data: as required by law
  • Marketing data: until consent is withdrawn
  • Personalization data: until account deletion or request for erasure

Data is securely deleted or anonymized after retention periods expire.

X. Newsletters and Consent Management

You can manage or withdraw consent for marketing communications at any time.

To unsubscribe:

XI. Final Provisions and Contact

Policy Updates

Hezo Kids reserves the right to update this Policy at any time. Changes will be published on the website with an effective date.

Continued use of the website constitutes acceptance of updates.

Contact Information

For any questions or requests, contact us at:
Email: info@hezokids.com