Privacy Policy Foxy RV EOOD

“We create games that care for your child’s mind and heart”

Administrator Information

“Foxy RV” EOOD (hereinafter referred to as “Foxy RV”, “Administrator”, or “We”) is a company registered in the Commercial Register of the Registry Agency with UIC (Unique Identification Code): 208159405, with its registered office and management address at: Sofia, zh.k. Svoboda, bl.2, ent. V, ap.54, Tel: +359 889738433, Email: foxyrv.shop@gmail.com

For questions regarding data protection: radoslavladimirov21@gmail.com

1. Our Approach to Your Data: Your Security is Our Responsibility

We create handmade wooden toys that care for the physical and mental development of children. We take the protection of your data just as seriously. We process information only in accordance with the GDPR, the Bulgarian Personal Data Protection Act, and following strict principles:

Minimal Data: We collect only what is necessary.
Transparency: We clearly inform you how we use the data.
Security: We apply encryption, access control, and physical measures.
Respect for Children: Extra precautions with children’s data (see point 2)

2. What Data Do We Collect and Why?

2.1.) Customer Data (parents, schools, shops):

For Order Fulfillment:
- Name, delivery address, phone number, email — for communication and delivery.
- Payment data — only for online purchases (processed by secure payment systems).
- Legal Basis: Contract
To Contact You:
- Order history, records from emails/calls — for warranty, support, and personalized service.
- Legal Basis: Legitimate Interest
For Marketing (only with your consent):
- Email for a newsletter — for promotions, new products, or educational play tips.
- Legal Basis: Consent

2.2.) Data Related to Children:

Important: We do not directly collect personal data from children under 16 without the explicit consent of a parent/guardian!
If an order includes personalization of a toy (name, birthday):
- This data is processed solely for the manufacture of the toy and is not stored after the order is fulfilled.
- Legal Basis: Contract + explicit consent from the guardian
Photos/reviews with children (e.g., for the website):
- We always require written consent from a parent with a description of the specific use.

3. How Do We Use the Data?

Purpose	Example	Legal Basis
Production & Delivery	Manufacturing a custom-ordered toy; coordination with a courier	Contract
Warranty & Support	Consultation on toy maintenance; replacement of a part	Legitimate Interest
Personalization	Engraving a name on a toy	Contract + Consent
Subscription/News	Sending educational play tips	Consent
Legal Compliance	Tax declarations; toy safety documentation	Legal Obligation

4. Who Do We Share Data With?

Suppliers: Courier companies (only address and phone number for delivery), banks (for payments).
Production Partners: Only anonymous data for trend analysis (e.g., “toys for 3-5 year olds are bought more in the summer”).
Government Bodies: NRA [Bulgarian National Revenue Agency], CPDP [Commission for Personal Data Protection], Consumer Protection Commission — only upon legal request.

We always guarantee: Confidentiality agreements and GDPR compliance with all partners.

5. Cookies

Our website uses cookies for:

🛒 Basic functionality: Shopping cart, saving preferences.
📊 Anonymous statistics: Google Analytics (without identification) — to improve the website.
✉️ Marketing: Only if you subscribe to the newsletter (to track effectiveness).

Cookie management: ⚙️ Browser settings or our consent banner.

6. Retention Periods

Type of Data	Retention Period	Reason
Order Data	5 years	Accounting Act
Payment Data	5 years	Tax Control
Marketing Emails	While active subscription	Consent
Personalization (child’s name)	Until the toy is shipped	Risk Minimization
Video Surveillance	Up to 30 days	Premises Security

7. Your Rights

You have the right to:

👁️ Access what data we store about you.
✏️ Correct inaccurate information.
🗑️ Delete your data (if there is no legal obstacle).
⏸️ Restrict the processing of your data.
📤 Port your data (in a machine-readable format).
✋ Object to marketing.
📝 Withdraw your consent at any time.

How to exercise your rights?
✉️ Send an email to: radoslavladimirov21@gmail.com with the subject line “Personal Data Protection”.
⏱️ We will respond within 30 days.

Supervisory Authority:
Commission for Personal Data Protection (CPDP)
Sofia 1592, “Prof. Tsvetan Lazarov” Blvd. No. 2 | www.cpdp.bg

8. Security is Our Priority

🔐 All data is stored encrypted.
🛡️ Strict access controls to systems.
🧩 Regular vulnerability checks.
📜 Staff trained on privacy policies.

9. Changes to the Policy

Updates will be published here:
🔗 Foxy RV EOOD Privacy Policy
Last updated: 01.09.2025

“We create toys that encourage children’s creativity, togetherness, and sincere, honest play. Protecting your data is a natural extension of these values.”