Privacy Policy

Last updated: 12 August 2026.

1. Data controller

The controller of personal data collected through this website and its enquiry form is Bistra Fidanova. Contact: bistrafid@gmail.com, +359 888 286 810.

2. Data we collect

The form may collect your phone number, email, selected product, preferred contact method and any message you provide. If you choose “With registration”, country, city and postal code are also collected. If you choose “Without registration”, delivery address and postal code are required, while the delivery note is optional.

3. Why we use the data

We use the data to respond to your enquiry, clarify the product and request route, and take steps at your request before a possible order. The form is not used for automated decision-making or profiling.

4. Legal basis

Enquiry data is processed to take steps at your request before a possible contract and, where applicable, for the legitimate purpose of responding to your communication. Where a specific later operation requires consent, consent will be requested separately and explicitly.

5. Recipients and international transfers

Data may be processed by hosting and email providers. If you later choose OlyLife registration and that requires data to be provided outside the European Economic Area, the transfer will only take place under an applicable GDPR transfer mechanism and after the required information about the recipient and transfer is provided.

6. Retention

Enquiries are kept for the period needed to handle the enquiry and follow-up communication and, where contractual or legal obligations arise, until the applicable retention periods expire. The form does not store requests in the WordPress database; it sends them by email.

7. Your rights

You have rights to access, rectification, erasure, restriction, objection and, where applicable, portability. Where processing relies on consent, you may withdraw it. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection.

8. Cookies and analytics

The base site uses only technically necessary functionality. Marketing or analytics tags will not be activated without an appropriate consent mechanism where consent is required.