I. General Provisions
Article 1. This Privacy Policy explains how Future Seas EOOD (registered legal name: “ФЮЧЪР СИИЗ” ЕООД), Unified Identification Code (UIC) 207464051, hereinafter referred to as the “Data Controller”, collects, uses, stores, and protects the personal data of visitors and customers of https://futureseas.eu/.
Article 2. Personal data is processed in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or “GDPR”), the Bulgarian Personal Data Protection Act, and all other applicable data protection legislation.
Article 3. This Privacy Policy applies to anyone who visits the website, places an order, or communicates with the Data Controller.
Article 4. Personal data is collected and processed only for specific, lawful purposes and is limited to what is necessary to fulfil those purposes.
II. Categories of Personal Data We Collect
Article 5. Depending on how you use our website and services, we may collect and process the following categories of personal data:
- Shipping and contact information: First and last name, delivery address, telephone number, and email address.
- Order information: Products purchased, order value, order date, selected delivery method, and order status.
- Payment information: Selected payment method, payment amount, transaction status, transaction reference, and any information required to process refunds.
- Banking information: For payments made by bank transfer, we may process the payer’s name, IBAN, payment amount, and payment reference.
- Technical information: IP address, browser and device information, pages visited, and technical logs.
- Cookies and tracking information: Data relating to your interactions with the website, where Google Analytics, Meta Pixel, or other relevant technologies are used.
- Communication records: Information provided when contacting us with enquiries, complaints, return requests, or other correspondence.
Article 6. We obtain personal data directly from you, automatically when you use our website, or from payment service providers and other third parties where necessary to process and fulfil your order.
Article 7. Your name, delivery address, telephone number, and email address are required to process and fulfil orders. If you do not provide the necessary information, we may be unable to complete your order or fulfil our contractual obligations.
Article 8. We do not require you to provide special categories of personal data, such as health information, religious beliefs, or biometric data, when using our website in the ordinary course.
III. Purposes and Legal Bases for Processing
Article 9. We process personal data for the following purposes:
1. Processing and Fulfilling Orders
We use your personal data to process orders, communicate with you, arrange deliveries, manage returns, and issue refunds.
Legal basis: Article 6(1)(b) GDPR — processing necessary for the performance of a contract.
2. Processing Payments
Payments are processed through Stripe or by bank transfer.
When you pay through Stripe, your payment instrument information is processed through the payment service. We receive the transaction information necessary to manage your payment, including its status and relevant transaction details.
For bank transfers, we process the information contained in the payment received through our bank.
Legal basis: Performance of a contract and, where applicable, compliance with a legal obligation.
3. Accounting and Tax Compliance
We retain records of sales, payments, and other documents as required by applicable accounting, tax, and financial regulations.
Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation.
4. Customer Support
We process personal data to respond to enquiries, handle complaints and return requests, and resolve issues relating to our products and services.
Legal basis: Performance of a contract, compliance with a legal obligation, or legitimate interests, depending on the circumstances.
5. Website Security and Fraud Prevention
We process certain information to protect our website, prevent fraud and unauthorised access, and establish, exercise, or defend legal claims.
Legal basis: Article 6(1)(f) GDPR — legitimate interests, subject to applicable legal requirements.
6. Website Analytics — Google Analytics
We use Google Analytics to understand website traffic, how visitors interact with our website, and how effectively our content performs.
Legal basis: Your consent, where consent is required for the technologies used and the associated processing of personal data.
7. Advertising and Conversion Tracking — Meta Pixel
Where enabled, Meta Pixel helps us measure advertising campaign performance, analyse website interactions, and personalise advertising content.
Legal basis: Your prior consent to the relevant advertising tracking activities.
Article 10. Where we rely on consent to process your personal data, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
IV. Sharing Personal Data with Third Parties
Article 11. Where necessary for a lawful purpose, we may share personal data with the following categories of recipients:
- Stripe: To process online payments, manage transactions, and provide payment security.
- Banks and financial institutions: To receive bank transfers and process refunds.
- Courier and logistics providers: To arrange and complete deliveries.
- Google: To provide Google Analytics services.
- Meta: To provide Meta Pixel and related advertising functionalities.
- Hosting, software, and technical support providers: To ensure the operation, maintenance, and security of our website.
- Accounting and legal advisers: To comply with legal obligations and protect our legal rights.
- Competent public authorities: Where disclosure is required by applicable law.
Article 12. Depending on the nature of the services provided and the applicable contractual and legal arrangements, recipients may act either as data processors on our behalf or as independent data controllers.
Article 13. We limit the sharing of personal data to what is necessary for the relevant purpose and apply appropriate safeguards in accordance with the GDPR.
V. International Data Transfers
Article 14. When using third-party services such as Stripe, Google Analytics, Meta Pixel, and other external service providers, certain personal data may be processed or accessed outside the European Economic Area (EEA).
Article 15. Where personal data is transferred internationally, such transfers must comply with the applicable requirements of the GDPR. This may include reliance on European Commission adequacy decisions, Standard Contractual Clauses, or other legally recognised transfer mechanisms.
Article 16. You may request further information about the safeguards applicable to international transfers of your personal data, including how to obtain copies of those safeguards where applicable.
VI. How Long We Keep Your Personal Data
Article 17. We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to comply with applicable legal obligations.
