Last updated August 29, 2026
1. Who controls your data
The controller of your personal data is Digital New Era Ltd. (Диджитъл Ню Ера ЕООД), 47 Solun Street, Entrance B, Floor 1, Apartment 3A, Borovo, Krasno Selo District, 1680 Sofia, Bulgaria. For anything to do with your data, write to hi@nothingonpurpose.com.
You can read and use this entire site without giving us anything. We only collect data if you decide to buy something.
2. What we collect, why, and on what basis
When you buy a certificate
- Your email address, so we can send the receipt and answer you. Basis: performance of our contract with you.
- The name or pseudonym, optional location, optional message and avatar you choose. These are printed on the certificate. Basis: performance of our contract.
- Your order: amount, currency, date, serial number and payment reference. Basis: our legal obligation to keep accounting records.
When you choose to appear on the public wall
If you tick the box at checkout, the name you chose, your location if you gave one, your message if you wrote one, your avatar, the amount paid and the issue date are published on a public page that anyone can read and search engines can index.
Basis: your consent. You can withdraw it at any time by writing to us, and we will remove the entry. Withdrawing does not affect the lawfulness of publication before you asked. Your email address is never published.
You are free to use a pseudonym, and we would gently encourage it. Anything you publish here may be copied, cached or archived by third parties beyond our control, so treat it as permanent even though we will remove it from our site on request.
When somebody buys a certificate as a gift for you
The buyer supplies the name and message. We rely on their confirmation that they had your permission. If you did not give it, write to us and we will delete the certificate at once — we will not ask the buyer first.
Payment
Card details are entered directly with our payment provider and never reach our servers. The provider processes your IP address and device information to prevent fraud, on the basis of its own and our legitimate interest in not being defrauded.
Server logs
Our hosting provider keeps standard access logs, including IP addresses, to keep the site running and secure. Basis: our legitimate interest in operating and protecting the site.
3. What we do not do
We do not sell your data. We do not share it with advertisers. We do not build advertising profiles, run behavioural tracking, or use automated decision-making or profiling that produces legal effects for you. We do not send marketing email unless you explicitly ask us to.
4. Who else sees your data
- Our payment provider, to take the payment and prevent fraud.
- Our hosting provider, which stores the site and its database.
- Our email provider, to deliver receipts and replies.
- Our accountant and tax authorities, where the law requires it.
Some of these are established outside the European Economic Area. Where data is transferred outside the EEA, it is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
5. How long we keep it
- Order and payment records: for as long as tax and accounting law requires us to keep them.
- Your certificate and wall entry: until you ask us to remove it.
- Emails you send us: normally no more than two years after the matter is closed.
- Server logs: for the short period our host retains them.
Deleting a wall entry does not release its serial number. Numbers are retired, never reissued, so the sequence stays honest.
6. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or hand it over in a portable format. You can object to processing we base on legitimate interest, and withdraw any consent you have given.
Write to hi@nothingonpurpose.com and we will answer within one month. There is no charge.
If you think we have handled your data badly, you can complain to the Commission for Personal Data Protection (Комисия за защита на личните данни), Sofia, or to the authority where you live or work.
7. Cookies
What we store on your device, and how to change your mind, is set out in our Cookie Policy.
8. Children
This shop is not aimed at children and we do not knowingly take payments from them. If you believe a child has bought something here, tell us and we will refund it and delete the data.
9. Changes
If we change this policy in a way that matters, we will say so on this page and change the date at the top.