Privacy Policy

Last updated: 12 January 2026

Who we are

This Privacy Policy explains how GiantParts Ltd. (EIK 205791524), based in Plovdiv, Bulgaria ("we", "us" or "our"), processes personal data when you visit or use our website https://giantparts.eu, place an order, contact us, or otherwise interact with us.

For any questions about this policy or your personal data, you can contact us at: [email protected] 🇪🇺

What personal data we collect

Information you provide to us

Order information: name, billing and shipping address, email address, phone number, ordered products, and payment information (depending on the payment method used).
Account information (if you create an account): login details, order history, saved addresses and preferences.
Contact and support: information you provide when you contact us via the contact form or by email (name, email, message content and any additional information you choose to share).

Information collected automatically

Technical data: IP address, browser type, device information, operating system, date and time of access, and pages viewed.
Usage data: how you use and navigate the website, which pages you visit, and interactions with features such as search and filters.

Cookies and similar technologies

We use cookies and similar technologies to ensure the proper functioning of the website, improve performance, remember your preferences, and analyze website traffic. For more details, please refer to our Cookie Policy.

Why we process your data (legal basis)

We process personal data on the following legal grounds under the EU General Data Protection Regulation (GDPR):

Contract performance: to process and deliver your orders, provide customer support, manage your account, and fulfill our obligations under the Terms & Conditions.
Legal obligations: to comply with accounting, tax, and consumer protection laws, as well as other applicable regulations.
Legitimate interests: to improve our services and website, prevent fraud and abuse, protect our rights and property, and ensure the security of our systems.
Consent: where required by law, for example for certain types of cookies or marketing communications (if enabled in the future).

How we use your data

To process, confirm, and deliver your orders and handle returns or warranty cases.
To provide customer support and respond to your queries.
To operate, secure, and optimize our website and services.
To keep internal records, accounting documents, and proof of transactions.
To prevent fraud, abuse, and unauthorized access.

Who we share your data with

We do not sell your personal data. We may share personal data only with trusted service providers and partners, where necessary for operating our business and fulfilling our obligations:

Hosting and IT providers: companies that host our website and provide technical infrastructure and security.
Payment and financial service providers (if and when enabled): banks, payment processors or other financial institutions that process payments on our behalf.
Courier and logistics partners: to deliver your orders to the address you provide.
Professional advisers: accountants, auditors, or legal advisers where necessary.
Analytics and security tools: services used to analyze traffic, detect abuse, and improve security.
Public authorities: where required by law or a valid legal request.

International data transfers

Our main data processing activities take place within the European Union. If we transfer data to service providers outside the EU/EEA, we will ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

How long we retain your data

Order and invoice data: retained for the period required by applicable accounting and tax laws (typically up to 10 years).
Account data: retained for as long as your account is active. If you request deletion of your account, we will delete or anonymize data that is not required to be kept by law.
Contact form and email communications: typically retained for up to 12 months after the last interaction, unless a longer period is required for legal or contractual reasons.
Technical and usage data: retained for a shorter period necessary for security, analytics, and website performance, after which it is deleted or anonymized.

Your rights under GDPR

Subject to applicable law, you have the following rights regarding your personal data:

Right of access: to request confirmation whether we process your data and to receive a copy of it.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data where there is no legal obligation or overriding legitimate interest to keep it.
Right to restriction: to request restriction of processing in certain circumstances.
Right to data portability: to receive your data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
Right to object: to object to processing based on legitimate interests, including profiling related to such interests.
Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time (without affecting prior processing).
Right to lodge a complaint: to file a complaint with the competent data protection authority. In Bulgaria, this is the Commission for Personal Data Protection (CPDP).

To exercise any of these rights, please contact us at: [email protected]

Security

We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no online system can be completely secure, and we cannot guarantee absolute security of information transmitted via the internet.

Links to other websites

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of such third-party websites. We recommend that you review their privacy policies before providing any personal data.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other reasons. The updated version will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.

Contact us

If you have any questions, requests, or concerns regarding this Privacy Policy or our processing of your personal data, you can contact us at:

GiantParts Ltd.
Email: [email protected]
Location:
Bulgaria, Plovdiv