Privacy Policy

Last updated: 14 October 2026.

1. Who is responsible for your data

The controller of personal data processed through elshaddaibg.org is ХРИСТИЯНСКА ЦЪРКВА ЕЛ ШАДАЙ (Christian Church El Shaddai), a religious institution, BULSTAT 175078102. Registered address: Bulgaria, 1233 Sofia, Serdika district, Maria Luiza Boulevard, building 112A, entrance V, floor 3, apartment 10.

For privacy questions and requests, contact el_shaddai@abv.bg or +359 895 48 94 65. The worship venue is listed separately on the Contacts page.

2. What we process and why

• Enquiries: your name, email, subject and message submitted through the contact form or email. We use them to respond and follow up on your enquiry. For purchase enquiries, the basis is taking steps at your request before entering a contract; for other correspondence, it is our legitimate interest in responding.
• Orders: names, billing and delivery addresses, phone, email, products, amounts, payment method and optional order notes. We use these details to fulfil orders, arrange delivery, communicate and meet applicable accounting duties. The bases are performance of a contract and legal obligations. We cannot fulfil an order without the necessary information.
• Accounts: if you create an account, we retain login details and the contact and order information you provide to manage your account and purchases.
• Comments: comment content, form details, IP address and browser information are used for publication, moderation and spam prevention. Published comments and display names are visible to visitors. If Gravatar is used, a hash of your email may be provided to display an avatar.
• Technical information: IP addresses, browser details and access logs may be processed to operate the website, prevent abuse and protect systems, based on our legitimate interest in security.

Visiting this website or buying a book is not an application for church membership. The contact form is not intended for medical documents, identity documents or other sensitive information. For matters requiring such information, contact us by email first.

3. Cookies and external content

WordPress and WooCommerce use cookies for login, sessions, the cart and store functionality. The selected language may also be remembered. Login cookies normally last two days, or two weeks when “Remember me” is selected; some cookies expire when the browser closes. If you choose to save comment details, these may remain for one year.

You can delete or block cookies through your browser. Blocking necessary cookies may prevent login or cart functionality.

Pages may include Google Maps, YouTube or other external content. When this content loads, its provider may receive your IP address and browser information, use cookies and record interactions, including when you are logged into its service. Its own privacy policy also applies: Google and YouTube, Automattic/Gravatar. External providers may process information outside the European Economic Area under the grounds and safeguards described in their policies.

4. Who may receive information

Access is available to authorised people handling enquiries and orders, and service providers needed for these activities: hosting and technical support, email, a courier for delivery, and accounting services where applicable. Website hosting is provided by SuperHosting. For bank transfers, banks process transfer information under their own duties and policies. Information may be disclosed to competent authorities when legally required.

5. How long information is retained

Correspondence is retained according to the time needed to respond, handle follow-up questions and defend disputes. Order information and accounting records are retained according to applicable legal periods and the need to handle complaints and legal claims. Account details are retained while the account is active and subsequently where a lawful reason applies.

The store does not have one automatic deletion period configured for all orders and inactive accounts. Comments and metadata may remain without a predetermined expiry to support moderation and recognise subsequent comments. You may request a review and deletion of your information; this does not override duties to retain information required by law or for legal claims.

6. Your rights

Subject to applicable conditions, you have rights to access, correction, erasure, restriction, portability and objection. Where processing is based on consent, you may withdraw it for the future. Send requests to el_shaddai@abv.bg. Where necessary, we may ask for reasonable identity verification to avoid disclosing someone else’s information.

The usual response period is one month; the law allows an extension for complex or numerous requests. You may complain to the Bulgarian Commission for Personal Data Protection or another competent supervisory authority.

7. Updates and contact

When services or processing change, we update this page and its date. For further information, contact el_shaddai@abv.bg.