1. Introduction
1.1. "ANTHONY M-1" EOOD respects the privacy of its clients and visitors and takes the necessary measures to protect their personal data. This Privacy Policy describes how we collect, use, store, and protect your personal data in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act (PDPA), and other applicable legislation.
1.2. The policy applies to individuals who visit our website, place an order, purchase a digital program, make an inquiry about an online consultation, or contact us in any other way.
1.3. This Policy is for informational purposes and does not constitute consent for the processing of personal data. Where processing requires your consent, it is provided separately through an explicit action.
1.4. Some personal data are necessary for the conclusion or performance of a contract. If you do not provide this data, it may be impossible for us to accept or fulfill your order, provide a purchased service, or process your inquiry.
1.5. For questions regarding the processing of your personal data, you may contact us using the contact details provided in Section 2.
2. Personal Data Controller
2.1. The controller of personal data is "ANTHONY M-1" EOOD, UIC 206839897, VAT No. BG206839897, with its registered office and address of management at: 34 Dobri Dimitrov St., Sliven, 8800.
2.2. Contact details: phone +359 89 686 9595; email: alicanovski1@gmail.com ; website: anthonymovement.com.
3. What personal data we collect
3.1. Identification and contact data: first and last name, email address, and phone number.
3.2. Order and billing data: purchased products or services, order value, billing address, invoicing information, payment method and status, transaction ID, and other information necessary for processing the order.
3.3. Bank card data are processed directly by the respective payment service provider and are not stored by us.
3.4. Data from online consultation inquiries: level of preparation, goals set, questions, preferred time for consultation, and other information you choose to provide us.
3.5. If you voluntarily provide us with information regarding your health status, injuries, or physical limitations in connection with an online consultation, it is processed only to the extent necessary for conducting the consultation and provided there is an applicable legal basis.
3.6. Customer profile data, when the site provides an option for registration: login credentials, order history, purchased programs, and profile settings.
3.7. Technical data: IP address, device type, operating system, browser, approximate location, date and time of visit, pages viewed, and actions on the site.
3.8. Data collected through cookies and similar technologies, when their use is permitted under applicable law and your settings.
3.9. Data from communication between you and us, including the content of sent messages, inquiries, and responses.
4. Purposes and legal grounds for processing
4.1. Performance of a contract or taking steps prior to the conclusion of a contract at your request pursuant to Art. 6, § 1, let. (b) of the GDPR: accepting and processing orders; providing access to purchased digital programs; processing payments; processing inquiries and organizing online consultations; communication regarding an order, program, or consultation.
4.2. Compliance with a legal obligation pursuant to Art. 6, § 1, let. (c) of the GDPR: issuing and storing invoices and accounting documents; fulfilling obligations under tax, accounting, and other applicable legislation; providing information to competent authorities when required by law.
4.3. Consent pursuant to Art. 6, § 1, let. (a) of the GDPR: sending marketing messages; using analytical, advertising, and other non-essential cookies; using technologies for measuring and personalizing advertisements, including through Meta, when such technologies are activated. You may withdraw your consent at any time.
4.4. When you voluntarily provide data concerning your health status, injuries, or physical limitations and their processing requires explicit consent, they are processed on the basis of Art. 9, § 2, let. (a) of the GDPR. Consent may be withdrawn at any time.
4.5. Legitimate interest pursuant to Art. 6, § 1, let. (f) of the GDPR: ensuring the security of the website; preventing and detecting fraud and abuse; protection and exercise of legal claims; improving the site's performance and service based on aggregated information or data not collected through non-essential tracking technologies.
4.6. When we process data based on legitimate interest, we assess whether this interest is overridden by your rights, interests, and fundamental freedoms.
5. Who we share your personal data with
5.1. Shopify and platform-related providers that ensure the functioning, hosting, security, and technical support of the online store. Depending on the specific service, Shopify may process data on our behalf or as an independent controller according to the platform's applicable terms and policies.
5.2. Payment service providers that process your payments.
5.3. Analytical and advertising service providers, including Meta Platforms (Facebook and Instagram), when the respective tools are activated and the necessary legal basis is present.
5.4. Providers of email, marketing, communication, online consultation, and digital content delivery services, when we use such services.
5.5. Accounting, legal, technical, and other professional consultants who are bound by confidentiality obligations.
5.6. Competent authorities and institutions when we are required by law to provide the relevant data.
5.7. We provide the recipients only with the personal data necessary for the performance of the specific service or obligation.
