Privacy policy

Last updated: April 13, 2026

Tomatea operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a personalized shopping experience (“Services”).

For the purposes of its activities, Tomatea processes your personal data in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), the Personal Data Protection Act, and other applicable legal acts, as well as this Policy.

Definitions

Under the General Data Protection Regulation:

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”).

“Processing” means any operation or set of operations performed on personal data or sets of personal data, whether or not by automated means.

“Controller” means a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

“Recipient” means a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not.

Data Controller

The data controller is “Tomatea” Ltd., with registered address: Sofia, email: info@tomatea.bg; website: www.tomatea.bg

This website is maintained by Shopify, which enables us to provide the Services to you.

Scope of This Privacy Policy

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

In the event of any conflict between our Terms of Use and this Privacy Policy, this Privacy Policy shall prevail with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you confirm that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein, and you consent to the collection and processing of your personal data for the purpose of fulfilling your submitted order.

Tomatea processes personal data also on the basis that the data subject has given consent to the processing of their personal data for one or more specific purposes.

Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another individual. Personal information does not include information that has been collected anonymously or that has been irreversibly anonymized so that it can no longer be identified or linked to you.

We may collect or process the following categories of personal information, including inferences drawn from such personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact information – including your name, address, billing address, shipping address, telephone number, and email address.
  • Financial information – including credit and debit card numbers, payment card details, financial account information, transaction data, method of payment, payment confirmation, and other payment-related data.
  • Account information – including your username, password, security questions, preferences, and settings.
  • Transaction information – including the items you view, place in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as your past transactions.
  • Communications with us – including the information you include in communications with us, for example when you send an inquiry to customer support.
  • Device information – including information about your device, browser, network connection, your IP address, and other unique identifiers.
  • Usage information – including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you – including when you create an account, visit or use the Services, communicate with us, or otherwise provide your personal information;
  • Automatically through the Services – including from your device when you use our products or services or visit our websites, as well as through the use of cookies and similar technologies;
  • From our service providers – including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
  • From our partners or other third parties.

How We Use Your Personal Information

Provision, customization, and improvement of the Services

We use your personal information to provide the Services, including to process your payments, fulfill your orders, remember your preferences and items of interest, send account-related notifications, process purchases, returns, exchanges or other transactions, create, maintain, and otherwise manage your account, arrange shipping, facilitate returns and exchanges, enable you to post reviews, and provide a personalized shopping experience, including recommending products related to your purchases. This may include using your personal information to better customize and improve the Services.

Marketing and advertising

We use your personal information for marketing and promotional purposes, including sending marketing, advertising, and promotional communications via email, text message, or postal mail, and displaying online advertisements for products or services on the Services or other websites, including based on products you have previously purchased or added to your cart and other activities within the Services.

Security and fraud prevention

We use your personal information to authenticate your account, ensure secure payment and shopping, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public security, and maintain the integrity of our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials secure.

Communication with you

We use your personal information to provide customer service, respond to your inquiries promptly, provide effective services, and maintain our business relationship with you.

Legal reasons

We use your personal information to comply with applicable laws or respond to valid legal processes, including requests from law enforcement or government authorities, to investigate or participate in legal proceedings, and to enforce or investigate potential violations of our terms and policies.

Disclosure of Personal Information

We may disclose your personal information to third parties under certain circumstances for legitimate purposes in accordance with this Privacy Policy.

Such circumstances may include disclosure to Shopify, service providers, business and marketing partners, or when required by law, or when you instruct or consent to such disclosure.

The Services are hosted by Shopify, which collects and processes personal information related to your use of the Services. Your information may be transferred to and processed by Shopify and third parties located in other countries.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from minors.

Security and Retention of Information

Please note that no security measures are perfect or impenetrable. We cannot guarantee absolute security.

The length of time we retain your personal information depends on various factors, including whether we need the information to maintain your account, provide Services, comply with legal obligations, resolve disputes, or enforce agreements.

Your Rights

Depending on your location, you may have rights including the right of access, deletion, correction, portability, restriction, objection, and withdrawal of consent.

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

We may need to verify your identity before processing your request.

Complaints

If you have complaints regarding the processing of your personal information, you may contact us or lodge a complaint with the Bulgarian Commission for Personal Data Protection at: Sofia, 2 Prof. Tsvetan Lazarov Blvd., or via www.cpdp.bg.

International Transfers

Your personal information may be transferred, stored, and processed outside your country. Where required, appropriate safeguards such as Standard Contractual Clauses will be used.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Updates will be posted on this page.

Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at info@tomatea.bg.

For the purposes of applicable data protection laws, we act as the data controller.

About the Brand

We are a small Bulgarian brand where everything begins and happens locally—from design to production to final packaging.

Each item is created with intention and care—not quantity, but meaning. We believe even the smallest accessories can shape a sense of style, and our mission is to inspire authenticity and confidence from an early age.

Distinctive, thoughtful, and designed to stand out—our textile watches are created for young individuals with their own sense of identity.