Last Updated: 13 August 2025

We respect your data. Here’s how we handle it in line with Bulgaria’s PDPA and EU GDPR.

1. Who We Are

Belami Studio Salon (Bulgaria), operating under Bulgarian PDPA and GDPR.

Supervisory Authority: Commission for Personal Data Protection, Sofia, Prof. Tsvetan Lazarov Blvd. No. 2; Email: kzld@cpdp.bg en.angelface-bg.comBulgaria Wants You

2. What We Collect

• Name, phone (e.g., +359 898 123 456), email (e.g., priya.sharma@example.com).
• Appointment history & preferences.
• (Optional) Payment details, via secure processors like Stripe or Razorpay.
• Photo consent for social sharing (until revoked).

3. Legal Basis for Data

Processing is based on:

• Performance of your service contract.
• Our legal obligations.
• Your explicit consent (e.g., for marketing).
• Our legitimate interest (e.g., smooth booking operation). en.angelface-bg.comMultilaw

4. Marketing Communications

• B2C marketing (e.g., promotions) is opt-in only.
• You can opt out any time via unsubscribe link or email.
• If data was provided during a transaction, we may send similar service offers—but still with opt-out. Multilaw

5. How Long We Keep Data

• Appointment data: up to 3 years for accounting and legal purposes.
• After that, dormant or unnecessary info is deleted. KG SalonBulgaria Wants You

6. Your Rights

You have the right to:

• Access, correct, delete, restrict processing, object, or get your data portability data.
• Withdraw consent at any time (doesn’t affect prior valid processing).
• File complaints with the CPDP. Bulgaria Wants YouДанаилова, Тодоров и ПартньориSofia International Film Festival

7. Data Security

We apply standard protection like encryption and access controls. Full compliance with principles like minimization, purpose limitation, storage limitation, and accountability. Данаилова, Тодоров и ПартньориLinklaters

8. International Data Transfers

If your data goes outside the EU, we ensure proper safeguards—like Standard Contractual Clauses or adequacy decisions. Multilaw

9. Children’s Data

GDPR sets 16 as the age of consent; Bulgaria protects those under 14 by requiring parental approval.