Privacy policy.

1. Controller. Artekcraft Ltd. (trade name Shanov Studio), ul. Mayor Yuriy Gagarin 6B, bl. 65A, 1113 Sofia, Bulgaria, ЕИК 207583244, email [email protected]. 2. What we process and why. Inquiry form (name, email, service, duration/package, add-ons of interest, preferred date, location, message; optionally phone): to answer your inquiry and prepare an offer - Art. 6(1)(b) GDPR (pre-contractual steps). Email correspondence: communication about your inquiry or booking - Art. 6(1)(b). Contract, invoicing and accounting data after a booking: contract performance (Art. 6(1)(b)) and legal obligations under Bulgarian tax and accounting law (Art. 6(1)(c)). Photographs from your shoot: created and edited to perform the contract (Art. 6(1)(b)). Portfolio or marketing use only with your separate, express, revocable consent (Art. 6(1)(a)). Server log data (IP address, timestamp, browser): secure delivery of the website - Art. 6(1)(f) (legitimate interest). 3. Processors. Under Art. 28 GDPR agreements we use: Vercel Inc. (website hosting; US transfers under the EU–US Data Privacy Framework), FormSubmit (relay of inquiry-form submissions to our email), and Pixieset/Pic-Time (private client galleries). We never sell personal data. 4. Retention. Inquiries without a booking: deleted no later than 6 months after last contact. Contracts, invoices, accounting records: statutory Bulgarian periods (up to 10 years). Delivered photos: download link active for 30 days; our archive copy is kept 12 months for re-delivery, then deleted unless agreed otherwise. 5. Cookies. This website uses only technically necessary cookies. No analytics or marketing cookies are set, so no consent banner is shown. Should this change, this policy and a consent mechanism will be updated first. 6. Security. The site is served exclusively over encrypted connections (TLS/SSL). Client galleries are private and password-protected. 7. Your rights. Access, rectification, erasure, restriction, portability, objection (Art. 15–21 GDPR), and withdrawal of any consent with future effect - contact [email protected]. You may complain to the Bulgarian Commission for Personal Data Protection (КЗЛД, www.cpdp.bg) or the supervisory authority of your habitual residence. 8. Voluntary provision. Form data is voluntary; without the required fields we simply cannot answer your inquiry. Last updated: 11/07/2026