Privacy
Last updated: March 22, 2026
1. Who processes personal data
The controller of personal data is SIP N BITE LTD / СИП ЕН БАЙТ, UIC 208504303, VAT No. BG208504303, with registered office and management address at BULGARIA, Sofia (1000), Sredets district, "G.S. Rakovski", 145, entrance V, correspondence address at BULGARIA, Sofia (1000), Sredets district, "G.S. Rakovski", 145, entrance V, email info@sofiawinespot.com, phone +359 886 376 704.
2. What this page covers
This page applies to the processing of personal data when you use the Sip ’n Bite website, create and maintain a customer account, place and receive orders, request delivery or pick-up, make payments, contact us, submit a withdrawal or complaint, or interact with cookies and similar technologies used on the website.
3. What categories of personal data we may process
Depending on how you use the website and our services, we may process the following categories of personal data: identification and contact data, order and delivery data, payment-related data, customer account data, communications data, and technical data such as IP address, access logs and data collected through necessary cookies and — where valid consent exists and relevant tools are active — analytics cookies.
4. Purposes and legal bases
We process personal data only where we have an applicable legal basis under the GDPR and applicable law. This may include:
- performance of a contract — to accept, process and fulfil orders, arrange delivery or pick-up, manage customer accounts, process payments, handle complaints and withdrawals;
- compliance with a legal obligation — for accounting, tax, consumer protection and other legal requirements;
- legitimate interest — for fraud prevention, security, website administration and service improvement;
- consent — where consent is required, for example for analytics cookies or other optional technologies.
5. Categories of recipients
Where necessary, we may disclose personal data to categories of recipients that support our operations, such as hosting and IT providers, payment service providers, courier and logistics partners, accounting, legal and other professional advisers, and competent public authorities where required by law.
Examples of such providers may include Hostinger for hosting, Stripe for card payments, Speedy and Econt for delivery, and Google only where consent-based analytics is actually active. If marketing or communication tools are enabled in the future, personal data may also be shared with such providers only where there is an appropriate legal basis.
6. International transfers
As a rule, personal data is processed within the European Union or the European Economic Area. Where we use providers that may involve access from or transfer to a country outside the EU/EEA, this will take place only where an appropriate safeguard exists under applicable law.
7. Retention periods
We keep personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law. As a general rule, order, payment and accounting data are retained for the period required by law; customer account data while the account remains active and for a reasonable period thereafter; and customer service, complaint and withdrawal data for the period necessary to handle the matter and protect the rights and interests of the parties.
8. Your rights
As a data subject, you have rights under the GDPR and applicable law, including the right of access, rectification, erasure, restriction of processing, objection, data portability where applicable, withdrawal of consent where processing is based on consent, and the right to lodge a complaint with a competent supervisory authority.
9. How to exercise your rights
You may contact us at info@sofiawinespot.com or +359 886 376 704. We may request reasonable additional information to confirm your identity and process your request properly.
10. Cookies and similar technologies
The website uses necessary cookies for core functionality, including language version, cart, checkout, customer account and storing your cookie choices. A cookie consent tool is implemented on the website. Analytics cookies for GA4 may load only after explicit consent and only if such analytics is actually active for the website. More information is available on our Cookies page.
11. Security
We apply reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
12. Third-party websites and services
The website may contain links to third-party websites, platforms or maps operated by others. We are not responsible for their content, practices or privacy policies and recommend that you review them separately.
13. Changes
We may update this page from time to time to reflect changes in the law, technology, our services or the way we process personal data. The current version will always be published on the website together with its latest update date.