Last updated: April 2026
TechStore ("we", "us", or "our") is committed to protecting your privacy. This policy explains how we collect, use, store, and share your personal data when you visit our website or use our services, in compliance with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection laws.
Under GDPR Article 6, we process your personal data on the following legal bases:
We do not sell your personal data. We share data only with trusted third parties necessary to operate our services:
All third-party processors are bound by Data Processing Agreements (DPAs) ensuring GDPR compliance.
We retain your personal data only as long as necessary for the purposes described above:
Our website uses cookies and similar technologies. When you first visit, a cookie banner allows you to accept or reject non-essential cookies. Essential cookies (required for the site to function) cannot be disabled. You can manage your preferences at any time via your browser settings or our cookie preference centre.
As an EU resident, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Correct inaccurate or incomplete personal data.
Request deletion of your personal data ("right to be forgotten").
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or direct marketing.
Request limitation of how we process your data.
To exercise any of these rights, contact us at info@techstore.bg. We will respond within 30 days. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).
Your data is primarily stored and processed within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure adequate safeguards through Standard Contractual Clauses (SCCs) approved by the European Commission, or rely on an adequacy decision.
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. Parents or guardians who believe their child has provided us with personal data should contact us immediately.
We may update this privacy policy from time to time. Material changes will be communicated via email or a prominent notice on our website at least 14 days before taking effect. Continued use of our services after the effective date constitutes acceptance of the updated policy.
For any privacy-related concerns, data requests, or to exercise your rights, please contact our DPO:
