Privacy Policy

Last updated: 12/09/2025


This Privacy Policy explains how Shopping Online Ltd (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website https://codebeautyline.com (the “Site”), purchase our products, or otherwise interact with us.


We are committed to safeguarding your privacy and complying with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Bulgarian data protection law.

1. Who We Are

Shopping Online Ltd


Shipchenski Prohod Blvd. No. 23, Sofia, Bulgaria
Email: support@codebeautyline.com


We are the data controller responsible for your personal data.

2. Data We Collect

We may collect the following types of data:

  • Identity data: name, date of birth (if required for verification).

  • Contact data: email, phone number, billing and shipping address.

  • Account data: login details, preferences, saved items.

  • Order data: products purchased, payment method, delivery details.

  • Payment data: processed securely by our payment providers (e.g., Stripe). We do not store full card details.

  • Usage data: IP address, browser type, operating system, referring URLs, Site interactions.

  • Marketing data: your preferences for receiving newsletters, offers, or promotions.
3. How We Use Your Data

We process your personal data for the following purposes:

  1. To fulfill your orders: processing payments, shipping, returns, and customer support.

  2. To manage your account: registration, login, security.

  3. To communicate with you: responding to inquiries, service notifications.

  4. To improve our Site: analytics, troubleshooting, user experience optimization.

  5. To send marketing: newsletters, promotions (only with your consent).

  6. To comply with law: record-keeping, tax, and consumer protection obligations.
4. Legal Bases for Processing

We rely on the following lawful bases under GDPR:

  • Contract: to fulfill our obligations when you place an order.

  • Legal obligation: to comply with consumer, tax, or accounting laws.

  • Consent: for marketing, cookies, and optional data you provide.

  • Legitimate interest: to improve our services, prevent fraud, and protect our Site.
5. Cookies and Tracking

Our Site uses cookies and similar technologies. Some are essential for functionality; others help us analyze usage and provide personalized marketing.

You can manage cookie settings via our Cookie Banner and your browser preferences. For details, see our Cookie Policy.

6. Sharing Your Data

We do not sell your personal data. We may share limited data with:

  • Service providers: payment processors, couriers, IT/hosting providers, analytics, and email marketing tools.

  • Authorities: if legally required (e.g., tax authorities, regulators).

  • Business transfers: if we restructure, merge, or sell the business.

All third-party partners are contractually bound to protect your data in accordance with GDPR.

7. International Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure adequate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

8. Data Retention

We keep personal data only as long as necessary:

  • Order & transaction records: up to 10 years.

  • Account data: as long as your account remains active.

  • Marketing data: until you unsubscribe or withdraw consent.

  • Technical logs: generally up to 12 months.

After expiry, data is securely deleted or anonymized.

9. Your Rights (GDPR)

As a data subject, you have the right to:

  • Access: request a copy of the personal data we hold.

  • Rectification: correct inaccurate or incomplete data.

  • Erasure (“right to be forgotten”): request deletion when data is no longer needed or consent withdrawn.

  • Restriction: limit processing under certain circumstances.

  • Portability: receive data in a structured, machine-readable format.

  • Object: object to processing based on legitimate interests or direct marketing.

  • Withdraw consent: at any time, without affecting prior lawful processing.

To exercise your rights, contact us at hello@codebeautyline.com. We may require proof of identity.

10. Security

We use technical and organizational measures to protect your personal data from loss, misuse, unauthorized access, or disclosure. However, no system is completely secure, and we cannot guarantee absolute security.

11. Minors

Our Site is not intended for children under 18. If we become aware that we have collected personal data from a minor without consent, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date above shows the latest revision. Significant changes will be notified via our Site or by email where appropriate.

13. Contact & Complaints

If you have questions or concerns about this Policy, contact us at:

Shopping Online Ltd
Shipchenski Prohod Blvd. No. 23, Sofia, Bulgaria
 Email: hello@codebeautyline.com

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or your local data protection authority in the EU.