Skip to content
MyEWheel

Privacy Policy

1. Who we are (data controller)

This policy explains how we collect and process your personal data when you use the website www.myewheel.com (the "Website") and the services offered through it. The controller of your personal data (referred to below as "MyEWheel", "we", "us") is:

  • Company: MyEWheel LTD (МайИУийл ООД), registered in Bulgaria, UIC 206602994
  • VAT number: BG206602994
  • Registered address: 11 Solunska Str., 4230 Asenovgrad, Bulgaria
  • Represented by: Andrey Andreev
  • Email: info@myewheel.com
  • Phone: +359 878 262 328

We process personal data in accordance with Regulation (EU) 2016/679 (the "GDPR") and the Bulgarian Personal Data Protection Act.

2. Children

Please note — by providing your personal data to us, you confirm that you are at least 14 years old. If this is not the case, please contact us immediately so that we can delete the data.

3. What data we collect, for what purpose and on what legal basis

Personal data is any information that can identify a living person; anonymised data is not personal data. Depending on how you use the Website, we process the following categories of personal data:

  • Identity and contact data. Your name, email address, phone number, billing address and delivery address, collected when you place an order, create an account, send us an enquiry or subscribe to our newsletter. Legal basis: performance of a contract with you, or steps taken at your request before entering into one; for the newsletter — your consent.
  • Customer and order data. Details of the goods and services you purchase from us: your orders and order history, delivery details, payment status and warranty registrations. We do not store your card details — card payments are processed by licensed payment service providers. Legal basis: performance of a contract and compliance with our legal obligations (accounting and tax law).
  • Communication data. Any message you send us — through the contact form on the Website, by email, by phone, via social media or through a service/support ticket — including photos or video you attach to a service ticket to document a fault. We use this data to respond to you, to keep records, and to establish, exercise or defend legal claims. Legal basis: our legitimate interests (handling correspondence and defending legal claims), and performance of a contract where the message concerns your order.
  • Account data. If you create a customer account: your login email, password (stored only in hashed form), order history and saved preferences. Legal basis: performance of a contract.
  • Marketplace and enquiry data. If you list a used wheel on our marketplace or contact a seller through it, we process the content of your listing and the messages relayed between buyer and seller. Your contact details are shared with the other party only when you choose to share them. The same applies to rental and similar enquiries. Legal basis: performance of a contract and our legitimate interest in operating a safe marketplace.
  • Partner (affiliate) data. If you join our partner programme: your contact details, payout details (including IBAN) and commission statements. Legal basis: performance of a contract and compliance with our legal obligations (accounting and tax law).
  • Technical data. Data related to your use of the Website, such as your IP address, browser and device details, the pages you visit, the duration of your visits and your navigation paths. Strictly necessary data (e.g. for security, fraud prevention and load management) is processed on the basis of our legitimate interest in operating and protecting the Website; analytics and marketing data is collected only with your consent, through cookies and similar technologies (see section 12).
  • Marketing data. Your newsletter and marketing preferences and the record of the consent you have given or withdrawn. Legal basis: your consent, and our legitimate interest in being able to demonstrate compliance.

Special categories of data. We do not collect data revealing your racial or ethnic origin, religious or philosophical beliefs, political opinions, trade-union membership, health, sex life or sexual orientation, or genetic and biometric data, and we do not collect data relating to criminal convictions and offences.

Please note — where we are required to collect personal data by law, or under the terms of a contract between you and us, and you do not provide that data on request, we may be unable to perform the contract (for example, to deliver the goods you ordered). In that case we may have to cancel your order, and we will notify you if so.

We use your personal data only for the purposes for which it was collected or, where necessary, for a compatible purpose. If we ever need to use your data for an unrelated new purpose, we will notify you and explain the legal basis for doing so. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects for you.

4. How we collect your data

  • Directly from you — when you place an order, create an account, fill in a form on the Website, or contact us by email or phone.
  • Automatically — certain technical data is collected when you use the Website, through cookies and similar technologies, subject to your consent where required (see section 12).
  • From third parties — for example, from payment service providers confirming the status of your payment, from courier companies about your delivery, or from analytics providers acting on your consent.

