Privacy Policy

Last updated: July 25, 2026

This policy explains how KPZ collects, uses and protects personal data when you use the site.

KPZ is a small fan-run project maintained by a private individual. Even so, when the site collects information such as your name, email, phone number, delivery address, photos, listings or messages, that constitutes personal data and must be handled with care.

The purpose of this page is to explain clearly what data is used, why it is needed and what rights you have.

1. Who is responsible for your data

The data controller for KPZ is:

Name:TO_BE_ADDED_LATER
Contact email:info@kpz.bg
Country:Bulgaria

This means this person decides what data is collected through the site and for what purposes it is used.

2. What data may be collected

Depending on how you use the site, different types of information may be collected.

2.1. Order data

When you place an order, the following may be collected:

  • name;
  • phone number;
  • email;
  • city or town;
  • Econt office or delivery address;
  • information about the selected item;
  • order notes;
  • cash on delivery payment information;
  • order history.

This data is needed to process the order and dispatch the parcel.

2.2. Community listing data

When you post a community listing, the following may be collected:

  • name or username;
  • email;
  • phone or other contact details, if provided;
  • photos of the item;
  • description;
  • price;
  • condition information;
  • preferred delivery method;
  • messages related to the listing.

Do not upload identity documents, bank card details, photos of other people without consent, or sensitive information not needed for the listing.

2.3. Data when offering an item to KPZ

When you offer an item to KPZ, the following may be collected:

  • name;
  • email;
  • phone number, if provided;
  • photos of the item;
  • description;
  • expected price, if stated;
  • information about condition, missing parts or defects;
  • communication related to the offer.

This data is needed so I can review the item and get back to you.

2.4. Find it for me data

When you use the Find it for me feature, the following may be collected:

  • email;
  • name, if provided;
  • description of what you are looking for;
  • preferred condition;
  • approximate budget;
  • category, universe, title or other search information.

This data is needed so you can be notified if something suitable comes up.

2.5. Contact data

When you write via a contact form or email, the following may be collected:

  • name;
  • email;
  • message content;
  • attached files or photos, if sent;
  • date and time of the communication.

2.6. Technical data

When you visit the site, certain technical data may be automatically processed, such as:

  • IP address;
  • device type;
  • browser;
  • language;
  • pages visited;
  • approximate time of visit;
  • technical logs;
  • error information.

This data helps the site function, protects against misuse and enables improvements.

2.7. Anonymous visitor journey statistics

To understand how visitors move through KPZ and make the site easier to use, KPZ records a small amount of anonymous information about pages opened during a browser session:

  • a randomly generated session identifier;
  • the KPZ page that was opened;
  • the date and time of the page view.

The identifier is used only to connect page views from the same browser session. It is not linked to your account, name, email or other contact details. The journey tracker does not store your IP address, device or browser details, the site you arrived from, or the external site you visit after leaving KPZ.

This information is used only inside KPZ to create aggregate statistics, such as common visitor journeys and the pages where sessions begin or end, and to improve the site's navigation. It is not used for advertising or tracking across websites and is not sold or shared for marketing purposes.

3. Why data is used

Personal data may be used for the following purposes:

  • processing orders;
  • dispatching parcels;
  • contacting you about an order, listing or offer;
  • reviewing listings;
  • reviewing items offered to KPZ;
  • sending Find it for me notifications;
  • responding to enquiries;
  • preventing misuse, spam or fake listings;
  • maintaining and improving the site;
  • fulfilling legal obligations where applicable;
  • protecting rights and interests in a dispute or problem.

4. Legal bases for processing

Depending on the situation, data may be processed on one or more of the following grounds:

4.1. Performance of a request or agreement

For example, when you place an order, offer an item, post a listing or request a Find it for me notification.

4.2. Legitimate interests

For example, to protect against misuse, maintain the site, document communications, prevent fake listings or resolve problems.

4.3. Consent

For example, if you subscribe to notifications, accept certain cookies, or ask to receive messages not required for a specific order or request.

4.4. Legal obligation

For example, if there is a requirement to retain certain information for accounting, tax or other legal purposes.

