Food supplement. Not a medicine. Sold by KRISTIYAN IVANOV, Sofia, Bulgaria.

Privacy Policy

Last updated:

KRISTIYAN IVANOV ("we", "us", "our"), registered at Aleksandar Malinov Blvd 31, 1715 Sofia, Bulgaria, operates the website at kristiyanivanov.bg. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect the following personal data:

  • Order form: name and telephone number, submitted when you place an order request.
  • Contact form: name, email address, and the content of your message.
  • Automatically: IP address, browser type, pages visited, and referring URLs - collected via cookies and server logs when you visit the site.
  • Marketing parameters: UTM parameters and Google Click ID (gclid) appended to URLs by advertising platforms, if applicable.

2. How We Use Your Information

  • To process and confirm your order by telephone and arrange delivery.
  • To respond to enquiries submitted via the contact form.
  • To analyse website traffic and improve site performance (with your consent for analytics cookies).
  • To serve relevant advertising (with your consent for marketing cookies).

3. Legal Basis for Processing

We process your data under the following lawful bases (UK GDPR Article 6):

  • Contract performance (Art. 6(1)(b)): processing your order and delivering the product.
  • Legitimate interests (Art. 6(1)(f)): responding to enquiries and fraud prevention.
  • Consent (Art. 6(1)(a)): analytics and marketing cookies, where you have given explicit consent via the cookie banner.

4. Sharing and Disclosure

We do not sell your personal data. We may share it with:

  • Courier and logistics partners - to arrange delivery of your order (name and delivery address).
  • Google LLC - via Google Analytics and Google Ads, if you have consented to analytics or marketing cookies. Google may process data in the United States under Standard Contractual Clauses.
  • Legal authorities - where required by law or to protect our legal rights.

5. Data Protection

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Data submitted via our website is transmitted over HTTPS.

6. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Object to processing based on legitimate interests.
  • Request restriction of processing.
  • Data portability (where processing is based on consent or contract).
  • Withdraw consent at any time (without affecting the lawfulness of prior processing).
  • Lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, at ico.org.uk or by post to: ICO, Wycliffe House, Water Lane, Wilmslow, SK9 5AF.

To exercise any of these rights, contact us at [email protected] or by post to our registered address.

7. International Data Transfers

Where personal data is transferred outside the UK (for example, to Google LLC in the United States), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the ICO.

8. Retention Periods

We retain order data for up to 6 years for accounting and legal compliance purposes. Contact form data is retained for up to 12 months. Analytics data (where consented) is retained in accordance with Google's standard retention settings.

9. Children's Privacy

This website is intended for adults aged 18 and over. We do not knowingly collect personal data from persons under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Third-Party Services

This site may use the following third-party services:

  • Google Ads Conversion Tracking - measures the effectiveness of our advertising. Cookies: _gcl_au, _gcl_aw. Consent-gated via Consent Mode v2.
  • Google Analytics - website traffic analysis. Cookies: _ga, _gid, _gat. Consent-gated.
  • Google Maps - embedded map on the Contact page, provided via an iframe. Google's privacy policy applies to map interactions.

11. Cookies

We use cookies as described in our Cookie Policy. You can manage your cookie preferences at any time via the cookie settings banner.

12. Updates to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.

13. Contact

KRISTIYAN IVANOV, Aleksandar Malinov Blvd 31, 1715 Sofia, Bulgaria.
Email: [email protected]
Tel: +44 117 429 8830