5. Marketing communications

We send you our newsletter and other marketing messages only if you have subscribed to them, or — where the law allows — if you are an existing customer and the message concerns goods or services similar to those you have purchased, and you have not objected.

Every marketing email we send contains a one-click unsubscribe link. You can also withdraw your consent or object at any time by contacting us at info@myewheel.com. Opting out of marketing does not affect service messages we must send you about your orders (order confirmations, delivery updates, warranty and service correspondence).

We will not share your personal data with third parties for their own marketing purposes without your explicit consent.

6. Who we share your data with

We may share your personal data with the following categories of recipients, only to the extent necessary:

  • Courier and logistics companies delivering your order;
  • Payment service providers processing your payment;
  • Providers of IT services, hosting and system administration;
  • Providers of business software we use to run the store (order management, invoicing and accounting);
  • Professional advisers — lawyers, accountants, auditors and insurers;
  • Public authorities, where we are required by law to provide information;
  • Analytics and advertising partners — only with your consent (see section 12);
  • A third party that acquires or merges with our business or assets, in which case the new owner may use your data in the same way described in this policy.

We require all third parties to whom we transfer your data to respect its security and to process it in accordance with the law, for specified purposes only and in accordance with our instructions.

7. International transfers

Your data is stored and processed primarily within the European Union / European Economic Area. Where a provider we use processes data outside the EU/EEA (for example, certain analytics or advertising services), we rely on an adequacy decision of the European Commission or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

8. Data security

We have put in place technical and organisational measures to prevent accidental loss, unauthorised use, alteration, disclosure of, or access to your personal data. Access to your personal data is limited to employees and partners who have a business need to work with it; they process it only on our instructions and are bound by a duty of confidentiality.

We have procedures for dealing with suspected personal data breaches, and we will notify you and the supervisory authority of a breach where we are legally required to do so.

9. How long we keep your data

We retain your personal data only for as long as necessary to fulfil the purposes for which we collected it, including satisfying legal, accounting and reporting requirements. In deciding retention periods we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, and whether the purpose can be achieved by other means. In particular:

  • Accounting and tax legislation requires us to keep basic information about our customers (contact, identity, financial and transaction data) for up to 10 years;
  • Photo and video attachments to service tickets are deleted when the ticket is resolved; the correspondence itself is kept;
  • Your cookie-consent record is kept for up to 12 months, after which we ask again.

In certain circumstances we may anonymise your personal data for research or statistical purposes, in which case it is no longer personal data and we may use it without further notice to you.

10. Your rights

Under data protection law you have the right to request access to your personal data, its rectification or erasure, restriction of processing, data portability, and to object to processing; where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at info@myewheel.com. Exercising your rights is free of charge; however, the law allows us to charge a reasonable fee, or to refuse to act, if a request is manifestly unfounded, repetitive or excessive. We may need to ask you for specific information to verify your identity — a security measure that ensures personal data is not disclosed to someone who has no right to receive it.

We respond to all legitimate requests within one month. If your request is particularly complex, or you have made several requests, we will notify you if we need more time.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Bulgarian supervisory authority: the Commission for Personal Data Protection, Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., www.cpdp.bg. We would appreciate the chance to address your concerns first, so please consider contacting us before filing a complaint.

11. Third-party websites

The Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy statements. When you leave our Website, we encourage you to read the privacy policy of every website you visit.

12. Cookies

We use cookies and similar technologies to operate the store and, only with your consent, for preferences, analytics and marketing. Non-essential cookies are off by default until you make a choice, and you can change or withdraw your consent at any time via the Cookie settings link in the site footer. Full details — the categories we use and how to manage them — are in our Cookie Policy, also linked in the footer. You can additionally set your browser to refuse some or all cookies, though parts of the Website may then not function properly.

13. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, and we will inform you of significant changes. This version was last updated on 20 August 2026.