Privacy & cookie policy.

This policy explains what personal data we collect when you use MyLayoutLab, why we collect it, who we share it with, and the rights you have over it.

Data controller

• Legal entity: Tentix EOOD
• Trading name: MyLayoutLab
• UIC: 208829033
• Registered address: 49A Bulgaria Blvd., floor 3, office 22, Sofia 1404, Triaditsa District, Bulgaria
• Contact for privacy matters: support@mylayoutlab.com
• Phone: +359 24 367 581

We handle personal data in line with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and applicable Bulgarian data protection law.

Scope

This policy applies to the MyLayoutLab website (mylayoutlab.com) and the products and services we provide there. It covers visitors to the site, people who register an account, and customers. This policy should be read together with our Terms & Conditions and any other privacy information we provide when collecting personal data.

What we collect

Information you give us

• Account details: your name, email address, securely protected account credentials, and your date of birth, which we use solely to confirm that you meet our minimum age requirement.
• Purchase details: your billing name, company name (if provided), billing address, phone number, purchased products, transaction references, payment status, refunds and related order information.
• Consent and preference information: your marketing preferences and records of when and how you provided or withdrew consent to receive marketing communications.
• Anything you send us when you contact support.

Information created as you use MyLayoutLab

• Your orders, purchase history, download history, download timestamps, IP address and basic account activity required to deliver products, prevent fraud and respond to payment disputes.

Information received from payment providers

We receive payment confirmation, transaction references, payment status and limited fraud or verification information from our authorised payment service providers. We do not receive or store your complete payment card details.

Information collected automatically

• Through cookies and similar technology: the pages you view, how often you visit, your device and browser details.

We do not ask for more personal data than we need and do not intentionally request or require special-category personal data. Please do not include such information in support communications unless it is necessary for us to address your request.

Why we use it, and our legal basis

• To create and manage your account, process orders, deliver products, provide customer support and send order confirmations, download information, security notices and other necessary account or service communications. Legal basis: performance of our contract with you or taking steps at your request before entering into a contract.
• To meet our legal duties, including maintaining accounting and tax records and responding to lawful requests from competent authorities. Legal basis: compliance with a legal obligation.
• To prevent fraud, protect our systems, manage payment disputes and chargebacks, maintain appropriate technical and security logs, and keep MyLayoutLab secure. Legal basis: our legitimate interests in protecting our business, customers and payment systems.
• To send optional marketing communications where you have chosen to receive them. Legal basis: your consent, which you may withdraw at any time by using the unsubscribe link or contacting us at support@mylayoutlab.com.

Who we share it with

We do not sell your personal data. We do not use personal data for automated decision-making or profiling that produces legal or similarly significant effects. Depending on how you use MyLayoutLab, we may share relevant personal data with the following categories of recipients, only to the extent necessary for them to provide their services to us:

• authorised payment service providers, to take and secure your payment (we do not store your full payment card details);
• hosting and infrastructure providers, to run the site and store your account and orders;
• service providers supporting the delivery of your digital products and customer support;
• communications and email service providers, to send order, account, support and, where consent has been given, marketing communications.

We may also disclose data where the law requires it, where it is needed to protect our rights, or as part of a business transfer such as a reorganisation or sale.

International transfers

Where personal data is transferred outside the European Economic Area, we use a lawful transfer mechanism, such as an adequacy decision adopted by the European Commission or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required. You may contact us to request further information about the safeguards used.

How long we keep it

We retain personal data only for as long as necessary for the purposes described in this policy:

• Account information: while your account remains open, including where it has been temporarily frozen due to inactivity, so that the account and access to previously purchased products can be restored. Following permanent account closure, information that is no longer required is deleted or anonymised within 30 days.
• Orders, invoices and accounting records: for 10 years from 1 January of the year following the relevant accounting period, or for any longer period required under applicable Bulgarian tax or accounting law.
• Payment, fraud-prevention, chargeback and dispute records: for five years after the relevant transaction or the resolution of the matter, unless longer retention is required by law, by an applicable payment-provider requirement, or for the establishment, exercise or defence of legal claims.
• Support correspondence: for two years after the relevant request is resolved, unless longer retention is necessary in connection with an order, complaint, dispute, legal claim or legal obligation.
• Marketing-consent records: while marketing communications are sent and for five years after consent is withdrawn or the last relevant marketing communication, where necessary to demonstrate compliance with consent and direct-marketing requirements.
• Essential cookie and technical data: essential cookies are retained only for as long as necessary for their stated purpose, as described in our cookie information. Related technical and security logs are retained for the period reasonably necessary to operate, secure and troubleshoot the website.

When the applicable retention period expires, we delete or anonymise the personal data unless continued retention is required by law or is necessary for the establishment, exercise or defence of legal claims.

Your rights

Subject to the conditions and limitations provided by the GDPR, you may request access to your personal data, correction of inaccurate or incomplete data, deletion of your data, restriction of processing, or provision of certain data in a portable format. You may also object to processing based on our legitimate interests and withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

To exercise any of these rights, contact us at support@mylayoutlab.com. We may request information reasonably necessary to verify your identity before responding. We will normally respond within one month, although the GDPR permits this period to be extended in certain circumstances. We will inform you if an extension is required.

If you believe that we have handled your personal data unlawfully, you may lodge a complaint with the Bulgarian Commission for Personal Data Protection at www.cpdp.bg or with the competent supervisory authority in the EU country of your habitual residence, place of work or the place of the alleged infringement. You may contact us first so that we have an opportunity to address your concerns, but you are not required to do so before contacting a supervisory authority.

Cookies

We currently use only essential cookies that the website needs in order to work, for example to keep you signed in, remember your basket and maintain security. These cookies do not require consent because the website cannot function properly without them.

You may control or delete cookies through your browser settings, although blocking essential cookies may prevent parts of the website from working. If we introduce analytics or other non-essential cookies, we will update this policy and request your consent before using them.

Data security

We implement appropriate technical and organisational measures designed to protect personal data, including access controls, secure communications and restricted access based on business need. Payments are processed securely by authorised payment service providers, and we do not store complete payment card details. Although no online service can be completely secure, we work to protect your information against unauthorised access, disclosure, alteration and destruction.

Children

MyLayoutLab is not intended for children. We do not knowingly collect personal data from children. You must be at least 18, or the age of majority where you live, to create an account or make a purchase.

Changes to this policy

We may update this policy from time to time. The current version, with its effective date, is always on this page.

Contact

For any privacy question, or to exercise your rights, contact us at support@mylayoutlab.com, or by post to Tentix EOOD, 49A Bulgaria Blvd., floor 3, office 22, Sofia 1404, Triaditsa District, Bulgaria.