Privacy Policy

Last updated: March 8, 2026

Eveliko Ltd. ("Eveliko", "we", "us", or "our") operates the website eveliko.com. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website.

1. Data Controller

The data controller responsible for your personal data is:

Eveliko Ltd.
Email: [email protected]

2. What Data We Collect

When you visit our website, we may collect the following types of information:

Analytics data - pages visited, time spent on pages, referring URLs, browser type, device type, screen resolution, and approximate geographic location (country/city level).
Contact form data - if you contact us through our website, we collect the information you voluntarily provide, such as your name, email address, and message content.
Cookies - small text files placed on your device to support analytics functionality.

3. How We Use Your Data

We use the collected data for the following purposes:

To understand how visitors use our website and improve its content, structure, and performance.
To respond to your inquiries submitted through contact forms.
To ensure the technical functionality and security of our website.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

Consent (Article 6(1)(a)) - for placing analytics cookies on your device. You can grant or withdraw consent at any time.
Legitimate interest (Article 6(1)(f)) - for analyzing aggregated, non-identifying website usage patterns to improve our services.
Contractual necessity (Article 6(1)(b)) - for responding to your contact form inquiries.

5. Analytics

We use analytics services to collect anonymized data about website usage. These services may use cookies and similar technologies to gather information about your browsing behavior. IP addresses are anonymized before processing. Analytics cookies are only set after you provide consent through our cookie banner.

6. Cookies

Our website uses the following categories of cookies:

Essential cookies - required for basic website functionality. These do not require consent.
Analytics cookies - used to collect anonymized usage statistics. These are only activated with your consent.

You can manage or withdraw your cookie preferences at any time through your browser settings or our cookie consent controls.

7. Data Sharing and Third Parties

We do not sell your personal data. We may share data with third-party analytics providers who process data on our behalf. These providers are contractually obligated to handle your data in compliance with the GDPR and applicable data protection laws.

8. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, or transfers to countries with an adequate level of data protection.

9. Data Retention

Analytics data is retained for a maximum of 26 months. Contact form submissions are retained for as long as necessary to respond to your inquiry and for any follow-up, after which they are deleted. We do not retain personal data longer than necessary for the purposes outlined in this policy.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access - request a copy of the personal data we hold about you.
Right to rectification - request correction of inaccurate or incomplete data.
Right to erasure - request deletion of your personal data under certain conditions.
Right to restrict processing - request that we limit how we use your data.
Right to data portability - request your data in a structured, machine-readable format.
Right to object - object to processing based on legitimate interest.
Right to withdraw consent - withdraw your consent for analytics cookies at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at [email protected].

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

Our website is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us at [email protected] so we can promptly delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Eveliko Ltd.
Email: [email protected]

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP) of the Republic of Bulgaria or the supervisory authority in your country of residence.