6. Transfer of data outside the European Economic Area
6.1. Some of the providers we use, including Shopify and providers of analytical, advertising, or technical services, may process personal data in countries outside the European Economic Area.
6.2. When such a transfer occurs, it is based on a European Commission adequacy decision or on appropriate safeguards pursuant to applicable legislation, including standard contractual clauses.
6.3. Information regarding the applicable mechanisms and safeguards for data transfers can be obtained via the contact details provided in Section 2.
7. Storage periods
7.1. Data related to orders, purchased programs, and contractual relationships are stored for the duration of the contractual relationship and until the expiration of the applicable limitation periods for filing or defending against legal claims.
7.2. Accounting and tax documents are stored for the periods defined in the Accountancy Act, tax law, and other applicable legislation, including up to 10 years when required by law.
7.3. Data from inquiries that did not result in the conclusion of a contract or the conduct of a consultation are stored for up to 12 months after the last communication, unless a longer period is necessary to protect legal claims.
7.4. Direct marketing data are processed until consent is withdrawn, you unsubscribe, or object to direct marketing. Afterward, we may retain minimal information necessary to certify the withdrawal and ensure you do not receive further marketing messages.
7.5. Data collected through cookies are stored for the periods specified in the Cookie Policy and in the settings of the respective technologies.
7.6. Upon expiration of the applicable period, personal data are deleted, anonymized, or restricted, unless the law requires their further storage.
8. Your rights
8.1. You have the right to obtain information on whether we process your personal data, the right to access them, and the right to receive a copy of the processed data.
8.2. You have the right to request correction or completion of inaccurate, incomplete, or outdated personal data.
8.3. You have the right to request the deletion of your personal data when there is a ground provided by law and no legal basis for their further storage.
8.4. You have the right to request restriction of processing under the conditions provided for by applicable law.
8.5. You have the right to portability of the data you have provided when processing is performed by automated means and is based on consent or contract.
8.6. You have the right to object to processing based on legitimate interest. When data are processed for direct marketing purposes, you may object at any time, after which we will cease processing for that purpose.
8.7. You have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.
8.8. We do not use fully automated decision-making that produces legal effects concerning you or similarly significantly affects you. We may use advertising profiling when you have given the necessary consent, but it does not lead to such decisions.
8.9. You may exercise your rights through a written application sent via the contact details provided in Section 2. When we have reasonable doubts regarding the identity of the applicant, we may request additional information necessary for its confirmation.
8.10. We will respond to the application without undue delay and no later than one month after its receipt. In case of factual or legal complexity, the period may be extended by up to two additional months, of which we will inform you within the initial one-month period.
8.11. Exercising these rights is free of charge, except when the request is manifestly unfounded or excessive, in particular because of its repetitive character.
8.12. You have the right to file a complaint with the Personal Data Protection Commission: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., website: www.cpdp.bg.
9. Personal data security
9.1. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, unlawful use, loss, alteration, disclosure, or destruction.
9.2. Access to personal data is limited to individuals who need it for the performance of their professional or contractual duties and are bound by a confidentiality obligation.
9.3. We periodically review the security measures used and update them if necessary according to the nature of the data processed and identified risks.
10. Links to other websites
10.1. Our website may contain links to external websites and services that we do not manage. We are not responsible for their content, security, or privacy policies. We recommend that you familiarize yourself with the terms and policies of the respective external site before providing it with any personal data.
11. Cookies and similar technologies
11.1. We use mandatory cookies necessary for the proper functioning and security of the site. These cookies cannot be turned off through the consent management system.
11.2. Analytical, advertising, and other non-essential cookies are activated only after you have provided the corresponding consent, when required by law.
11.3. You may change your choice or withdraw your consent through the privacy and cookie settings on the site.
11.4. Additional information regarding the categories of cookies used, their providers, purposes, and storage periods is available in our Cookie Policy.
12. Personal data of minors
12.1. The website and the services offered through it are not intended for persons under 16 years of age. We do not aim to collect or process personal data of such individuals.
12.2. If we discover that personal data of a person under 16 has been provided to us without a valid legal basis or without the necessary involvement of their parent or guardian, we will take steps to delete it, unless applicable law requires its storage.
13. Changes to the Privacy Policy
13.1. We may periodically update this Policy to reflect changes in our activities, the services used, or applicable legislation.
13.2. The current version is available on our website and enters into force on the date of its publication, unless otherwise expressly stated.
13.3. Last updated: 01.08.2026.