1. Home
  3. Privacy Policy

Privacy Policy

Last updated: 29.04.2026

Merchant: ELKOMO OOD
UIC: 206194222
VAT number: BG206194222
Registered office and management address: Bulgaria, Asenovgrad
Represented by: Vasil Petrov Yankov
Contact email: office@elkomo.bg

1. Personal Data Controller

The personal data controller is ELKOMO OOD, UIC 206194222, with registered office and management address: Bulgaria, Asenovgrad 4230, Izok residential area, bl. 9, ent. B, fl. 5. For questions regarding personal data, you can contact us at office@elkomo.bg.

2. What data we collect

  • Names, phone number, email, delivery address, and billing address.
  • Order data: purchased products, quantity, price, shipping method, and payment method.
  • Billing data, including UIC/VAT number, when the customer requests an invoice.
  • Customer communication, including inquiries, complaints, returns, and service cases.
  • Technical data for website usage, such as IP address, device, browser, cookie identifiers, and session data.
  • Marketing preferences, when the customer subscribes to a newsletter or gives consent for marketing.

3. Why we process the data

  • For accepting, processing, payment, and delivery of orders.
  • For issuing accounting documents and fulfilling legal obligations.
  • For handling inquiries, returns, complaints, and warranty claims.
  • For protection against abuse, technical support, and store security.
  • For analyzing website performance and improving customer experience.
  • For marketing communications only when there is a valid basis, such as consent or other permissible legal basis.

4. Legal Bases

Processing is carried out on the following grounds: performance of a contract or taking steps prior to entering into a contract; legal obligation; legitimate interest for the protection and development of the business; consent, where required.

5. To whom we provide data

  • Courier and logistics partners, when necessary for delivery.
  • Accountants, auditors, and consultants, when necessary for legal or contractual services.
  • Payment providers and banks for payments by card, bank transfer, or other electronic method.
  • Shopify and related providers of hosting, support, and technical infrastructure for the online store.
  • Marketing and analytical tools, when activated and an applicable basis exists.
  • Government authorities, courts, or regulatory institutions, when required by law.

6. Retention periods

Data for orders, payments, and accounting documents are stored for the periods required by applicable accounting and tax legislation. Data for customer communication, complaints, and warranty cases are kept for a period necessary for service and protection of rights. Data processed based on consent are kept until the consent is withdrawn or until the purpose ceases to exist.

7. International Transfers

Since the store uses Shopify and other online services, some of the data may be processed outside the European Economic Area. In such cases, appropriate protection mechanisms under GDPR are applied, including standard contractual clauses, where applicable.

8. User Rights

You have the right to access, rectify, erase, restrict processing, object, data portability, and withdraw consent when processing is based on consent. You can exercise your rights by contacting office@elkomo.bg. You have the right to lodge a complaint with the Commission for Personal Data Protection.

9. Security

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or unlawful disclosure.