Privacy policy

1. Controller

Vimex-M Trade House Bulgaria OOD, ul. Akademik Igor Kurchatov 1, Varna, Bulgaria, EIK 205205858, VAT BG205205858. E-mail: info@triggersandpumps.com. We are the controller for personal data processed on triggersandpumps.com.

2. What we process and why

Quote and contact forms. Work e-mail, company, country and the specification you send (product, quantities, colours, delivery place, attachments, free text). Purpose: to answer your request and prepare a quote. Legal basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f)).

Order and customer data. Contract, invoice and delivery data of customers. Purpose: performance of the contract, accounting and tax obligations (Art. 6(1)(b) and (c)). Retention: as required by Bulgarian accounting and tax law, currently 10 years for accounting documents.

Server logs. IP address, time, requested page, browser. Purpose: security and error analysis, held by our hosting provider for a short period. Legal basis: legitimate interest (Art. 6(1)(f)).

Analytics. We use Google Analytics 4 only with your consent given in the cookie banner. IP addresses are truncated. You can withdraw consent at any time via the banner link in the footer. Legal basis: consent (Art. 6(1)(a)).

We do not send newsletters and we do not call you. We do not sell data.

3. Recipients and processors

• Hosting and delivery: Vercel Inc. (USA, EU data-processing terms and standard contractual clauses).
• Form storage: Notion Labs Inc. (USA) stores each quote or contact request so we can process and answer it.
• E-mail: our mailboxes and outgoing mail are hosted by SuperHosting.BG (Bulgaria, EU); your confirmation e-mail is sent from there.
• Anti-spam: Cloudflare Turnstile checks in the background that the form was sent by a person. It shows nothing on the page and sets no tracking cookie. How Cloudflare processes the data for this check is described in the Turnstile Privacy Addendum.
• Optional automation: Make.com (Celonis, EU region) may process a copy of the request to notify us.
• Analytics: Google Ireland Ltd., only with consent.
• Content management: the product data on this site is also managed in Notion.
• Freight forwarders, customs brokers and the producing factory receive delivery data needed to ship an order, never form data from non-customers.

Where a processor is outside the EU/EEA we rely on the EU Commission's adequacy decisions or standard contractual clauses.

4. Retention

We keep your request and our correspondence as long as we work with your company, and for 5 years after the last contact. Customer and accounting data are kept as long as the law requires. Analytics data is kept for 14 months.

5. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent. Write to info@triggersandpumps.com. You can also complain to the Bulgarian Commission for Personal Data Protection (CPDP, www.cpdp.bg) or the supervisory authority of your country.

6. Cookies

Strictly necessary cookies (language choice, consent state) need no consent. Analytics cookies are set only after consent. No advertising cookies.

7. Changes

We update this notice when our processing changes. The date at the top shows the current version.