Balkandrop Ltd

Save 25%

Privacy Policy

What we collect, why we collect it, and what you can ask us to do about it

Updated: 

This policy explains how Balkandrop Ltd, trading as Balkan Digital Market, handles your personal data when you visit balkandrops.com, buy from us or contact us. We are the data controller, and we are registered in England and Wales under company number 17369986.

We sell digital downloads. That keeps things simple: we do not need your delivery address, we never see your card number, and we do not sell your data to anyone.

The short version

  • We collect what we need to take your order, deliver your downloads, provide support and meet our tax obligations — nothing more.
  • Your card details go straight to our payment provider. We never receive or store them.
  • We do not sell or rent your personal data, and we do not use third-party advertising networks or targeted advertising.
  • You can ask us for a copy of your data, or ask us to correct or delete it, at any time.
  • If you think we have got it wrong, you can complain to the ICO.

1. What we collect

  • Account details — your name, email address and password (stored encrypted) when you register.
  • Order and billing details — what you bought, when, the amount, your billing address and country, and the invoice we issue. Where VAT applies we also record what was charged.
  • Download records — which files your account has access to and when they were downloaded, so we can restore access and prevent licence abuse.
  • Messages you send us — the content of your emails or enquiries, and anything you tell us in them.
  • Technical data — IP address, browser type and pages visited, collected by our server logs and security tools.

We do not ask for special category data (such as health or biometric data), and you should not send it to us. We do not carry out automated decision-making or profiling that produces legal effects for you.

2. Why we use it, and our lawful basis

  • To take payment and deliver your downloads — performance of our contract with you.
  • To run your account and restore lost download access — performance of our contract with you.
  • To answer your questions and handle refunds or complaints — performance of our contract, and our legitimate interest in supporting our customers.
  • To keep accounting and VAT records — compliance with a legal obligation.
  • To keep the site secure and prevent fraud or licence abuse — our legitimate interest in protecting our business and our customers.
  • To send marketing email — only with your consent, which you can withdraw at any time using the unsubscribe link.
  • Non-essential cookies — only with your consent, given through our cookie banner.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time (see section 6).

3. Who we share it with

We do not sell or rent your personal data. We share it only with the service providers we need to run the shop, and only so far as they need it:

  • Payment providers — PayPal and Stripe. They process your payment and handle your card details directly under their own privacy policies. We receive confirmation that payment succeeded, not your card number.
  • Our hosting provider — which stores the website and its database on our behalf.
  • Email delivery — so that order confirmations, download links and support replies reach you.
  • Professional advisers — our accountants, and lawyers where we need advice.
  • Authorities — where we are legally required to disclose information, for example to HMRC.

If you use our AI chatbot, please also read our Disclaimer. You can ask us for the current list of our service providers at any time.

4. Where your data is held, and for how long

Some of our service providers are based outside the United Kingdom. Where personal data is transferred abroad, we rely on UK adequacy regulations or on the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, so that your data keeps an equivalent level of protection.

We keep data only as long as we need it:

  • Order, invoice and tax records — six years after the end of the relevant financial year, as UK tax law requires.
  • Account and download records — for as long as your account is open. Because download links do not expire, deleting your account also ends your access to your purchases.
  • Support correspondence — up to two years after the matter is closed.
  • Marketing consent records — until you unsubscribe, plus a minimal record that you did so.
  • Server and security logs — a short rolling period, normally no more than twelve months.

5. How we protect it

The site runs over HTTPS, passwords are stored hashed rather than in plain text, downloads require you to be logged in, and access to the administration area is limited to people who need it. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data, and we will tell you and the ICO about a breach where the law requires it.

6. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal data we hold about you;
  • have inaccurate data corrected;
  • ask us to delete your data, where we do not have to keep it;
  • ask us to restrict how we use it while a concern is resolved;
  • receive certain data in a portable, machine-readable format;
  • object to processing we carry out on the basis of legitimate interests; and
  • withdraw consent at any time, where we relied on consent.

Email support@balkandrops.com to exercise any of these. We will respond within one month, and we will not charge you. Exercising your rights will never mean worse service from us.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

7. Cookies

We use cookies that are necessary to make the site work — keeping you logged in and remembering your basket. Anything beyond that is set only with your consent through our cookie banner, which you can change at any time. Our Cookie Policy explains this in detail.

8. Children

Our shop is not intended for children, and you must be at least 18 to place an order. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date it was last updated. If we make a significant change to how we use your data, we will tell you.

Related documents

See also our Cookie Policy, our Terms of Use and our Licence.

Contact us

For anything about this policy or your personal data, contact us at the details below, or through our contact page.

0