Privacy Policy

Privacy Policy of BK Fashion Online Store
Last updated: April 2026
1. General Information
Data Controller:
Katya Koleva Ltd., UIC 107594542, with registered address:
Bulgaria, Gabrovo, Dr. Tota Venkova Str. No. 3
Email: bkfashionatelier@gmail.com
Phone: +359 886868632
The company processes personal data in accordance with applicable European and national legislation, including Regulation (EU) 2016/679 (GDPR).
2. Purpose and Legal Grounds for Processing
Personal data is processed for the following purposes:
Contract performance – order processing, delivery, payments
Legal obligations – accounting and tax compliance
Marketing and communication – only with explicit consent
Legitimate interest – fraud prevention, security, legal claims protection
The Controller reserves the right to process data when necessary to protect its legitimate interests, insofar as they do not override the rights of the data subjects.
3. Types of Data Collected
The following data may be processed:
Identification data (name, surname)
Contact details (email, phone, address)
Order and delivery information
Payment-related data (no card data stored)
Technical data (IP address, logs, device, browser)
⚠️ The Controller does not store or process payment card data. Payments are handled entirely by licensed third-party payment providers.
4. Data Source
Data is provided voluntarily by the user when:
registering
placing an order
subscribing to a newsletter
contacting the Controller
Failure to provide certain data may result in inability to deliver the requested service.
5. Data Retention
Accounting and commercial documents: up to 10 years
Customer account data: until deletion or inactivity
Marketing data: until withdrawal of consent
Technical data: up to 12 months
Data may be retained longer where necessary for legal claims.
6. Data Subject Rights
Users have the right to:
access their data
rectification
erasure
restriction of processing
objection
data portability
withdraw consent
Users have the right to lodge a complaint with the Data Protection Authority.
Requests can be sent to: bkfashionatelier@gmail.com
The Controller reserves the right to verify identity before processing requests.
7. Data Sharing
Personal data may be shared with:
courier companies
payment providers
accounting and IT service providers
public authorities when required by law
These parties act as independent controllers or processors under applicable law.
8. International Transfers
Data is generally not transferred outside the EU.
Some transfers may occur via third-party services, subject to appropriate safeguards.
9. Cookies
The website uses:
essential cookies
analytical cookies
marketing cookies
Some cookies are used only after user consent.
Users can manage preferences via browser or site tools.
10. Marketing Communication
Marketing messages are sent only with consent.
Each message includes an unsubscribe option.
Limited profiling may be used to improve user experience.
11. Security
Reasonable technical and organizational measures are applied.
⚠️ Absolute security of data transmission over the internet cannot be guaranteed.
12. Limitation of Liability
The Controller is not liable for:
actions of third parties (couriers, payment providers, etc.)
unauthorized access due to user actions
technical issues beyond reasonable control
external platforms and services
Users are responsible for safeguarding their login credentials.
13. Policy Updates
This Policy may be updated at any time.
The current version is published on the website and becomes effective upon publication.