Privacy Policy
Last updated: 9 March 2026
Velum EOOD (trading as "NovMac"), UIC 175346553, registered at 99 Evlogi & Hristo Georgievi Blvd, Sofia 1142, Bulgaria, is a data controller within the meaning of Regulation (EU) 2016/679 (GDPR).
1. What data we collect
We collect personal data only when you voluntarily provide it through our contact form or direct communication:
- Name — to address you personally
- Email address — to respond to your enquiry
- Phone number (optional) — for follow-up calls
- Company (optional) — for business enquiries
- Message content — to process your enquiry
2. Purpose of processing
We use your data solely for:
- Responding to enquiries submitted via the contact form
- Processing orders and pre-orders
- Providing consultations about Apple products
- Sending confirmation of received enquiries
3. Legal basis
Processing is carried out based on:
- Consent (Art. 6(1)(a) GDPR) — given via the checkbox in the contact form
- Performance of a contract (Art. 6(1)(b) GDPR) — when processing orders
- Legitimate interest (Art. 6(1)(f) GDPR) — for responding to enquiries
4. Data retention
We retain your personal data for:
| Data type | Retention period |
|---|---|
| Contact form enquiries | 12 months after last communication |
| Order data | 5 years (tax requirements) |
| Email correspondence | 12 months after last communication |
5. Data sharing
We do not sell, rent, or share your personal data with third parties, except:
- Email hosting provider — for email delivery
- Government authorities — when legally required
6. Your rights
Under GDPR, you have the right to:
- Access — obtain a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure ("right to be forgotten") — request deletion of your data
- Restriction — restrict processing
- Portability — receive your data in a machine-readable format
- Withdraw consent — at any time, without affecting the lawfulness of prior processing
- Complaint — to the Bulgarian Commission for Personal Data Protection (CPDP): www.cpdp.bg
7. Cookies
The novmac.bg website uses only technically necessary cookies:
- Session cookie — for CSRF protection on forms (deleted when the browser is closed)
- Theme preference — remembers your dark/light theme choice (localStorage, not a cookie)
We do not use analytics, advertising, or tracking cookies.
8. Security
We implement appropriate technical measures to protect your data:
- HTTPS encryption on all connections
- CSRF protection on forms
- Request rate limiting
- Content Security Policy (CSP) headers
9. Contact
For questions about your personal data, contact us:
- Email: office@novmac.com
- Phone: +359 88 8879775
- Address: 99 Evlogi & Hristo Georgievi Blvd, Sofia 1142, Bulgaria