Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how Tsilkov Ltd. (trading as “Tsilkov Cosmetics”, “we”, “us” or “our”) collects and uses personal data when you visit tsilkovcosmetics.eu, contact us, or submit a project enquiry.

Data controller: Tsilkov Ltd., UIC/VAT BG115279788, Sredna Gora 33A, 4300 Karlovo, Bulgaria. You can contact us at skincare@tsilkov.com or +359 897 91 71 44.

1. Personal data we collect

Information you provide

When you use our contact form or communicate with us, we may collect your name, work email address, telephone number, company name, the contents of your message, project details and any information you choose to provide.

Technical and usage information

Our website and hosting providers may process technical data such as your IP address, browser and device type, operating system, referring page, pages viewed, date and time of access, diagnostic information and security logs. This data is used to keep the website secure, available and technically reliable.

Cookie preferences

We store your cookie-consent choices so that the website can remember them. Optional analytics, advertising or embedded third-party services are used only in accordance with your consent settings. More information is available in our Cookie Policy.

2. Why we process personal data

• To respond to enquiries and prepare a possible business relationship. The legal basis is taking steps at your request before entering into a contract and, where applicable, performance of a contract.
• To operate, protect and improve the website. The legal basis is our legitimate interest in maintaining a secure, effective and user-friendly business website.
• To comply with legal obligations and protect legal rights. We may retain or disclose information where required by Bulgarian or EU law, or where reasonably necessary to establish, exercise or defend legal claims.
• To use optional cookies and third-party services. Where consent is required, the legal basis is your consent, which you may withdraw at any time through the Cookie settings link in the website footer.

3. Contact-form enquiries

Information submitted through the website contact form is sent to our business email and may also be stored securely in the WordPress administration area as a website enquiry. We use it only to review your request, communicate with you and follow up on the potential or existing business relationship.

Please do not send sensitive personal data, payment-card data, government identification numbers, medical information or other information that is not necessary for your enquiry.

4. Service providers and recipients

We may share personal data only where necessary with trusted providers that help us operate the website and our communications, including our hosting provider, website and security service providers, email provider and professional advisers. These providers may process data only for the relevant service and under applicable confidentiality and data-protection obligations.

The website may use or link to third-party services such as Google Maps, LinkedIn, Google Fonts and content-delivery networks. When these services load, their providers may receive technical information such as your IP address and browser data. Their own privacy terms apply to their processing.

5. International data transfers

Some technology providers may process information outside the European Economic Area. Where this occurs, we rely on an applicable legal transfer mechanism, such as an adequacy decision, standard contractual clauses or another safeguard recognised under EU data-protection law.

6. How long we keep information

We keep personal data only for as long as needed for the purpose for which it was collected. Enquiry and correspondence records are normally retained for up to three years after the last meaningful communication, unless an active business relationship, legal obligation, dispute or legitimate record-keeping need requires a longer period. Security logs and cookie preferences may be retained for shorter technical periods.

7. Your data-protection rights

Subject to the conditions of the General Data Protection Regulation and applicable Bulgarian law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of personal data where the legal conditions are met;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a portable format;
• withdraw consent at any time where processing is based on consent; and
• lodge a complaint with a competent supervisory authority.

In Bulgaria, the supervisory authority is the Commission for Personal Data Protection. To exercise your rights, contact us at skincare@tsilkov.com. We may need to verify your identity before completing a request.

8. Security

We use reasonable technical and organisational measures intended to protect personal data against accidental or unlawful loss, alteration, unauthorised access or disclosure. No internet transmission or electronic storage method can be guaranteed to be completely secure.

9. External links

Our website may link to third-party websites. We do not control those websites and are not responsible for their privacy practices. Review the privacy information of any third-party website before providing personal data.

10. Changes to this policy

We may update this Privacy Policy to reflect changes to the website, our services or legal requirements. The current version and its update date will always be published on this page.

11. Contact us

Questions about privacy or the use of your personal data can be sent through our contact form, by email to skincare@tsilkov.com, by telephone at +359 897 91 71 44, or by post to Tsilkov Ltd., Sredna Gora 33A, 4300 Karlovo, Bulgaria.