Legal

Privacy policy

Effective 21 August 2026

Who we are

BDS Trading EOOD, 23 Han Krum St, Varna, Bulgaria ("we") operates nikolatsolov.com, THE LION’S CLUB fan community, and the official store. For anything about your personal data, write to [email protected]. This policy covers the public site, THE LION’S CLUB, and purchases made through our store.

What we collect

Visiting the site. Our hosting provider (Cloudflare) processes technical data such as your IP address and browser type in server logs, for security and to deliver the site. We run no advertising cookies and no cross-site tracking. The site stores your language preference and, if you sign in, a session token, in your browser's local storage — both strictly necessary.

A LION’S CLUB account. When you join THE LION’S CLUB we collect your email address, a password (stored only as a salted hash — we cannot read it), your display name and username, and optionally a profile photo and your country or city. Using the community creates content tied to your account: reactions, race predictions, attendance photos you choose to upload, activity points and badges.

Buying from the store. Orders, payment and delivery details are processed by Shopify as our commerce platform; payment card data goes to Shopify's payment processors and never touches our servers. See Shopify's privacy policy. We see order information (what was bought, name, shipping address) to fulfil your order and handle support.

Writing to us. Emails you send to our addresses are handled in Google Workspace and, for store support, in Re:amaze, our support tool.

Why we process it

To provide the account and community you signed up for, and to fulfil orders (performance of a contract); to keep the platform secure, prevent abuse, and understand aggregate usage (legitimate interests); and, only with your consent, to send optional email notifications — every category can be switched off in your notification settings, and transactional emails include a settings link. We do not sell personal data and we run no advertising.

Who else touches the data

We use a small set of processors, each for one job: Cloudflare (hosting, storage and delivery of the site and uploaded media), Shopify (store, checkout and payments), Resend (sending transactional email such as verification and password resets), Google Workspace (our mailboxes), and Re:amaze (customer support). Editorial site content may be machine-translated using a third-party translation service; member personal data is not sent to translation services.

AI and automated decisions

We do not use your personal data to train AI systems, and no decision with legal or similarly significant effect about you is made automatically. Community points and badges are calculated by fixed, published rules, not profiling.

Where it lives

Data is stored with the providers above, primarily in the EU where available. Some providers are US companies; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

How long we keep it

Account data stays while your account exists. If you remove your profile photo or other uploads, the files are deleted from storage. If you delete your account — or ask us to — we erase your personal data, keeping only what the law requires (for example, order records for accounting). Server logs are kept briefly for security.

Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests, or withdraw consent at any time. Write to [email protected] and we will respond within a month. You also have the right to complain to the Bulgarian Commission for Personal Data Protection (cpdp.bg) or your local supervisory authority.

Age

THE LION’S CLUB is open to fans aged 14 and over, in line with Bulgarian law on children's consent to online services. If you are younger, a parent or guardian must agree to your participation.

Changes

If this policy changes in a way that matters, we will say so on the site and, for members, by notification. The date at the top always shows the current version.