Last change: 16.01.2026
This policy describes how we process personal data in relation to the use of the website and the fulfilment of orders/queries. Please read carefully.
The data controller is Bogi Design Ltd (UIC/PIC 207746008). Address: BULGARIA, gr. Plovdiv (4003), North district, Milevi skali, 1. Contact email: [email protected].
Depending on how you use the site, we may process: names, email, phone, shipping and receiving address, order data (items, quantities, status), communication with us (messages/emails), as well as technical data about your device/browser and use of the site (e.g. IP address, access/security logs, session identifiers and cookies required).
We use personal data to: respond to enquiries; process and fulfil orders; arrange delivery by courier (e.g. Speedy/Encounter) or other method (we usually dispatch parcels within 3 working days of order confirmation, subject to availability); issue and store accounting/tax documents (e.g. invoices) in accordance with the law; maintain and protect the website (including logging IPs/logs to prevent abuse, technical support and security). For future marketing communications (e.g. newsletter) we will only process data with your explicit consent.
We process data where there is a legal basis, for example: taking steps at the subject's request and/or performance of a contract (order, communication and delivery); a legal obligation (e.g. accounting/tax); legitimate interest (site security, logging technical data such as IP/logs and preventing abuse); consent - where applicable (e.g. optional cookie categories and future marketing communications).
We use cookies for basic functionality and (if we add them in the future) optionally for analytics/marketing only after your consent. Please see our Cookie Policy for details. Cookie Policy.
We may share personal data with suppliers where this is necessary to fulfil an order or to operate the website - for example courier companies (Speedy/Ekont) for delivery, IT/hosting service providers, and with accounting/legal advisors or competent authorities where required by law.
We generally process data within the European Union/European Economic Area (EEA). If a transfer outside the EEA is necessary (e.g. when using certain IT providers), we will apply appropriate safeguards under the GDPR (e.g. standard contractual clauses) and provide additional information upon request.
We retain the data for the period necessary for the purposes above and/or for periods required by applicable law. Typically: (1) Order and communication data - for the period of fulfilment (we typically process and dispatch orders within up to 3 working days subject to availability) and a reasonable period thereafter for servicing and dispute protection; (2) Accounting/tax documents (e.g. (3) Security logs and IP addresses - for up to 1 year, unless longer is required in connection with an incident/abuse; (4) Marketing data (if we activate in the future) - until consent is withdrawn or for a reasonable period of inactivity. Cookie terms are described in the Cookie Policy.
We implement technical and organisational measures to protect personal data (e.g. access controls, restricted access to administrative functions, security logs and communication protection where applicable). However, no transmission/storage method is 100% secure.
You have the right of access, rectification, erasure, restriction, portability, objection to processing, and to withdraw your consent (where processing is based on consent). You also have the right to lodge a complaint with the Data Protection Commission (DPC).
We do not use your personal data for automated decision-making, including profiling, that has legal implications for you or significantly affects you in a similar way.
Certain data is required in order to process and fulfill an order (for example, names, phone number and shipping address). If you do not provide the required data, we may not be able to fulfil the order or respond to the enquiry.
You have the right to lodge a complaint with a competent data protection supervisory authority.
If we activate marketing communications (e.g. an email newsletter), we will only send them with your explicit consent. You can opt-out at any time via an unsubscribe link or by emailing us at the email address provided.
For questions and requests regarding personal data, contact us at [email protected] or at BULGARIA, gr. Plovdiv (4003), North district, Milevi skali, 1. Contact.