PRIVACY POLICY

Last updated: 17 September 2026

YEESTHIN respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Trade Sales Solutions LTD, operator of www.yeesthin.com, collects, uses, stores and otherwise processes personal data when you visit our Website, create an account, place an order, contact us or interact with our services.

Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable data protection legislation.

1. DATA CONTROLLER

The controller responsible for processing your personal data is:

Trade Sales Solutions LTD
Company Registration No.: 204428694
VAT No.: BG204428694
Registered office and address: Stefan Karadzha Street, 4204 Tsaratsovo, Republic of Bulgaria
Website: www.yeesthin.com
Email: hi@yeesthin.com

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with YEESTHIN, we may process information such as:

first and last name;
billing and delivery address;
email address;
telephone number;
order and purchase information;
payment status and transaction information;
account information, where an account is created;
correspondence with customer support;
return and complaint information;
IP address;
device and browser information;
Website interaction and usage information;
cookie and similar technology identifiers;
marketing preferences and consent records.

We only process personal data that is necessary for the relevant purpose or otherwise permitted by applicable law.

3. PAYMENT INFORMATION

Payments may be processed by third-party payment service providers.

Where payment card details are entered directly into a payment provider's secure environment, YEESTHIN does not receive or store your complete card number or card security code.

We may receive information necessary to identify and administer the transaction, such as payment status, transaction reference, amount and payment method.

4. WHY WE PROCESS YOUR PERSONAL DATA

We may process your personal data in order to:

process and confirm orders;
receive and administer payments;
deliver purchased products;
provide information about an order or delivery;
process returns and refunds;
handle complaints and customer service requests;
manage customer accounts;
detect and prevent fraud and abuse;
comply with accounting, tax and other legal obligations;
establish, exercise or defend legal claims;
maintain the security and functionality of our Website;
analyse and improve our Website and services where legally permitted;
send marketing communications where we have an appropriate legal basis.

5. LEGAL BASES FOR PROCESSING

Depending on the circumstances, YEESTHIN processes personal data on one or more of the following legal bases under the GDPR:

Performance of a contract – where processing is necessary to process your order, receive payment, arrange delivery, administer a return or otherwise perform our contract with you.

Legal obligation – where processing is necessary to comply with tax, accounting, consumer protection or other legal requirements.

Legitimate interests – where processing is necessary for legitimate business purposes, such as protecting our Website, preventing fraud, improving our services or establishing and defending legal claims, provided that your rights and interests do not override those interests.

Consent – where applicable, for certain marketing, analytics, advertising or other processing activities that require your prior consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. ORDER AND DELIVERY DATA

When you place an order, we process the information necessary to fulfil the purchase.

This may include your name, delivery address, billing address, telephone number, email address, ordered products and payment information.

Necessary information may be shared with logistics providers responsible for delivering your order.

Depending on the destination and available service, these may include providers such as DHL, Deutsche Post, DPD, FedEx or other courier and postal operators.

Only information reasonably necessary for arranging and completing the delivery is provided.

7. SERVICE PROVIDERS

We may use third-party providers to support the operation of YEESTHIN, including providers of:

ecommerce infrastructure and hosting;
payment processing;
delivery and logistics;
email services;
customer support;
IT and security services;
analytics;
advertising and marketing technology;
accounting and professional services.

These providers may process personal data only where there is an appropriate legal basis and subject to applicable data protection requirements.

8. INTERNATIONAL DATA TRANSFERS

Some service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred to a country outside the EEA and an adequacy decision does not apply, YEESTHIN will use an appropriate transfer mechanism required by applicable data protection law, such as the European Commission's Standard Contractual Clauses, where applicable.

Additional safeguards may be implemented where required.

9. HOW LONG WE KEEP PERSONAL DATA

YEESTHIN retains personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal obligations.

Retention periods may vary depending on the type of information.

For example, information relating to orders, invoices and payments may need to be retained for the periods required by applicable accounting and tax legislation.