5. Who data may be shared with

Data is not sold to advertisers.

Data may be shared only when necessary for the operation of the site or for a specific request.

Possible recipients:

5.1. Courier services

For delivery through Econt or another courier, data such as name, phone number, address or delivery office may be provided.

5.2. Hosting and technical providers

The site uses Firebase (Google) for hosting, database, authentication and photo storage, and Resend for sending emails. Data processed through these services is subject to their own privacy policies.

5.3. Payment or financial services

Current payments are cash on delivery and do not involve an online payment platform. KPZ does not store bank card details.

5.4. Other users

For community listings, information you publish may be visible to site visitors — such as photos, description, price, city or contact method, if included in the listing.

5.5. Government authorities

Data may be provided to competent authorities if required by law.

6. International data transfers

The site uses Firebase (Google Cloud), whose infrastructure may process data in data centres outside Bulgaria or outside the European Economic Area.

Resend, used for sending emails, may also process data outside the EEA.

Where such services are used, appropriate data protection mechanisms apply in accordance with current legislation, including standard contractual clauses or equivalent safeguards.

7. How long data is kept

Data is kept only for as long as needed for the purpose for which it was collected, unless a longer period is required by law.

Indicatively:

  • order data — for the period needed for processing, delivery, follow-up and legal requirements;
  • listing data — while the listing is active and for a reasonable period afterwards;
  • photos and offers submitted to KPZ — while the offer is under review and for a reasonable period after communication ends;
  • Find it for me requests — while the request is active or until you ask for it to be deleted;
  • messages — for as long as needed for responses, evidence of communication or dispute resolution;
  • technical logs — for a limited period needed for security and maintenance.

When data is no longer needed, it is deleted or anonymised to the extent technically and organisationally possible.

8. Your rights

You have the right to request:

  • information about whether your personal data is being processed;
  • access to your data;
  • correction of inaccurate data;
  • deletion of data where grounds exist;
  • restriction of processing;
  • objection to processing;
  • data portability where applicable;
  • withdrawal of consent where processing is based on consent.

To exercise a right, you can write to:

info@kpz.bg

Clarification or identity verification may be requested where necessary to avoid disclosing data to the wrong person.

9. Supervisory authority

If you believe your personal data is being processed unlawfully, you have the right to contact the relevant supervisory authority.

In Bulgaria this is the Commission for Personal Data Protection (CPDP).

That said, if you have a concern, you are welcome to contact me first so we can try to resolve it together.

10. Security

KPZ uses reasonable technical and organisational measures to protect personal data.

These may include:

  • restricted access to admin functions;
  • protection of user accounts and admin panels;
  • use of reputable and secure providers;
  • minimising unnecessary data collection;
  • deleting data that is no longer needed.

No website can guarantee absolute security. Please do not send sensitive information that is not needed for an order, listing or communication.

11. Children's data

KPZ does not intentionally collect personal data from children.

If you are below the age at which you can independently use such services under applicable rules, please use the site with a parent or guardian.

If it is found that data has been provided by a child without appropriate consent, it may be deleted.

12. Personal data in photos

When sending photos of items, please ensure they do not show:

  • identity documents;
  • addresses;
  • phone numbers;
  • faces of people;
  • bank cards;
  • personal correspondence;
  • other personal data that is not needed.

If such information is visible, KPZ may ask for new photos or delete the unsuitable files.

13. Marketing and notifications

KPZ may send messages related to a specific order, listing, offer or request.

Marketing or informational emails not required for a specific request should only be sent with your consent or on another applicable legal basis.

You can ask to stop receiving such messages at any time.

14. External links

The site may contain links to external sites or services. KPZ does not control those sites and is not responsible for their content or privacy practices. It is advisable to read their terms if you use them.

15. Changes to this policy

This policy may be updated as the site grows, new features are added or data handling practices change.

The current version will be published on this page, with the date of the last update.

16. Contact

For questions about personal data:

Email: info@kpz.bg

Contact person: TO_BE_ADDED_LATER

Added to cart

Your Cart →