Privacy Policy

1. Who is responsible for your data

Adorable Applique (adorableapplique.com, "we", "us") sells machine embroidery and applique design files. The data controller is a company registered in Bulgaria (European Union). We process personal data under the EU General Data Protection Regulation (GDPR). For anything privacy-related, write to helpdesk@adorableapplique.com.

2. What we collect and why

We collect only what the store needs to work:

• Your email address — it is your account. Sign-in is passwordless: we email you a one-time code. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Order and download history — what you bought or claimed for free, and the designs available in your Download Center. Legal basis: performance of a contract; accounting records are kept under a legal obligation (Art. 6(1)(c)).
• Payment confirmations — payment is handled by PayPal; we never see or store your card details. PayPal sends us the order amount, status, and a transaction reference. Legal basis: performance of a contract.
• Activity you choose to share — votes in design contests and comments you post on designs. Legal basis: our legitimate interest in running the site's community features (Art. 6(1)(f)).
• Transactional email delivery data — delivery/bounce status of the emails we send you (order confirmations, sign-in codes). Legal basis: legitimate interest in making sure our emails reach you.
• Technical logs — IP address, browser type, and requested pages in standard server logs, kept briefly for security and troubleshooting. Legal basis: legitimate interest in keeping the site secure.

We do not collect more than this, we do not build advertising profiles, and we never sell your personal data.

3. Who processes data for us

We share data only with service providers that make the store run, and only what each one needs:

• PayPal — payment processing (PayPal is an independent controller for the payment itself; see PayPal's own privacy statement);
• Postmark — sending transactional email (sign-in codes, order confirmations);
• Hosting and file storage providers — running the site and delivering design files and images from cloud storage / CDN.

Some providers are located outside the European Economic Area. Where that is the case, transfers rely on safeguards recognized by the GDPR, such as the European Commission's Standard Contractual Clauses.

4. Cookies

We use two kinds of cookies:

• Essential cookies — session and security cookies (sign-in, cart, CSRF protection) and a cookie remembering your cookie choice. The site cannot work without them, so they are always on.
• Analytics cookies — only if you accept them in the cookie banner. They help us understand how the store is used. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time.

You can change your choice whenever you like: open Cookie Settings (also linked in the footer of every page).

5. How long we keep data

• Account, orders, and Download Center — for as long as your account exists: your purchases are lifetime re-downloadable, so this history is the product.
• Accounting records of sales — for the period required by Bulgarian and EU tax law.
• Server logs — a short rolling window, then deleted.

6. Your rights

Under the GDPR you can ask us at any time to:

• access the personal data we hold about you, and receive a copy (data portability);
• correct inaccurate data (e.g. change your account email);
• delete your account and data ("right to be forgotten") — note that deleting your account permanently removes access to your purchased designs, and that we must keep legally required accounting records;
• restrict or object to processing based on legitimate interest;
• withdraw consent for analytics cookies (via Cookie Settings).

Just email helpdesk@adorableapplique.com — a real person reads this inbox. If you believe we handle your data unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection (CPDP, cpdp.bg) or your local EU data protection authority.

7. Children

The store is intended for adults. We do not knowingly collect personal data from children; if you believe a child has created an account, contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time; the "Last updated" date above always reflects the current version. Material changes will be announced on the site.

9. Contact

Questions about privacy or your data: helpdesk@adorableapplique.com. See also our Terms and Conditions and Refund Policy.