BGENSR
Book now

Privacy Policy

Last updated: 2026-10-17

1. Who is responsible for your data

The controller of your personal data is Andrea Cvetkov, (Andrea Beauty), Vasil Stefanov, Manastirski Livadi, Sofia, Bulgaria. You can contact me about anything in this policy at andreabeauty.bg@gmail.com.

2. What data I collect

  • Contact / booking form: your name, email address, phone number (optional), preferred date (optional) and the message you write.
  • Emails and social media messages you send me directly (Gmail, Instagram, Facebook), including anything you choose to include in them.
  • Technical data that the hosting provider records automatically in server logs when you visit the website (for example IP address, browser type and time of the request).
  • Local storage in your browser: your language choice and your cookie consent choice. These are not used to identify you.

3. Why I use your data and on what legal basis

  • To reply to your enquiry and arrange a booking – steps taken at your request before an agreement, and my legitimate interest in answering messages (Art. 6(1)(b) and (f) GDPR).
  • To keep records required by law, for example for accounting if you become a client (Art. 6(1)(c) GDPR).
  • To use optional analytics or external content such as the Google Maps embed – only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • To publish photos or videos of your makeup in my portfolio or on social media – only with your consent, see the booking terms.

4. Who receives your data

  • Form provider: the contact form is sent through FormSubmit (formsubmit.co), which forwards the message to my email inbox.
  • Email provider: Google (Gmail), where enquiries are received and stored.
  • Hosting provider: Hostinger, which hosts the website.
  • Analytics: none is loaded by default. If analytics is enabled in the future, it will load only after you accept it in the cookie banner. Google Analytics 4 (G-QHMJDEW2WD).
  • Google Maps: the map is loaded only after you click “Show map” or accept external content. Google then processes technical data according to its own privacy policy.
  • Instagram and Facebook: links on the site lead to these services, which have their own privacy policies.

I do not sell your data. Where a provider processes data outside the EU/EEA, this happens on the basis of safeguards offered by that provider, such as standard contractual clauses or an adequacy decision.

5. How long I keep data

Enquiries sent through the booking form or by email are kept for 30 days and then deleted.

6. Your rights under GDPR

You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format and to withdraw any consent you gave, at any time and without affecting processing done before. To use these rights, write to andreabeauty.bg@gmail.com.

You also have the right to complain to the supervisory authority in Bulgaria: the Commission for Personal Data Protection (КЗЛД), cpdp.bg.

7. Cookies

See the Cookie Policy for what is stored in your browser and how to change your choice.

8. Changes to this policy

I may update this policy when the website or the law changes. The date at the top shows the latest version.