Contact

Privacy Policy

Last updated: 20 September 2026

This policy explains what personal data we collect when you visit kim-print.com or contact us, why we do so, how long we keep it and what rights you have. We apply the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Bulgarian Personal Data Protection Act.

1. Who processes your data

The controller of your personal data is Kitex EOOD (trading as KiM Print), 21 Slivnitsa Blvd., Sofia, Bulgaria.

For any questions about your personal data, you can contact us by email at office@kim-print.com or by phone at +359 885 01 43 16.

2. What data we collect and why

Contact and enquiry form

When you send us an enquiry through the contact form, we collect your first name, last name, company name (optional), email address, subject and the text of your message. We receive the same data when you email us directly or call us.

We use it to reply to your enquiry, send you a quote and a mock-up, and fulfil your order. The legal basis is taking steps at your request before entering into a contract and the performance of a contract (Art. 6(1)(b) GDPR).

Messages from the form are delivered to our email and stored in the secure admin area of the website.

Orders

When you place an order, we also process the data needed to fulfil and invoice it – for example company details, delivery address and a phone number for the courier. The legal bases are the performance of a contract and compliance with legal obligations (accounting and tax legislation).

Website statistics (Google Analytics)

We use Google Analytics 4 – a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – to understand how visitors use the website: which pages are viewed, which devices and sources visitors come from, and how often enquiries are sent or the phone number and email are clicked. This helps us improve our content and services.

Google Analytics stores cookies in your browser only if you give your consent in the cookie banner (Art. 6(1)(a) GDPR). If you decline, no analytics cookies are stored and only anonymous signals without identifiers are sent to Google (Google Consent Mode). The data is collected in aggregate form, Google Analytics 4 does not store IP addresses and we do not use the data to identify you personally.

Google advertising (Google Ads)

We advertise our services in Google Search through Google Ads – a service of Google Ireland Limited. When you arrive on the website from one of our ads and have given consent in the cookie banner, Google Ads uses cookies and the click identifier (gclid) to measure whether you then sent an enquiry or clicked our phone number or email. This shows us which ads bring enquiries, so we do not spend budget on ineffective ads.

If you have given consent and send an enquiry through the form, your email address and phone number are one-way encoded (hashed with the SHA-256 algorithm) in your browser and only sent to Google in that form, to link the enquiry to the ad you came from (“enhanced conversions”). Google does not receive your email and phone in readable form and uses them only to measure ads. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time by deleting the website’s cookies and declining in the banner.

Server logs

As with any website, the hosting server automatically records technical data for every visit – IP address, date and time, the page loaded and the browser type. This data is used only for the security and proper operation of the website (legitimate interest, Art. 6(1)(f) GDPR) and is kept for a short period.

The website does not allow comments and does not create user profiles for visitors.

3. Cookies

Cookies are small text files that the website stores in your browser. We use:

  • Analytics cookies – Google Analytics cookies (_ga, _ga_*), only after consent. They are kept for up to 2 years.
  • Remembering your choice – your choice in the cookie banner is stored in your browser (localStorage), so we do not ask you on every visit.
  • Technical cookies – necessary for the website to work and for administrators to log in. They do not require consent.

We use Google Ads advertising cookies only after you give consent in the banner (see “Google advertising” above). We do not use social media tracking cookies.

Changing your consent: you can change your choice at any time – reopen the cookie settings. You can also delete cookies in your browser settings.

4. Embedded content

The “Contact” page contains an embedded Google Maps map. When it loads, your browser connects to Google’s servers, which may receive your IP address and store their own cookies in accordance with Google’s Privacy Policy. The link to our Facebook page is a regular link – Facebook only receives data if you open it.

5. Who we share your data with

We do not sell or provide your personal data to third parties for marketing. Data may be accessible to:

  • our hosting provider SuperHosting.BG (Bulgaria), whose servers run our website and email
  • Google Ireland Limited – for website statistics (only with consent) and for the map on the “Contact” page
  • courier companies – name, address and phone number when we ship an order
  • our accountant and public authorities – where required by law.

Google may process data outside the European Union, including in the USA. This is done on the basis of the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.

6. How long we keep your data

  • Enquiries without a subsequent order – up to 2 years from the last contact, so that we can refer to previous correspondence and quotes.
  • Data related to orders and invoices – for the periods required by the Accountancy Act and tax legislation (up to 10 years for accounting documents).
  • Data in Google Analytics – up to 14 months.
  • Google Analytics cookies – up to 2 years or until you delete them.

7. Your rights

Under the GDPR you have the right:

  • to access the personal data we process about you
  • to request the correction of inaccurate data
  • to request the erasure of your data (“right to be forgotten”) where there is no legal basis for keeping it
  • to request the restriction of processing
  • to data portability
  • to object to processing based on legitimate interest
  • to withdraw your consent at any time (for example for analytics cookies), without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to us at office@kim-print.com. We will reply within one month.

If you believe your rights have been violated, you can lodge a complaint with the Bulgarian Commission for Personal Data Protection – 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.

8. How we protect your data

The website runs entirely over a secure connection (HTTPS). Access to the admin area and to form messages is restricted and password-protected. Data is stored on servers in the European Union.

9. Changes to this policy

We may update this policy when the website or the law changes. The current version is always published on this page with the date of the last change.