Privacy Policy | Couture Candles by AD

Last updated: June 11, 2026

I. INFORMATION ABOUT THE CONTROLLER

"COUTURE CANDLES" EOOD, UIC: 208782530, with registered office and management address: BULGARIA, Veliko Tarnovo, P.C. 5000, 27 Magistralna Blvd., phone: +359 87 655 9589, email: adrianaivanova464@gmail.com, is a Personal Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR).

II. WHAT PERSONAL DATA WE COLLECT

We collect the following categories of personal data:

1 Order Data: First and last name, phone number, email address, delivery address.

2 Billing Data: If you want an invoice – PIN (EGN) or company details.

3 Automatically Collected Data: IP address, browser type, visited pages (via cookies).

III. PURPOSES AND LEGAL BASIS FOR PROCESSING

4 Performance of a Contract: For processing, confirmation, and delivery of your order.

5 Legal Obligation: For accounting purposes and issuing documents according to tax legislation.

6 Legitimate Interest: For improving the functionality of the site and responding to your inquiries.

7 Consent: For sending marketing messages (if you have explicitly subscribed).

IV. DATA SHARING WITH THIRD PARTIES

To fulfill your order, your data is provided to:

• Courier companies (Econt/Speedy) – for delivery.

• Accounting firm – for financial reporting.

• IT service providers (hosting) – for site maintenance.

• State authorities (NRA) – upon legal requirement.

V. STORAGE PERIOD

• Order Data: 5 years after the performance of the contract.

• Accounting Documents: 10 years, according to the Accountancy Act.

• Inquiry Data: Until the completion of communication.

VI. YOUR RIGHTS

According to GDPR, you have the right to:

• Access to your data;

• Correction of inaccurate data;

• Erasure ("right to be forgotten");

• Restriction of processing;

• Portability of data;

• Objection to processing;

• Complaint to the Commission for Personal Data Protection (www.cpdp.bg).

To exercise your rights, contact us at: adrianaivanova464@gmail.com.

VII. SECURITY MEASURES

We apply technical and organizational measures to protect your data against unauthorized access, loss, or misuse, including SSL certificates for connection encryption.