This policy explains what personal data we collect when you use letsgrowviral.com, why we collect it, and what your rights are under the EU General Data Protection Regulation (GDPR).
Who is responsible
The data controller is Simona Toshkova, trading as LetsGrowViral, Bulgaria.
Email: letsgrowviral.team@gmail.com
What we collect
- Order details: your email address, your first name (and last name, if you add it), your WhatsApp number (optional), the public link to your profile or post, any notes you add, the package, the price and the order date.
- How you found us: when you order, we note the website or campaign link that brought you to us (for example “instagram.com”) and whether you ordered from a phone or a computer. We read this only at the moment you order. No cookies are used for it.
- Payment: payments are processed by our payment partners (see section 4). We receive only the payment confirmation and a transaction reference, never your card details. If you pay with crypto, the payment happens on a public blockchain: your sending wallet address and the transaction are publicly visible there, and we keep the transaction reference with your order.
- Messages: your name, email address and message when you use the contact form or live chat.
- Newsletter: your email address, if you subscribe.
- Technical data: your IP address and browser details, which our hosting provider logs for security.
We never ask for your social media passwords.
Why we use it (legal basis)
- To process and deliver your order, send order emails and provide support. If you give us your WhatsApp number, we may message you there about your order. This is necessary for our contract with you (Art. 6(1)(b) GDPR).
- To understand which channels bring us customers. This is our legitimate interest (Art. 6(1)(f)).
- To answer your messages. This is necessary for a contract, or it is our legitimate interest in replying to you (Art. 6(1)(b) and (f)).
- To send the newsletter, with your consent (Art. 6(1)(a)). You can unsubscribe at any time.
- To keep the website secure and prevent fraud. This is our legitimate interest (Art. 6(1)(f)).
- To keep records required by tax and accounting law (Art. 6(1)(c)).
How long we keep it
- Order records: for as long as tax and accounting law requires (up to 10 years in Bulgaria).
- Messages: up to 2 years after our conversation ends.
- Newsletter: until you unsubscribe.
- Server logs: for a short period, usually a few weeks.
Cookies
We use only the cookies needed for the shop to work, such as keeping your selected package in your cart during checkout (WooCommerce session cookies). We don’t use advertising or tracking cookies. When you open the live chat, tawk.to sets its own cookies so the chat can remember your conversation.
Your rights
You can ask us to access, correct, delete, restrict or transfer your data, and you can object to processing based on legitimate interest. If you gave consent, you can withdraw it at any time. To make a request, just email us. We reply within one month.
You also have the right to complain to a data protection authority. In Bulgaria, this is the Commission for Personal Data Protection (cpdp.bg).
Security
The website uses HTTPS encryption. Access to order data is limited to the people who run the shop.
Children
Our services are for adults only. We don’t knowingly collect data from anyone under 18.
Changes
If we change this policy, we’ll publish the new version here with a new date.
Questions about this page?
Real people read every message. We usually reply within a few hours.