Privacy policy

Last updated: 19 October 2026

This policy explains how Bgm8 Eood (“BGM8”, “we”, “us”) uses personal data when you visit bgm8-eood.com, send a request through the form on the website, write to us or call us. It is written under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the Bulgarian Personal Data Protection Act.

1. Controller

The controller is Bgm8 Eood, Ul.ALEKSANDROVSKA 62, 7000, Ruse, Bulgaria, company number BG117684852, represented by the director Iliyan Kolev. Email: Iliyan.bgm8ltd@gmail.com, phone: +359 87 943 2310.

2. What data we process

• Requests through the form: your name, email address and/or phone number, the town if you give it, what you are looking for (clothing, outerwear and knitwear, footwear), the items, sizes, colours and quantity you describe, and your message.
• Email and phone: your name, contact details and the content of your message or call.
• Technical data: when the website is delivered, our hosting provider processes your IP address, browser type (user agent), the page requested and the time of the request, for security and delivery of the website.

When you press “Send request”, the details you entered are sent to our website and stored in a database hosted by Cloudflare so that we can reply to you. To protect the form against automated abuse, a salted one-way hash of your IP address is stored with the request and used only to limit how many requests can be sent in a short time. If the form cannot be sent, the page shows our email address and phone number instead.

3. Purposes and legal bases

• To reply to your request and prepare an offer — Article 6(1)(b) GDPR (steps taken at your request before entering into a contract).
• To answer other questions, keep our correspondence in order, protect the form against abuse and keep the website secure — Article 6(1)(f) GDPR (our legitimate interests in running the business and the website).
• To keep accounting and tax records where an order follows — Article 6(1)(c) GDPR (legal obligation).

4. How long we keep data

We keep personal data only as long as needed to deal with your enquiry. Requests sent through the form are deleted from the website database automatically 12 months after they arrive. Correspondence is kept as long as needed for the enquiry and, where an order follows, for as long as Bulgarian accounting and tax law requires. Hosting logs are kept by the provider for a short period for security purposes.

5. Who receives data

Cloudflare, Inc. hosts and delivers this website and stores the requests sent through the form, as our processor and on our behalf. Your email provider and ours deliver the emails you send us. We do not sell personal data and do not share it for marketing.

6. Transfers outside the EEA

Cloudflare may process technical data and stored requests outside the European Economic Area, including in the United States. Such transfers rely on the EU-US Data Privacy Framework where the recipient is certified, or otherwise on the Standard Contractual Clauses adopted by the European Commission.

7. No cookies, no tracking

The website sets no cookies and uses no analytics, advertising or tracking tools. There is no profiling and no automated decision-making. See the Cookie policy.

8. Your rights

Under Articles 15–22 GDPR you have the right to access your personal data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on our legitimate interests. Giving your data is voluntary, but without contact details we cannot reply to a request. To use any of these rights, contact us at Iliyan.bgm8ltd@gmail.com.

9. Complaints

You have the right to lodge a complaint with the supervisory authority: Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

10. Changes

We may update this policy when the website or our processing changes. The date at the top shows the latest version.