Last updated: 22.12.2025

This Privacy Policy describes how petishko.com (the “Website”) collects, uses, stores, and protects personal data of its users and customers in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Bulgarian law.

---

1. Data Controller

The data controller responsible for personal data processing is:

Company name: ELENCHUS GLOBAL EOOD
UIC: 208510263
Registered address:
Obelya 2, Str. “Akad. Dmitriy Lihachov” 31, Sofia, Bulgaria

Contact email: contact@elenchusglobal.com

---

2. Scope of This Policy

This Privacy Policy applies to:

• Visitors of petishko.com

• Customers placing orders through the Website

• Users contacting us via forms, email, or customer support

---

3. Personal Data We Collect

3.1 Data you provide directly

When you use the Website or place an order, we may collect:

• Full name

• Email address

• Phone number

• Billing address

• Shipping/delivery address

• Company name and VAT number (if applicable)

• Order details and purchase history

• Communications with us (emails, messages, support requests)

---

3.2 Payment information

Payments are processed by third-party payment service providers.

We do not store full payment card data.
Payment providers may process:

• Masked card details

• Transaction ID

• Payment status and confirmation

---

3.3 Automatically collected data

When you visit the Website, we may collect:

• IP address

• Browser and device type

• Operating system

• Pages visited and actions taken

• Date and time of access

This data is collected via cookies and similar technologies.

---

4. Purposes and Legal Basis for Processing

---

5. Cookies

The Website uses cookies to:

• Ensure proper website functionality

• Remember user preferences

• Improve the shopping experience

• Analyze website traffic

You can manage or disable cookies through your browser settings.
Disabling cookies may affect some Website features.

---

6. Data Sharing

We do not sell or rent personal data.

Personal data may be shared only with:

• Payment service providers

• Courier and logistics companies

• Hosting and IT service providers

• Accounting and legal advisors

• Public authorities when required by law

All third parties are required to protect personal data in accordance with GDPR.

---

7. International Data Transfers

Personal data is processed primarily within the European Union.
If data is transferred outside the EU/EEA, appropriate safeguards are applied (e.g. Standard Contractual Clauses).

---

8. Data Retention

Personal data is retained only for as long as necessary:

• Orders and invoices: according to Bulgarian accounting legislation

• Customer accounts: until deletion request

• Marketing data: until consent is withdrawn

• Communications: as needed to resolve inquiries

After expiration, data is securely deleted or anonymized.

---

9. Your Rights Under GDPR

You have the right to:

• Access your personal data

• Rectify inaccurate data

• Request erasure (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact us at:
📧 contact@elenchusglobal.com

---

10. Complaints

The competent supervisory body is the Commission for Personal Data Protection (CPDP):

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Phone: +359 2 915 3 518
E-mail: kzld@government.bg, kzld@cpdp.bg
Website: https://www.cpdp.bg

---

11. Data Security

We apply appropriate technical and organizational measures to protect personal data, including:

• Secure hosting

• Limited access controls

• Data protection procedures

Despite these measures, no online system is entirely secure.

---

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Updates will be published on this page with a revised “Last updated” date.

---

13. Contact Information

ELENCHUS GLOBAL EOOD
Email: contact@elenchusglobal.com
Address: Obelya 2, Str. “Akad. Dmitriy Lihachov” 31, Sofia, Bulgaria