Last updated: 20 October 2026

1. Who We Are

This Privacy Policy explains how tochka & tochka Ltd, operating the online store tochka & tochka at https://www.tochka-tochka.com, collects, uses and protects personal data when you visit our website, contact us or place an order.

Data Controller: tochka & tochka Ltd

Registered address: 20A Yastrebets Street, Sofia 1680, Bulgaria

Company registration number: 204941565

Contact email: studiotochka@gmail.com

We act as the data controller for personal data processed in connection with our online store.

2. What Personal Data We Collect

Depending on how you use our website, we may collect the following information:

Contact and order details: name, email address, telephone number, billing address, delivery address and information about your order.

Payment-related information: payment status and transaction details needed to process and manage your order. Payments are processed through our payment service provider, Stripe. Payment information may be collected directly by Stripe in accordance with its own privacy policy.

Communications: information you provide when contacting us about a product, order, delivery, return or other enquiry.

Technical and usage information: information generated when you use the website, such as device and browser information, website activity and technical logs, where collected by Squarespace or other services used to operate the website.

Cookie preferences: information about your cookie choices and preferences.

We do not ask you to provide personal data that is unnecessary for the purposes described in this policy.

3. How and Why We Use Your Personal Data

We process personal data for the following purposes:

Processing and fulfilling orders, including payment, delivery and customer service.

Communicating with customers about orders, delivery arrangements, returns and enquiries.

Meeting legal obligations, including applicable accounting, tax and record-keeping requirements.

Operating, maintaining and securing the website, identifying technical problems and preventing misuse.

Understanding website activity, where analytics or technical information is processed through the website platform and its available settings.

Responding to requests concerning personal data and complying with applicable data protection law.

We process personal data on the following legal bases, as applicable: to take steps at your request and perform our contract with you, including processing and delivering orders; to comply with legal obligations, including accounting and tax requirements; to pursue our legitimate interests in operating, maintaining and securing the website, provided that these interests do not override your rights and freedoms; and, where required, on the basis of your consent.

Where processing is based on consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

4. Who We Share Your Data With

We may share relevant personal data with service providers where necessary to operate the store and fulfil our obligations, including:

Squarespace, which provides the website and online store platform.

Stripe, which processes payments.

Delivery and courier companies, including Econt for deliveries within Bulgaria and A1 POST for international deliveries, to deliver orders.

Accounting, tax, legal or other professional service providers, where necessary.

Public authorities, where disclosure is required by law.

We share only information that is relevant to the purpose for which it is provided. These providers may process personal data under their own terms and privacy policies and, where applicable, under contractual data protection arrangements.

5. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including processing orders, handling customer enquiries and returns, resolving disputes, maintaining appropriate business records and meeting legal obligations.

Order, transaction and accounting records may need to be retained for periods prescribed by applicable law. Other information, such as customer correspondence and technical data, is retained for as long as reasonably necessary for its relevant purpose, taking account of legal requirements and the need to establish or defend legal claims.

When personal data is no longer required, it will be deleted or otherwise handled in accordance with applicable law.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies that may be necessary for the website and online store to function, maintain security and support essential features.

Squarespace may also generate technical, activity and usage information as part of providing the website platform. The website has cookie preference controls that allow visitors to manage their choices. Our current settings restrict non-essential cookies.

Where required by law, non-essential cookies or similar technologies should only be used with the appropriate consent. You can review or change your available cookie choices through the website’s cookie settings.

The specific cookies and technologies used may depend on the website platform, enabled features and any third-party services in use. We may update this section if those features or settings change.

7. International Data Transfers

Some of our service providers may process personal data in countries outside Bulgaria or the European Economic Area (EEA). Where personal data is transferred internationally, the relevant provider and transfer arrangements must comply with applicable data protection law, including the use of an adequacy decision or appropriate safeguards where required.

For further information about a provider’s data processing and international transfers, please consult that provider’s privacy documentation.

8. Your Data Protection Rights

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the right to:

Request access to your personal data.

Request correction of inaccurate or incomplete data.

Request erasure of your data where the legal conditions are met.

Request restriction of processing in certain circumstances.

Object to processing where the law provides this right.

Request data portability where applicable.

Withdraw consent where processing is based on consent.

Lodge a complaint with a competent data protection supervisory authority.

These rights are subject to applicable legal conditions and exceptions. For example, we may be required to retain certain records to comply with legal obligations even if you request their deletion.

To exercise your rights or ask a question about how your personal data is handled, contact us at studiotochka@gmail.com. We will respond in accordance with applicable law and may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) in Bulgaria:

Website: https://www.cpdp.bg/

Email: kzld@cpdp.bg

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria.

9. Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

However, no website or method of electronic transmission or storage can be guaranteed to be completely secure.

10. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, website features, service providers or legal requirements. The latest version will be published on this page, together with its updated date.

11. Contact Us

For questions about this Privacy Policy, our handling of personal data or requests concerning your data, please contact:

tochka & tochka Ltd

Email: studiotochka@gmail.com

Address: 20A Yastrebets Street, Sofia 1680, Bulgaria.