Last updated: May 2026

​

Welcome to INDARX. The protection of personal data is a fundamental pillar of our operations. This policy, drafted in accordance with EU Regulation 2016/679 (GDPR) and Bulgarian and European national regulations, describes how we collect, use, and protect your data.

We collect only the data necessary to execute the sales contract and manage technical services:

• Identification Data: First name, last name, company name.

• Contact Data: Email, telephone number.

• Shipping and Billing Data: Full address, tax code/VAT number.

• Technical Data: IP address, browsing data (via technical cookies)

Purpose and Legal Basis of Processing: The data is processed for the following purposes:

• Performance of the Contract: Order management, payment processing, and product delivery.

• Legal Obligations: Tax, accounting, and regulatory compliance related to international sales.

• Customer Care: After-sales assistance and warranty management.

Integrated Logistics Model and Third-Party Communication: To ensure the highest safety standards for Personal Protective Equipment (PPE) and efficient delivery times, INDARX operates a Distributed Logistics Model. Under this model, your shipping information (Name, Address, Telephone Number) will be shared exclusively with our Logistics Partners and authorized Manufacturers located in the European Union or Switzerland, for the sole purpose of enabling the direct shipment of the product from the primary storage centers to the final recipient. This transfer is strictly limited to the data necessary for delivery and is carried out in full compliance with Art. 6 of the GDPR. Your data will never be sold or transferred to third parties for marketing purposes without your explicit consent.​ 

Data Retention: The data will be retained for the time strictly necessary to fulfill accounting and tax purposes (usually 10 years, in accordance with applicable laws) or until the interested party requests deletion, where permitted by law.

Security and Transactions: All financial transactions take place in encrypted and secure environments (SSL). INDARX does not store complete credit card information on its servers; this information is handled directly by PCI-DSS-certified payment gateways.

Data Controller: The data controller for the INDARX portal is Magic Deal LTD VAT (VIES): BG207541754 Registered Office: Sofia, Bulgaria Contact email: sales@indarx-workwear.com

Data Subject Rights Pursuant to the GDPR: you have the right to access your personal data, request rectification or erasure, restrict or object to processing, request data portability. To exercise these rights, you can send a formal request to: sales@indarx-workwear.com

Jurisdiction any dispute regarding the processing of personal data will be subject to the jurisdiction of the Court of Sofia, Bulgaria, in accordance with the Data Controller's registered office.

Data Processing via Third Parties and Social Media: For the proper functioning of the portal and our communications activities, INDARX interacts with external platforms.

Interaction with external platforms and digital tools to offer its services, the portal uses external technological infrastructures and digital communication tools:

• Hosting and Management Services: The site is hosted on external professional infrastructures that manage data on behalf of the Company, ensuring database security through advanced protection systems.

• Social Interactions: The site may integrate tools for connecting to social media platforms (widgets, pixels, or sharing links). Data processing by these platforms is governed exclusively by the privacy settings the user has established with their respective providers. Magic Deal Ltd does not have access to personal information on your private profiles.

• Service Applications: We use integrated applications provided by third parties to manage specific site functions (e.g., contact forms). These third parties process data only for the technical purposes required by the service.

​​