Background

Mikeni Ltd. (“MegaRemedy.com”) understands that your privacy is important and we are committed to protecting it. We collect and use information only in ways that are useful to you and consistent with your rights and our legal obligations.

When we say “we”, “us” or “our” in this policy, we refer to Mikeni Ltd. (as the operator of the stores and websites) and, where relevant, other subsidiaries within the group. If you need clarification about the entity you are dealing with, please check the terms and conditions of the product/service you use or contact us (see “Contact Us” below).

This policy applies when you interact with us in-store, by phone, online, through mobile applications, or via social media (our “Services”).

1. Definitions

• Account — an account required to access and/or use certain areas and features of our Sites and Services.
• Cookie — a small text file placed on your computer or device by our Sites when you visit certain parts and/or use certain features. See “Cookies” below.
• Our Sites / Services — our websites, stores, phone services, mobile applications and social media accounts.
• We / Us / Our — MegaRemedy.com / Mikeni Ltd., registered in Bulgaria under BG202610004, registered address: Bourgas, zhk Vazrajdane B3 E2 Fl2.

2. Information About Us

• Our site is owned and operated by Mikeni Ltd., registered in Bulgaria under BG202610004, registered address: Bourgas, zhk Vazrajdane B3 E2 Fl2.
• Data Protection Officer: Nikolay Zhelev — email: office@megaremedy.com; post: Data Protection Officer, Bulgaria, Bourgas 8000, zhk Vazrajdane B3 E2 Fl2.

3. Scope

This policy applies only to your use of our Services. It does not extend to external websites linked from our Sites. We do not control how third-party websites collect, store, or use your data—please review their privacy policies before providing any information.

4. What Data We Collect

Some data is collected automatically when you use our Sites. Other data is collected only if you submit it voluntarily (for example when you create an Account, place an order, contact us, or interact with us on social media).

• Name and title
• Date of birth, gender
• Home, billing and delivery address(es)
• Email address(es) and phone number(s)
• Account login details (username and encrypted password)
• Purchase and service information (orders, payments, delivery, returns, interactions)
• Financial information (e.g. card details used for payment)
• Discount card details (if applicable)
• Marketing preferences
• Social media account details (when you interact with us there)
• Reviews, comments, survey responses
• Customer service interactions
• CCTV images (where applicable)
• Technical data: IP address, browser type/version, device/OS information, browsing activity and referring URLs
• Cookie information (see “Cookies” below)
• Information from other sources (e.g. service providers, fraud prevention agencies, couriers, marketing/research partners, publicly available information)

5. When We Collect Personal Information

• When you purchase products/services online, by phone, or in-store
• When you register an Account
• When you place special orders
• When you make changes, submit claims/complaints, cancel an order, request returns/refunds
• When you subscribe to newsletters, replenishment emails or other updates
• When you submit reviews or complete surveys
• When you engage with us on social media
• When you enter competitions, prize draws or promotions
• When you contact customer service (web chat, phone, email, post)
• When you complete forms for transactions, employment, incident reporting or security purposes
• When you book appointments or attend events we organize
• When you browse our website (see “Cookies” below)

6. Legal Basis for Processing (GDPR)

Under GDPR, we process personal data lawfully, fairly and transparently. Whenever we process personal information, we rely on at least one legal basis:

1. Consent — you have agreed to processing for a specific purpose.
2. Legitimate interests — necessary for our business (e.g. fraud prevention), unless overridden by your rights.
3. Performance of a contract — needed to provide products/services you request.
4. Vital interests — necessary to protect life.
5. Prevention of fraud — required to protect customers and business from fraud/money laundering.
6. Public information — you have made the information public.
7. Legal claims — needed to establish, exercise or defend legal claims.
8. Legal obligation — we must process data to comply with law.

7. How We Use Your Data

We store and process personal data securely in accordance with the EU General Data Protection Regulation (GDPR). We use your data to provide and improve our products and services, including:

• Creating and managing your Account
• Providing access to our Services
• Personalizing your experience
• Supplying products and services, including delivery and customer support
• Responding to your communications and requests
• Sending service emails (order updates, confirmations, essential notices)
• Sending subscription emails (newsletters/alerts) where you have opted in (you can unsubscribe anytime)
• Market research and feedback analysis to improve the site and services

8. How and Where We Store Your Data

• We keep personal information only as long as needed for the purposes in this policy and in line with legal/regulatory requirements. In most cases, retention ends 10 years after the end of your relationship with us, unless a longer period is required.
• Your data is generally stored within the European Economic Area (EEA). If any transfer outside the EEA occurs, we apply appropriate safeguards and, where required, obtain consent.
• We use physical, electronic and managerial measures designed to safeguard your information, including industry-standard encryption where appropriate. However, no method of transmission/storage is 100% secure.

9. Sharing Your Data

We may share personal information when necessary to deliver services, including with:

• Companies within our group (subsidiaries/holding company)
• Payment processing providers
• Warehouses, packers and logistics partners (e.g. DHL, FedEx, Bulgarian Post)
• Customer service/CRM providers
• Review, feedback and survey providers
• Marketing, advertising and analytics partners (subject to your preferences and cookie choices)
• Fraud prevention agencies and similar security partners
• Professional advisors (lawyers/consultants) and authorities where required by law

10. Business Transfers

If we sell, buy or restructure our business (or part of it), personal data may be transferred as part of that transaction. Where required, we will ensure the new controller can use the data only for the purposes it was originally collected for, and in line with this policy and applicable law.

11. Control Over Your Data

• You can manage email preferences by using unsubscribe links in emails and/or via your Account settings (where available).
• You can control cookies through your browser settings (see “Cookies” below).

12. Withholding Information & Withdrawing Consent

• You may browse some parts of our Services without providing personal data.
• You can restrict or block cookies via browser settings, but the site may not work as intended.
• You can withdraw consent at any time by contacting us. If you withdraw consent, it may limit our ability to provide certain services.

13. Accessing Your Data

You have the legal right to request a copy of the personal data we hold about you (where applicable). Contact us at office@megaremedy.com.

14. Cookies

Our Sites use first-party and third-party cookies to help the website function, improve performance, and (where you allow) personalize content and marketing.

• First-party cookies — set by our website to remember key preferences and enable core functionality.
• Third-party cookies — set by external providers (e.g. analytics/marketing platforms) to measure and improve performance and relevance.
• Session cookies — expire when you close your browser.
• Persistent cookies — remain stored between sessions to remember preferences.

15. Your Rights Under GDPR

Under GDPR, you have the right to:

• Request access to your personal data
• Request correction or deletion of your personal data
• Restrict or object to processing
• Data portability
• Complain to a supervisory authority
• Be informed about data processing activities
• Rights related to automated decision-making and profiling

16. Automated Decision-Making & Profiling

If we use automated decision-making that produces legal (or similarly significant) effects, you may request human intervention, express your point of view, and ask for an explanation.

Examples of automated notifications we may send:

• Order confirmations, dispatch and status updates
• Back-in-stock alerts
• Account-related notifications
• Abandoned cart reminders
• Replenishment reminders (where enabled)
• Transactional notifications (e.g. invoices/credit memos)

17. Contact Us

If you have questions about this policy or want to exercise your rights, contact us at: office@megaremedy.com or by post: Mikeni Ltd, Bulgaria, Bourgas 8000, zhk Vazrajdane B3 E2 Fl2. Please be clear in your request, especially if you are asking about the data we hold about you.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our Sites and will apply from the date of publication. Please review this page periodically to stay up to date.