This policy explains what personal data we collect, why we collect it and what rights you have under the General Data Protection Regulation (GDPR) and the Bulgarian Personal Data Protection Act.
1. Data controller
- Controller: FORZATS EDPK, Company ID 208929400
- Address: 58 Slavyanska Str., Dabovo 6178, Maglizh Municipality, Stara Zagora Region, Bulgaria
- E-mail for questions and requests: box@flyleaf.su
- Phone: +359 879 441 559
The company is not required to appoint a data protection officer; questions about this policy go to the e-mail above.
2. What we collect
When you send a request: your name, e-mail, phone number and — optionally — your Telegram username, together with the option you chose and the message you leave us.
When you fill in the questionnaire: what we need to write the tale — the child's name and age, interests, events, names of family and friends, as well as photos and materials you choose to send us.
When you order a printed item: the delivery address and the recipient's details.
We collect no payment data through the website: the site does not currently accept payments.
3. Children's data
A tale for a child is ordered by a parent or guardian, who fills in the questionnaire and provides the child's details. The legal basis is performance of the contract concluded with the parent. We do not collect data directly from children and do not address advertising to them.
4. Purposes and legal bases
| Purpose | Basis |
|---|---|
| Replying to a request and agreeing the order | Art. 6(1)(b) GDPR — steps prior to entering into a contract |
| Creating and delivering the tale | Art. 6(1)(b) GDPR — performance of the contract |
| Accounting and tax records | Art. 6(1)(c) GDPR — legal obligation |
| Handling a complaint | Art. 6(1)(b) and (c) GDPR |
We do not use the data for profiling and take no automated decisions producing legal effects for you.
5. Who else sees the data
- Telegram. Requests and completed questionnaires are forwarded to a work chat on Telegram so that they reach the team immediately. This means their content is processed by Telegram Messenger and transferred outside the European Union, under Telegram's own privacy policy. If you would rather this did not happen, write to box@flyleaf.su and we will arrange the order over e-mail instead.
- The artist drawing the illustrations receives only the materials needed for the work.
- The printer and the carrier receive the delivery details for printed items.
- The hosting provider whose servers run the website and the database.
We do not sell data and do not pass it on for anyone else's advertising.
6. Retention
Data relating to a completed order is kept for up to 5 years after delivery — the general limitation period. Accounting records are kept for as long as the law requires. A request that did not lead to an order is deleted within one year.
7. Your rights
You have the right to request access to your data, its rectification or erasure, restriction of processing, data portability, and to object to processing. Requests go to box@flyleaf.su; we reply within one month.
If you have sent us materials for a tale and ask us to delete them before work begins, we delete them and refund the payment.
8. Right to complain
You have the right to lodge a complaint with the Commission for Personal Data Protection — 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, cpdp.bg.
9. Cookies and browser storage
The website uses no analytics, advertising or tracking cookies and passes no data to advertising networks.
The only thing stored in your browser is the list of your own orders (in
localStorage), so that you can open them again from the "Where is my tale"
page. This storage is technically necessary for the service you asked for,
requires no consent and never leaves your device. You can clear it at any time
through your browser settings.
10. Changes
If this policy changes, the new version is published on this page.