Customer service correspondence may be retained for a period reasonably necessary to resolve disputes and establish or defend legal claims.

Data processed solely on the basis of consent will not be retained for that purpose after valid withdrawal of consent unless another legal basis applies.

10. MARKETING COMMUNICATIONS

Where legally permitted, YEESTHIN may send information about products, offers and other marketing communications.

Where consent is required, such communications will only be sent after obtaining the necessary consent.

You can unsubscribe from email marketing at any time by using the unsubscribe link contained in the relevant message or by contacting:

hi@yeesthin.com

Withdrawal from marketing does not prevent us from sending transactional communications necessary for an existing order, payment, delivery, return, complaint or other service requested by you.

11. COOKIES AND SIMILAR TECHNOLOGIES

Our Website may use cookies and similar technologies necessary for its operation and, subject to applicable requirements, for analytics, personalisation and advertising.

Cookies that are not strictly necessary will be used only where an appropriate legal basis exists and, where required, after obtaining your consent.

You can manage your preferences through the cookie settings available on the Website.

Detailed information about the cookies and technologies used by YEESTHIN should be provided in our separate Cookie Policy and/or cookie preference centre.

12. YOUR RIGHTS UNDER THE GDPR

Subject to the conditions and limitations provided by applicable law, you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to certain processing;
receive personal data you have provided in a structured, commonly used and machine-readable format and request data portability where applicable;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent data protection supervisory authority.

These rights are not absolute and may be subject to statutory exceptions.

13. HOW TO EXERCISE YOUR RIGHTS

To exercise your data protection rights, contact:

hi@yeesthin.com

Please provide sufficient information for us to identify your request.

Where reasonably necessary to protect your personal data, we may request additional information to verify your identity before fulfilling a request.

We will respond within the time limits prescribed by applicable data protection legislation.

14. RIGHT TO OBJECT

Where we process your personal data on the basis of legitimate interests, you may have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for those purposes.

15. AUTOMATED DECISION-MAKING

YEESTHIN does not intend to make decisions producing legal effects or similarly significant effects on Customers based solely on automated processing unless this is permitted by applicable law and the required safeguards are implemented.

Certain automated systems may nevertheless be used for fraud prevention, security, payment processing, Website functionality, analytics or advertising.

16. SECURITY

YEESTHIN implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, accidental or unlawful destruction, loss, alteration or disclosure.

No online transmission or storage system can provide absolute security. We therefore continually assess and adapt our measures according to the nature of the processing and relevant risks.

17. CHILDREN

The YEESTHIN online store is not intended to knowingly collect personal data directly from children where parental consent or another legal basis would be required under applicable law.

If we become aware that personal data has been collected unlawfully from a child, appropriate steps will be taken in accordance with applicable law.

18. LINKS TO THIRD-PARTY WEBSITES

Our Website may contain links to third-party websites or services.

YEESTHIN is not responsible for the privacy practices of independent third parties. We encourage users to review the relevant privacy information before providing personal data to those services.

19. CHANGES TO THIS PRIVACY POLICY

YEESTHIN may update this Privacy Policy when necessary due to changes in our services, technologies or applicable legal requirements.

The current version will be published on www.yeesthin.com, together with the date of the latest update.

Material changes will be communicated where required by applicable law.

20. SUPERVISORY AUTHORITY

You have the right to lodge a complaint with the data protection supervisory authority competent for your case.

The supervisory authority in Bulgaria is the Commission for Personal Data Protection (CPDP).

You may also have the right to contact the supervisory authority in the EU/EEA country of your habitual residence, place of work or place of the alleged infringement.

21. CONTACT

For questions concerning this Privacy Policy or the processing of your personal data, please contact:

YEESTHIN / Trade Sales Solutions LTD
Company Registration No.: 204428694
VAT No.: BG204428694
Address: Stefan Karadzha Street, 4204 Tsaratsovo, Republic of Bulgaria
Email: hi@yeesthin.com
Website: www.yeesthin.com

This Privacy Policy is effective as of 17 September 2026.