Privacy policy
Last updated: April 2026
Solalma LTD (“we”, “us”) is the data controller for personal data processed in connection with the website solalmacards.com. We process personal data in accordance with the General Data Protection Regulation (“GDPR”).
For privacy-related questions contact us at play@solalmacards.com.
1. What data we collect
- Orders: name, email address, delivery address, and payment details. Payments are processed by Stripe; card data is handled by Stripe and not stored by us.
- Contact: name, email address, and the content of messages you send us.
- Website visits: technical data such as IP address, browser type, and pages viewed.
2. Why we collect it and legal basis
- Order fulfilment (name, address, email, payment data): performance of a contract.
- Legal obligations (transaction records for tax and accounting purposes): legal obligation.
- Enquiries (responding to contact messages): legitimate interests.
- Website improvement (analytics, including where aggregated or anonymised): legitimate interests or, where applicable, consent.
- Marketing: only if you opt in. We currently do not send marketing emails without your consent where consent is required.
3. Who we share your data with
- Google Analytics (GA4) — website analytics
- Microsoft Clarity — session recordings, heatmaps, and click maps
- Meta Pixel — advertising effectiveness (Facebook/Instagram)
- Bunny.net — video hosting
- Shipping partners — to deliver orders
- Hosting and platform providers — infrastructure that runs our website and services
We do not sell your personal data to third parties.
4. International transfers
Some processors (such as Stripe, Google, or Microsoft) are based outside the European Economic Area. Where we transfer personal data, such transfers are protected by safeguards such as Standard Contractual Clauses approved by the European Commission or other mechanisms recognised under GDPR.
5. How long we keep your data
- Order data: typically up to five (5) years for tax and accounting purposes, consistent with Bulgarian law, unless a shorter or longer retention is required by law.
- Contact enquiries: up to two (2) years unless we need them longer for legal reasons.
- Website analytics data: retention depends on each tool's settings and configuration (see the cookie sections below).
6. Your rights (GDPR)
Depending on the situation, you have the right to: access your personal data; rectify inaccurate data; erase data; restrict processing; data portability; object to certain processing; and withdraw consent where processing is consent-based.
To exercise these rights, contact play@solalmacards.com. We will respond within thirty (30) days where required under GDPR (extensions may apply in complex cases).
You can also submit a self-service request to access, correct, or delete your data directly on our Privacy Request page.
7. Right to lodge a complaint
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP):
- Website: cpdp.bg
- Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
- Email: kzld@cpdp.bg
You may also contact the data protection authority in your country of residence within the EU.
8. Cookies
When you visit solalmacards.com, we use cookies and similar technologies. This section explains what we use and why.
What are cookies?
Cookies are small text files placed on your device when you visit a website. They are used to make websites work, remember preferences, and provide information to site owners.
Your consent
Under EU law (ePrivacy Directive and GDPR), we are required to obtain your consent before placing any non-essential cookies on your device. When you first visit our website, a cookie banner will ask for your consent. You can accept or decline non-essential cookies at any time. Essential cookies do not require consent as they are strictly necessary for the website to function.
Essential cookies
These cookies are strictly necessary for the website to work and cannot be switched off.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Maintains your browsing session | Session |
__stripe_mid, __stripe_sid |
Fraud prevention and secure payment processing (Stripe) | Up to 1 year / Session |
BunnyCDN-* |
Video delivery via Bunny.net — required for video playback on the site | Session |
Analytics cookies
These cookies help us understand how visitors use the website. They are only placed on your device if you accept analytics cookies via the consent banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics (GA4) | Distinguishes unique users by assigning a random ID | 2 years |
_ga_* |
Google Analytics (GA4) | Persists session state for GA4 | 2 years |
_clck |
Microsoft Clarity | Identifies the user and session for heatmap and session recording | 1 year |
_clsk |
Microsoft Clarity | Connects multiple page views by a user into a single session recording | 1 day |
CLID |
Microsoft Clarity | Identifies the first time Clarity saw this user on any site using Clarity | 1 year |
ANONCHK |
Microsoft Clarity | Used to check if cookies are enabled and to verify user sessions | Session |
MR |
Microsoft Clarity | Used to reset or refresh MUID cookie | 7 days |
MUID |
Microsoft Clarity | Identifies unique web browsers visiting Microsoft sites | 1 year |
SM |
Microsoft Clarity | Used to synchronise the MUID across Microsoft domains | Session |
Google Analytics privacy policy: policies.google.com/privacy
Microsoft Clarity privacy policy: privacy.microsoft.com
Marketing / advertising cookies
These cookies are used to show you relevant advertising on other platforms. They are only placed if you accept marketing cookies via the consent banner.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_fbp |
Meta (Facebook/Instagram) | Identifies browsers for advertising and analytics | 3 months |
_fbc |
Meta (Facebook/Instagram) | Stores click information from Facebook/Instagram ads | 3 months |
Meta privacy policy: facebook.com/privacy/policy
9. Managing cookies
You can manage or delete cookies at any time through your browser settings. Most browsers allow you to see what cookies are stored and delete them individually, block all cookies or only third-party cookies, and set up alerts when a website tries to set a cookie.
Blocking essential cookies may prevent parts of the website from working correctly, including the checkout process and video playback.
Browser cookie settings:
- Chrome: support.google.com/chrome/answer/95647
- Safari: support.apple.com/guide/safari
- Firefox: support.mozilla.org/kb/cookies-information-websites-store-on-your-computer
Contact
For any data protection or privacy questions, contact us at play@solalmacards.com.