Privacy policy

Draft — pending legal review. Details in [square brackets] will be completed before launch.

Controller

[Company name] EOOD
[Registered address], Bulgaria
UIC (ЕИК): [number]
VAT number: [if registered]
Represented by: Victoria Genova
Email: v.genova@amare-atelier.com
Phone: [phone]

What we process and why

• Orders: name, email, phone, delivery and billing address, order details — to conclude and perform the contract (Art. 6(1)(b) GDPR).
• Accounting: invoices and order records — to comply with Bulgarian accounting and tax law (Art. 6(1)(c) GDPR).
• Customer account (optional): email, password (stored only as a hash), addresses, order history — to provide the account you requested (Art. 6(1)(b) GDPR).
• Inquiries: the details you enter in our forms — to answer you (Art. 6(1)(b) and (f) GDPR).
• Newsletter (only if you subscribe): email address — based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Security: technical log data such as IP address — to keep the website secure (Art. 6(1)(f) GDPR).

Payments

Payments are processed by Stripe Payments Europe, Ltd. We do not receive or store your full card details.

Processors

We use carefully selected service providers who process data on our behalf: payment (Stripe), hosting ([hosting provider]), email delivery ([email provider]) and couriers for delivery. Data processing agreements are in place where required.

Retention

Order and accounting records are kept for the periods required by Bulgarian accounting and tax law. Account data is kept until you delete your account. Inquiries are deleted when they are no longer needed. Newsletter data is kept until you unsubscribe.

Cookies

We only use cookies that are strictly necessary for the website to work (for example your shopping cart and login session). We do not use advertising or tracking cookies. [If privacy-friendly, cookieless analytics are used, describe them here.]

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw consent at any time. Contact us at v.genova@amare-atelier.com. You also have the right to lodge a complaint with the Commission for Personal Data Protection (Комисия за защита на личните данни), Sofia — cpdp.bg, or with the supervisory authority in your country.