Legal

Privacy Policy

Last updated: February 2026

1. Introduction

This Privacy Policy describes how OLYMPUS MEDS ("we", "us", or "our") collects, uses, stores, and protects your personal data when you visit our website, place orders, or interact with our services.

We are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

2. Data Controller

Company: OLYMPUS MEDS

Email: info@olympusmeds.bg

3. Personal Data We Collect

3.1. Data provided by you

  • Identity data: Full name
  • Contact data: Phone number, email address, delivery address
  • Order data: Products ordered, quantities, prices, payment method
  • Communication data: Messages you send us through the chatbot or email

3.2. Data collected automatically

  • Technical data: IP address, browser type, device information
  • Usage data: Pages visited, time spent, referring website
  • Cookie data: Information stored through cookies and similar technologies

4. How We Use Your Data

We process your personal data for the following purposes:

  • Order fulfillment: Processing and shipping your peptide orders
  • Customer support: Responding to your inquiries and providing assistance
  • Marketing: Sending promotional emails (only with your consent)
  • Analytics: Improving our website and services
  • Legal compliance: Meeting our legal obligations

5. Legal Basis for Processing

  • Contract performance: To fulfill your orders (Art. 6(1)(b) GDPR)
  • Consent: For marketing communications (Art. 6(1)(a) GDPR)
  • Legitimate interest: For website analytics and improvement (Art. 6(1)(f) GDPR)
  • Legal obligation: For tax and accounting purposes (Art. 6(1)(c) GDPR)

6. Data Sharing

We may share your personal data with:

  • Courier services: For order delivery fulfillment
  • Payment processors: For cash on delivery processing
  • Email service providers: For order confirmations and communications
  • Hosting providers: For website operation

We do not sell or rent your personal data to third parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Order data: 5 years (for accounting and legal purposes)
  • Marketing consent: Until you withdraw your consent
  • Cookie data: Up to 12 months

8. Your Rights

Under GDPR, you have the following rights:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Limit how we use your data
  • Right to data portability: Receive your data in a structured format
  • Right to object: Object to processing based on legitimate interest
  • Right to withdraw consent: Withdraw consent at any time

To exercise your rights, contact us at: info@olympusmeds.bg

9. Cookies

Our website uses cookies to improve your browsing experience:

  • Essential cookies: Required for the website to function properly
  • Analytics cookies: Help us understand how you use our website
  • Preference cookies: Remember your settings and cart contents

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

  • SSL/TLS encryption for data in transit
  • Secure database storage with encryption at rest
  • Access controls and authentication
  • Regular security assessments

11. Contact

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

Email: info@olympusmeds.bg