This is an English translation provided for convenience. If it differs from the Bulgarian version, the Bulgarian version prevails.
Last updated: 22 October 2026
Who we are
The controller of your personal data is MARNIYA EOOD, UIC 205724439, trading as The Clean Spot (The Clean Spot dry cleaners), 64 Deyan Belishki St, 1404 Sofia, Bulgaria. For any question about your personal data, contact us at [email protected] or on +359 878 199 399.
This policy explains what personal data we process when you use thecleanspotbg.com, our mobile app (which shows the same website), or order by phone or in our shops in Gotse Delchev and Mladost 3.
What data we collect and why
Orders and pickup requests
When you order or book a pickup, we process: your name, phone number, email address, pickup and delivery address (including entrance, floor, apartment and intercom details if you give them), the geographic coordinates of the address, your chosen day and time, the items and services, your notes, your order history and the payment method.
- We use this to fulfil your order: to collect and deliver your items, send you a confirmation, and contact you about the exact time and the price.
- We use the coordinates only to check that the address is within the area we serve.
- Legal basis: performance of a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).
We do not receive or store bank card details. Card payments are made on a POS terminal on delivery or in our shops and are processed by the bank.
Customer account and loyalty program
For every website order we create a customer account under the email in the order, if you don’t already have one. If you already have an account with the same email or phone number, the order is added to it. The account holds your orders from the website and from our shops, your loyalty points and your loyalty card barcode.
- This lets you see your orders in one place and earn points on every order.
- Legal basis: our legitimate interest in keeping your order history and offering a loyalty program (Article 6(1)(f) GDPR). Afterwards it forms part of our contract with you.
- We email you a link to set a password.
- If you don’t want an account, write to us and we will delete it. The orders themselves are kept for as long as the law requires.
Contact form
If you write to us through the form, we process your name, phone number or email, and your message, in order to reply. Legal basis: legitimate interest, and steps taken at your request before entering into a contract.
Invoices
If you ask for an invoice, we process the company and personal details the law requires. Legal basis: legal obligation (Article 6(1)(c) GDPR).
Website security
When you use the website, our servers and security providers record technical data: IP address, browser and time of the request. We use it to protect against spam, unauthorized login attempts and attacks. Legal basis: legitimate interest.
Address suggestions
While you type your address in the booking form, the text is sent to Google Maps to suggest matching addresses. Google processes this data under its own privacy policy.
Cookies, analytics and advertising
The website uses:
- Necessary cookies: your cart, your login and your cookie choice. The website cannot work without them. Legal basis: legitimate interest.
- Statistics and marketing, only with your consent: Google Analytics (visit statistics), Google Ads (ad measurement and remarketing) and the Meta Pixel for Facebook and Instagram (ad measurement and remarketing). Legal basis: consent (Article 6(1)(a) GDPR).
These services do not load until you accept the relevant cookies in the banner. Before you consent, Google receives only cookieless signals without identifiers (Google Consent Mode), which it uses to estimate visits in aggregate.
You can change or withdraw your consent at any time under “Cookie settings” at the bottom of every page.
Who we share data with
We do not sell personal data. We share it only with providers who work on our behalf and on our instructions, and only as far as necessary:
- the company that hosts the website, and Cloudflare (content delivery and website protection);
- Brevo (Sendinblue): sending order and account emails;
- Google: address suggestions in Google Maps, and Google Analytics and Google Ads only with your consent;
- Meta Platforms: the Meta Pixel, only with your consent;
- Automattic (Jetpack): login protection;
- our accountant and public authorities, where the law requires it.
Google and Meta may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
How long we keep your data
- Orders, invoices and accounting records: as long as accounting and tax law require (up to 10 years).
- Your account and points: until you ask us to delete your account.
- Contact form messages: up to 1 year after our last exchange.
- Technical security logs: up to a few months.
- Cookies: for the duration of each cookie, as shown in the cookie settings.
Your rights
You have the right to:
- access your data and receive a copy of it;
- have inaccurate data corrected;
- have your data erased, except data we are required by law to keep;
- restrict processing;
- receive your data in a machine-readable format (portability);
- object to processing based on legitimate interest;
- withdraw your consent at any time, without affecting processing that took place before you withdrew it.
To exercise your rights, email [email protected]. We reply within one month.
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg.
Security
The website only runs over a secure connection (HTTPS). Only staff who need your data for their work have access to it.
Automated decisions
We do not make decisions based solely on automated processing that have legal effects on you.
Changes to this policy
We may update this policy when we change the way we work. The current version is always on this page, with the date of the last change at the top.