PRIVACY POLICY (GDPR COMPLIANT)

---

Effective Date: August 31, 2026

Website: The Law to Know (thelawtoknow.com)

Data Controller: Tsvety (“we”, “us”, “our”)

Applicable Law: General Data Protection Regulation (EU) 2016/679 (“GDPR”) & Bulgarian Personal Data Protection Act

Contact Email: support@thelowtoknow.com

1. Introduction & General Information

At The Law to Know, accessible from thelawtoknow.com, we are committed to protecting your privacy and personal data in strict compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable laws of the Republic of Bulgaria.

This Privacy Policy explains how Tsvety acts as the Data Controller for personal data collected, processed, and stored when you visit our website or purchase our educational digital materials.

2. Personal Data We Collect

We only collect personal data that is strictly necessary to fulfill our service commitments, process digital orders, communicate with you, and comply with legal obligations.

Data Category	Specific Data Collected	Source
Identity & Contact Data	Full Name, Email Address, Billing Address	Provided directly by user during purchase or inquiry
Financial & Transaction Data	Payment confirmation details, transaction history, billing records (Payment details like credit card numbers are processed directly by payment providers and never stored on our servers)	Payment processors (e.g., Stripe, PayPal)
Technical & Usage Data	IP address, browser type, device information, operating system, page views, referral URLs	Automated cookies and analytics tools

3. Legal Bases for Processing (GDPR Article 6)

In accordance with GDPR Article 6, we process personal data under the following legal bases:

• Performance of a Contract (Art. 6(1)(b)): Processing necessary to execute digital content delivery, manage customer orders, and provide access to digital assets.
• Compliance with Legal Obligations (Art. 6(1)(c)): Retaining transaction data, tax invoices, and accounting records in compliance with Bulgarian statutory and fiscal reporting requirements.
• Legitimate Interests (Art. 6(1)(f)): Improving website security, preventing fraud, maintaining site performance, and optimizing educational services.
• Consent (Art. 6(1)(a)): Where explicit consent has been granted (e.g., subscribing to optional communications or non-essential cookies).

4. How We Use Your Data

Your personal data is processed exclusively for the following purposes:

1. Delivering purchased digital document templates and educational materials.
2. Processing payments securely via integrated payment gateways.
3. Responding to customer support inquiries sent to support@thelowtoknow.com.
4. Fulfilling tax, legal, and accounting responsibilities under Bulgarian law.
5. Ensuring the technical operation, stability, and security of the website.

5. Third-Party Service Providers (Data Processors)

We do not sell, rent, or trade your personal data. We may share necessary data with trusted third-party service providers (Data Processors) solely for operational purposes under appropriate data processing agreements:

• Payment Gateways: Payment processing platforms (e.g., Stripe/PayPal) for secure processing of purchase transactions.
• Web Hosting & Infrastructure: Hosting and server infrastructure providers maintaining site security and uptime.
• Analytics Tools: Privacy-compliant web analytics used to monitor performance and visitor experience.

6. Data Retention Period

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Customer Order & Transaction Records: Retained for up to 10 years to comply with statutory Bulgarian accounting, tax, and auditing requirements.
• General Support Communications: Retained for up to 2 years after resolution of the inquiry.
• Technical & Analytics Logs: Retained in accordance with standard server logs (typically 30 to 90 days).

7. Your Rights under the GDPR

As a data subject residing in the European Union, you possess comprehensive rights regarding your personal data under the GDPR:

GDPR Right	Description
Right of Access (Art. 15)	You have the right to request a copy of the personal data we hold about you.
Right to Rectification (Art. 16)	You have the right to request correction of inaccurate or incomplete personal data.
Right to Erasure / “To Be Forgotten” (Art. 17)	You can request erasure of your data, provided retention is not required by legal obligations.
Right to Restriction of Processing (Art. 18)	You have the right to request restricted processing under specific statutory circumstances.
Right to Data Portability (Art. 20)	You have the right to receive your data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21)	You have the right to object to processing based on legitimate interest or direct marketing.
Right to Withdraw Consent (Art. 7(3))	Where processing is based on consent, you may withdraw your consent at any time.

To exercise any of these rights, please contact us at support@thelowtoknow.com. We will respond to your request within 30 days.

Right to Lodge a Complaint: You also have the right to lodge a complaint with the lead supervisory authority, the Bulgarian Commission for Personal Data Protection (CPDP) (Web: www.cpdp.bg), or your local EU supervisory authority.

8. Data Security Measures

We implement appropriate technical and organizational measures to safeguard your personal data against accidental loss, unauthorized access, disclosure, or alteration. These measures include SSL/TLS encryption for data transmission, access restrictions, and secure server hosting.

9. Cookies and Tracking Technologies

Our website uses necessary technical cookies to ensure standard site functions and security. Non-essential cookies (such as analytics or functional cookies) are deployed only with your prior explicit consent obtained via our cookie consent mechanism.

10. Updates to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in legal requirements or operational practices. Any updates will be published directly on this page with a revised “Effective Date”.

11. Contact Details

For any privacy-related queries, exercising your GDPR rights, or data requests, please contact:

Data Controller: Tsvety

Website: thelawtoknow.com

Contact Email: support@thelowtoknow.com

Applicable Law: Bulgarian Law / GDPR (EU)