Privacy Policy

1. Data Controller

qulsira.eu ("we", "us", "our") is the controller responsible for your personal data collected through qulsira.eu (the "Website") and any associated order processes. We are registered for commercial activity in Bulgaria under Bulgarian Commerce Act. Our contact details for data protection matters are listed in Section 10 of this Policy.

This Privacy Policy applies to all users of our Website and all persons who place orders for our dietary supplement products, including Strong Prime – Advanced Vitality Support.

2. Personal Data We Collect

We collect the following categories of personal data, provided directly by you:

• Identity data: first name, last name
• Contact data: telephone number, email address
• Delivery data: postal address, city, postcode
• Transaction data: order details, selected products, chosen payment method
• Communication data: any notes or messages you send via our contact form
• Technical data: IP address, browser type, device type, pages visited, time and date of visit (via cookies and server logs)

We do not collect or process special categories of sensitive personal data (such as health data, biometric data, or genetic data) beyond what you voluntarily provide in free-text fields.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• To process and fulfil your product orders, including communicating your order to our fulfilment and courier partners
• To confirm orders via telephone or email, and to provide order status updates
• To handle returns, refunds, and customer service enquiries
• To comply with our legal and regulatory obligations under Bulgarian law and EU law
• To improve the functionality and user experience of our Website through anonymised analytics data
• To send you promotional communications about our products, where you have explicitly opted in or where we have a legitimate interest and applicable law permits (you may opt out at any time)

4. Legal Basis for Processing

Our legal bases for processing your personal data under the General Data Protection Regulation (EU) 2016/679 ("GDPR") are:

• Performance of a contract: processing necessary to fulfil your order (Article 6(1)(b) GDPR)
• Legitimate interests: fraud prevention, improving our services, and managing customer relationships (Article 6(1)(f) GDPR)
• Legal obligation: where processing is required to comply with Bulgarian commercial, tax, or consumer protection law (Article 6(1)(c) GDPR)
• Consent: for non-essential cookies and direct marketing, where you have given explicit consent (Article 6(1)(a) GDPR)

5. Third-Party Sharing

We share your personal data only where necessary and under appropriate safeguards:

• Courier services: Speedy AD and Econt Express EOOD receive your name, telephone number, and delivery address to facilitate order delivery across Bulgaria
• Payment processors: Visa/Mastercard acquiring banks and ePay.bg process payment data; qulsira.eu does not store full card details
• IT service providers: hosting, email, and CRM providers operating under data processing agreements
• Legal authorities: if required by Bulgarian law, court order, or other binding legal instrument

We do not sell your personal data to third parties. We do not transfer personal data outside the European Economic Area without ensuring appropriate safeguards are in place.

6. Data Retention

We retain personal data for the following periods:

• Order and transaction records: 5 years from the date of purchase, in accordance with Bulgarian accounting and tax legislation
• Customer service communications: 2 years from the date of the last communication
• Marketing consent records: until you withdraw your consent or 3 years of inactivity
• Website analytics data: up to 26 months in anonymised form

After the applicable retention period expires, data is securely deleted or anonymised.

7. Your Rights Under GDPR

As a data subject within the EU/EEA, you have the following rights regarding your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): request deletion of your data, subject to applicable legal retention obligations
• Right to restriction: request that we limit how we process your data in certain circumstances
• Right to data portability: receive your data in a structured, machine-readable format
• Right to object: object to processing based on legitimate interests or for direct marketing purposes
• Right to withdraw consent: withdraw any consent you have given at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us at the details in Section 10. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Bulgarian supervisory authority:

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. These measures include SSL/TLS encryption for all data transmitted via our Website, access controls limiting data access to authorised staff only, and regular security assessments of our systems and processes.

Despite our efforts, no method of internet transmission is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify the CPDP and affected individuals in accordance with GDPR Article 33 and 34 requirements.

9. Cookies

Our Website uses cookies to improve functionality and analyse usage. For full details of the cookies we use, the purposes they serve, and how to manage your preferences, please read our Cookie Policy.

10. Contact & Updates

For any data protection enquiries, requests to exercise your rights, or to withdraw your consent, please contact us:

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. The date of the most recent revision is shown at the top of this page. We encourage you to review this Policy regularly.