Article 18. Retention periods depend on the type of information and the purpose for which it is processed:
- Order and delivery information: Retained for the duration of the contractual relationship and for any additional period necessary to handle complaints, resolve disputes, or protect legal rights.
- Accounting and tax records: Retained in accordance with applicable statutory requirements, including a period of 10 years for accounting registers and financial statements where that retention period applies.
- Payment information: Retained for as long as necessary to meet accounting, tax, payment-related, and other legal obligations.
- Google Analytics and Meta Pixel data: Retained in accordance with the relevant service settings, processing purposes, and applicable data protection requirements.
- Customer correspondence and complaints: Retained for as long as necessary to handle the matter and, where relevant, establish, exercise, or defend legal claims.
- Consent-based processing: Personal data processed on the basis of consent is retained until consent is withdrawn or the relevant purpose no longer applies. Information necessary to demonstrate that processing was lawful may be retained where appropriate.
Article 19. Once the relevant legal basis no longer applies and any applicable retention periods have expired, personal data will be deleted or anonymised unless further retention is required or permitted by law.
VII. How We Protect Your Personal Data
Article 20. We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction.
Article 21. Access to personal data is restricted to individuals who need it to perform their professional or contractual responsibilities. Security measures are determined according to the risks involved and the nature of the data being processed.
Article 22. In the event of a personal data breach, we will take the necessary steps, including notifying the competent supervisory authority and affected individuals where required under the GDPR.
VIII. Cookies, Google Analytics and Meta Pixel
Article 23. Our website uses cookies and similar technologies to support essential website functions, analyse traffic, and measure the performance of advertising campaigns.
Article 24. These technologies include:
1. Strictly Necessary Cookies
These cookies are used to enable essential website functions, maintain your shopping cart, process orders, and support website security.
Where cookies are strictly necessary to provide a service you have requested, they may be used without prior consent.
2. Google Analytics
Google Analytics is used to collect statistical information about website visits, devices used, pages viewed, and interactions with our website.
Analytics cookies and any associated processing of personal data are used only after the necessary prior consent has been obtained.
3. Meta Pixel
Meta Pixel is used to track website interactions, measure advertising performance, and personalise advertisements where the relevant features are enabled.
When Meta Pixel is used for advertising tracking, it may process information about visitor behaviour and help create advertising audiences.
Such tracking is carried out only after the necessary prior consent has been obtained.
Article 25. You have the right to accept, reject, or change your preferences for non-essential cookies through the consent management tools provided on our website.
Withdrawing consent must be as easy as giving it.
Further information about the cookies we use, their providers, purposes, and retention periods is available in our separate Cookie Policy.
IX. Your Rights Under the GDPR
Article 26. Subject to the conditions set out in the GDPR, you have the following rights in relation to your personal data:
- Right to be informed and right of access: You may request information about how your personal data is processed and obtain access to that data.
- Right to rectification: You may request the correction of inaccurate personal data or the completion of incomplete information.
- Right to erasure: You may request the deletion of your personal data where the applicable legal conditions are met.
- Right to restriction of processing: You may request that the processing of your personal data be restricted in circumstances provided for by law.
- Right to data portability: Where the legal requirements are met, you may receive certain personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
- Right to object: You may object to processing based on legitimate interests, subject to the conditions provided by law.
- Right to object to direct marketing: You may object at any time to the processing of your personal data for direct marketing purposes.
- Right to withdraw consent: You may withdraw any consent you have given for the processing of your personal data.
- Rights relating to automated decision-making: Where applicable, you are entitled to the protections provided by law in relation to automated decision-making, including profiling.
- Right to lodge a complaint: You may submit a complaint to the competent data protection supervisory authority.
Article 27. The right to erasure is not absolute. We may retain certain personal data where necessary to comply with legal obligations, establish or defend legal claims, or fulfil another purpose permitted by law.
X. How to Exercise Your Rights
Article 28. If you wish to exercise your data protection rights or have any questions about how your personal data is processed, you may contact us through our official contact channels.
Article 29. Where we have reasonable doubts about the identity of the person making a request, we may ask for additional information necessary to verify their identity.
Article 30. We respond to requests without undue delay and generally within one month of receiving them.
Where necessary, this period may be extended by a further two months, taking into account the complexity and number of requests. If an extension is required, we will inform you of the reasons for it.
Article 31. Exercising your rights under the GDPR is generally free of charge.
Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act on the request where permitted by law.
XI. Changes to This Privacy Policy
Article 32. We may update this Privacy Policy to reflect changes in applicable legislation, the technologies we use, the services we provide, or the way we process personal data.
Article 33. The latest version of this Privacy Policy will be published on our website. Where required by law, we will provide additional notice of material changes.
Article 34. If we intend to process personal data for a new purpose, we will provide any required information in advance and ensure that an appropriate legal basis for the processing is in place.
XII. Data Controller and Contact Information
Company name: Future Seas EOOD (ФЮЧЪР СИИЗ ЕООД)
Unified Identification Code (UIC): 207464051
Registered office and address: 17B Bunaya Street, Sofia, Bulgaria
Email: thefutureseas@gmail.com
Telephone: +359 877 667 395
Website: https://futureseas.eu/
Competent Supervisory Authority
Commission for Personal Data Protection (CPDP), Bulgaria
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia, Bulgaria
Website: https://www.cpdp.bg/
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority in accordance with applicable law.
Last updated: 8 November 2026