Last updated: 14 September 2026
This Privacy Policy explains how WPT-OFFICE LTD (“Black Sea Rose”, “we”, “us” or “our”) collects, uses, stores and protects personal data when you visit BlackSeaRose.com, contact us or purchase products from our online store.
1. Who We Are
The data controller responsible for processing your personal data is:
- Legal name: WPT-OFFICE LTD
- Company Registration Number: 206788591
- VAT Number: BG206788591
- Registered address: 31 Tsar Kaloyan Street, 8000 Burgas, Bulgaria
- Email: office@blacksearose.com
- Website: https://blacksearose.com/
2. Personal Data We Collect
Depending on how you interact with our website, we may collect the following categories of personal data:
Information You Provide
- Name and surname
- Email address and telephone number
- Billing and delivery address
- Company name, VAT number and invoicing details, where applicable
- Account login information, if you create an account
- Products ordered, order history and transaction details
- Messages submitted through our contact form or customer support channels
- Return, refund and complaint information
Payment Information
Payments may be processed by third-party payment service providers. We do not normally receive or store your complete payment card details. Payment providers process those details under their own privacy and security policies.
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically, including:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and actions performed on the website
- Date, time and approximate location of access
- Cookie identifiers and similar technologies
- Referral source and website performance information
3. How We Use Your Personal Data
We may use personal data to:
- Process, confirm and fulfil orders
- Arrange payment, delivery, returns and refunds
- Create and manage customer accounts
- Respond to questions and customer support requests
- Issue invoices and maintain accounting records
- Send transactional messages about orders and deliveries
- Protect the website, customers and our business against fraud, misuse and security threats
- Maintain and improve the functionality and performance of the website
- Comply with legal, tax, accounting and regulatory obligations
- Send marketing communications where you have provided valid consent or where otherwise permitted by law
4. Legal Bases for Processing
We process personal data only where we have a valid legal basis under applicable data protection law. Depending on the circumstances, the legal basis may be:
- Performance of a contract: to process and deliver your order, manage payment, returns and customer service
- Legal obligation: to meet accounting, tax, consumer protection and other legal requirements
- Legitimate interests: to operate, secure and improve our website and services, prevent fraud and respond to business enquiries
- Consent: for optional cookies, direct marketing and other processing activities where consent is required
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Contact Form and Customer Enquiries
When you contact us through our website, we process the name, email address, subject and message you provide so that we can respond to your enquiry. We ask you not to include unnecessary sensitive or confidential personal information in your message.
6. Orders, Payments and Delivery
When you place an order, we process the information required to confirm the purchase, receive payment, prepare the products, issue documents and deliver the order.
We may share the minimum necessary personal data with payment providers, banks, couriers, postal operators, fulfilment partners and other service providers involved in completing your purchase.
7. Cookies and Similar Technologies
Our website may use cookies and similar technologies to operate the shopping cart, remember preferences, maintain security, measure website performance and, where you consent, provide analytics or advertising features.
Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law. Optional analytics, advertising or personalisation cookies will be used only after the required consent has been obtained.
You can manage your choices through the cookie banner or your browser settings. Disabling certain cookies may affect the operation of the shopping cart, checkout or other website functions.
8. Marketing Communications
We will send promotional emails only where we have a lawful basis to do so. You may unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us at office@blacksearose.com.
Service messages relating to an order, payment, delivery, return, security issue or customer request are not marketing communications and may still be sent when necessary.
9. Who We Share Personal Data With
Where necessary, personal data may be shared with:
- Website hosting, maintenance and security providers
- Payment processors and financial institutions
- Courier, postal, fulfilment and logistics providers
- Accounting, legal and professional advisers
- Email and customer communication providers
- Analytics and cookie service providers, subject to your consent where required
- Public authorities, courts or regulators where disclosure is required by law
These recipients receive only the data necessary for their respective services and are required to process it securely and lawfully.
We do not sell your personal data.
10. International Data Transfers
Some service providers may process information outside Bulgaria or the European Economic Area. Where personal data is transferred to a country that has not been recognised as providing an adequate level of protection, we use appropriate safeguards required by applicable law, such as approved standard contractual clauses, where necessary.
11. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal obligations.
- Order, invoice, payment and accounting information is retained for the period required by applicable tax and accounting law.
- Customer account data is retained while the account remains active and afterwards where required for legal claims or statutory obligations.
- Customer enquiries are generally retained for up to 24 months after the enquiry has been resolved, unless a longer period is necessary in connection with an order, dispute or legal requirement.
- Marketing data is retained until consent is withdrawn, an objection is made or the data is no longer required.
- Cookie retention periods depend on the type and purpose of each cookie.
When personal data is no longer required, it is deleted, anonymised or securely restricted from further use.
12. How We Protect Personal Data
We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. These measures may include access controls, secure connections, software updates, backups and restricted administrative access.
No internet transmission or storage system can be guaranteed to be completely secure. If you believe your data or account may have been compromised, please contact us promptly.
13. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
- Request access to your personal data
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Request restriction of processing
- Object to processing based on legitimate interests or for direct marketing
- Request data portability
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with a competent data protection authority
To exercise your rights, contact us at office@blacksearose.com. We may request reasonable information to verify your identity before responding.
14. Complaints
If you have concerns about how we process your personal data, please contact us first so that we can investigate and respond.
You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection or another competent supervisory authority in the European Union.
Commission for Personal Data Protection
Website: https://www.cpdp.bg/
15. Children’s Privacy
Our online store is not intended to knowingly collect personal data directly from children who cannot legally provide valid consent. If you believe that a child has provided personal data without appropriate authorisation, please contact us so that we can review and, where appropriate, delete the information.
16. Third-Party Websites
Our website may contain links to third-party websites. We are not responsible for the privacy practices, security or content of those websites. We encourage you to review their privacy policies before providing personal data.
17. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies or legal obligations change. The current version will always be published on this page, together with the date of the latest update.
18. Contact Us
For questions about this Privacy Policy or the processing of your personal data, contact:
WPT-OFFICE LTD
31 Tsar Kaloyan Street
8000 Burgas, Bulgaria
Email: office@blacksearose.com