Privacy Policy

1. Controller and contact

The controller is famanty.com (“FAMANTY”, “we” or “us”). For access, deletion, objection or other privacy requests, email contact@famanty.com. We may ask for information needed to verify identity before acting on a request.

2. Data we collect

• Account and identity data: email address, account identifier, language, role and authentication records. Login uses a one-time code; FAMANTY does not ask you to create a platform password.
• Buyer and order data: contact/recipient name, telephone, address, city, postcode, ordered items, quantities, prices, producer, status, delivery notes, carrier, tracking number and label link.
• Producer and shop data: display and legal/trader details, contacts, descriptions, location, product listings, prices, availability, images and uploaded certificates or supporting documents.
• Communications and content: order messages, reviews, ratings, support requests, reports and content you publish.
• Courier integration data: carrier account username/identifier, encrypted credential or access secret, test-mode selection, sender details, shipment requests, labels and tracking responses. Saved secrets are not displayed back in the profile after saving.
• Technical data: IP address and device/browser information contained in server, security and authentication logs; essential cookies/session tokens; language preference; error and request metadata.
• Approximate or supplied location: city/region filters and addresses entered for listings or delivery. Map searches may send the search text and technical request data to the map/geocoding provider.

3. Where the data comes from

Most data comes directly from you. Buyers also provide recipient details, which may relate to another person; they must have permission to do so and should share this policy with that recipient. Producers receive order details from buyers. We receive authentication and storage records from our infrastructure provider, geocoding results from OpenStreetMap/Nominatim, and shipment or tracking results from the selected carrier.

4. Purposes and legal bases

• Contract and requested steps: create and secure accounts, display listings, split and manage orders, deliver messages, create labels and provide tracking.
• Legal obligations: retain required transaction and trader records, cooperate with authorities, handle consumer/product-safety matters and meet accounting, tax and data-protection duties.
• Legitimate interests: prevent fraud and abuse, secure and troubleshoot the service, moderate content, keep evidence of orders and disputes, improve usability, and communicate service-related information. We balance these interests against your rights.
• Consent: optional communications, non-essential cookies or other processing for which the interface asks permission. Consent may be withdrawn prospectively at any time.
• Legal claims and vital/public interests where applicable: establish, exercise or defend claims and respond to urgent safety or recall situations as allowed by law.

5. Who receives data

• The relevant buyer, producer or shop receives the information needed to conclude and fulfil the order and resolve related issues.
• Econt, Speedy or another carrier selected by the producer receives sender, recipient, contact, parcel, payment and delivery data needed to create and perform the shipment.
• Supabase provides authentication, database and file-storage infrastructure. Our hosting, email-delivery and technical-support providers process only the data needed for their services under appropriate safeguards.
• OpenStreetMap/Nominatim or another displayed map provider may receive search text, IP address and request metadata when geocoding is used.
• Competent authorities, courts, advisers, insurers or a purchaser of the business may receive data where legally required or reasonably necessary, with applicable safeguards.
• We do not sell personal data. Public producer/shop profiles, listings, reviews and any deliberately public information can be seen by website visitors and indexed by search engines.

6. International transfers

Some service providers may process data outside Bulgaria or the European Economic Area. Where this happens, we use a legally recognised transfer mechanism, such as an adequacy decision or standard contractual clauses, and supplementary safeguards where needed. Contact us for information about the mechanism relevant to your data. The operator must confirm provider regions before publication.

7. Retention

• Account/profile data is kept while the account is active and then deleted or anonymised after a reasonable closure period, except where a legal or dispute-related duty requires longer retention.
• Orders, invoices/transaction evidence and related communications are kept for the applicable accounting, tax, consumer-claim and limitation periods under Bulgarian law.
• Courier credentials are kept until the producer disconnects the integration, replaces them, closes the account, or retention is no longer necessary. Shipment identifiers remain with the related order record.
• Public content is kept until removed by you or us, subject to backups, legal duties and evidence needed for disputes or moderation decisions.
• Security, authentication and error logs are kept only for a proportionate troubleshooting and security period. Backups are overwritten on a controlled schedule.
• The operator must adopt and document exact retention periods before launch; we do not claim fixed periods that have not yet been configured and verified.

8. Cookies and similar storage

FAMANTY uses essential session/authentication cookies required to sign you in securely and a language cookie to remember Bulgarian or English. Essential cookies do not require consent where strictly necessary. If analytics, advertising or other optional technologies are introduced, they must remain off until the required consent is collected and this policy and the cookie controls are updated.

9. Security

We use access controls, authenticated database rules, encrypted transport and restricted server-side access appropriate to the service. Courier secrets are intended to be encrypted at rest and not returned to the browser after saving. No internet service can guarantee absolute security; please report suspected account or data compromise immediately. The operator must maintain encryption keys, access reviews, backups and an incident-response process in production.

10. Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests or direct marketing. You may withdraw consent without affecting earlier lawful processing. You may also complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority and seek a judicial remedy.

A request is normally answered within one month, subject to lawful extensions. Rights are not absolute: for example, we may retain order records required by law or information necessary to defend a claim. We will explain any refusal or limitation.

11. Children

FAMANTY is not directed to children and does not knowingly invite them to create independent commercial accounts. If you believe a child has provided personal data without the required parental involvement, contact us so we can investigate and take appropriate action.

12. Automated decisions and marketing

The currently described service does not use personal data for decisions producing legal or similarly significant effects solely by automated means, and does not sell profiles for targeted advertising. If this changes, we will provide the legally required information and choices before the new processing starts.

13. Changes to this policy

We may update this policy when the service, providers or law changes. The date above will be revised and material changes will be highlighted in the Platform or sent by email where appropriate. Changes do not retrospectively make an incompatible use of personal data lawful.