Privacy policy

This policy explains what personal data we collect through marialoquen.com and in our exchanges with you, why we collect it and what your rights are.

1. Who is responsible

The data controller is Shadedpoly [LEGAL FORM], a company registered in Bulgaria under UIC [UIC NUMBER], registered office [REGISTERED ADDRESS], which runs the Maria Loquen brand.

Contact for any privacy question: info@marialoquen.com

2. What we collect and why

Situation	Data	Purpose	Legal basis (GDPR)
Contact form	Name, e-mail, phone (optional), type of request, model (optional), message	Answer your request and prepare a quote	Steps taken at your request before a contract (Art. 6(1)(b))
E-mail or Instagram messages	Your messages, name or username, any photos you send (e.g. of an item to repair)	Discuss your request	Art. 6(1)(b), and our legitimate interest in answering you (Art. 6(1)(f))
Orders, repairs, workshops	Name, delivery address, phone, e-mail, invoicing details (company name and VAT number for businesses), payment information from the bank transfer	Make and deliver the piece, invoice and keep accounts	Performance of the contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c))
Visiting the site	Technical data processed by the host: IP address, browser, pages requested, date and time	Deliver the site securely and prevent abuse	Legitimate interest (Art. 6(1)(f))

We do not use your data for advertising, we do not sell it, and we do not use tracking or advertising cookies.

3. Cookies and third-party content

• The site does not place analytics or advertising cookies, so there is no cookie banner. No analytics tool is used at the moment.
• The only cookie is nf_lang: it is set when you choose a language with the EN/BG switch, so that the site remembers your choice. It contains only the language code and is kept for one year.
• Our fonts are hosted on our own site: no request is sent to Google Fonts.
• The site does not embed any video or social-media content. The links to Instagram and YouTube take you to those platforms, and their own privacy policies apply there.

4. Who receives your data

Only we have access to your data. We also use the following service providers, which process it on our behalf:

• Netlify, Inc. (United States): hosts the site and receives the contact form submissions.
• Cloudinary Ltd.: delivers the images of the site. It processes technical data such as IP addresses.
• [E-MAIL PROVIDER — e.g. Google Workspace, Zoho, OVH…]: our mailbox info@marialoquen.com.
• Our bank and the carrier chosen for your delivery, for payments and deliveries.
• Our accountant, for invoicing and legal obligations.

When a provider is located outside the European Economic Area (for example Netlify in the United States), the transfer is covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.

5. How long we keep it

• Requests that do not lead to an order: up to 2 years after our last exchange.
• Orders, invoices and accounting records: as long as Bulgarian accounting and tax law requires (up to 10 years).
• Technical logs of the host: a short period, set by Netlify.

6. Your rights

You can ask us at any time for access to your data, its correction, its deletion, the restriction of its processing, its portability, or object to a processing based on our legitimate interest. Write to info@marialoquen.com. We reply within one month.

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg) or with the data-protection authority of your country of residence.

7. Security

Access to your data is limited to what is needed to handle your request, and the site is served over an encrypted connection (HTTPS).

8. Changes

We may update this policy. The date at the top shows the latest version.