Privacy Policy
- Introduction
At FSCS (Flame Spray Coating Services), we respect your privacy and are committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you interact with our website, request a quote, or engage our coating services.
We operate in full compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and the relevant national laws of the Republic of Bulgaria, where our company is registered.
This Privacy Policy applies to:
- Visitors of our website https://flamespraycoatings.com/
- Clients requesting technical information, quotes, or service execution
- Business partners, suppliers, and subcontractors
- Any individual who provides personal data in the context of our service
By using our website or submitting a service request, you confirm that you have read and agree to this Privacy Policy. If you have any questions or concerns about how we handle your data, please contact us at the details provided at the end of this policy.
- What Personal Data We Collect
We only collect personal data that is necessary for delivering our services or responding to your inquiries. The type of data we may collect includes:
1. Identity and Contact Information
- Full name
- Email address
- Phone number
- Company name
- Billing and delivery address
2. Project-Related Information
- Technical specifications, drawings, or photos you submit
- Coating type preferences or surface conditions
- Order or project reference numbers
3. Payment and Transaction Data
- Bank transfer details (if provided)
- Invoice and payment records
(Note: We do not store your credit/debit card information. All online payments are processed via secure third-party providers such as Stripe or PayPal.)
4. Website Usage Data
- IP address
- Browser type and version
- Pages visited and time spent on our site
- Cookies and tracking data (see our Cookie Policy for details)
5. Communication Data
- Messages sent through our contact form or email
- Customer service interactions
- Consent records (e.g., acceptance of our terms or policies)
We do not collect or process special categories of personal data (such as health information, political views, or biometric data) unless explicitly required by law or you provide it voluntarily for a specific purpose.
We process your personal data only for specific, explicit, and legitimate purposes, including:
- To provide and deliver our services
– To process your order, coordinate technical details, prepare quotes, and execute flame spray coating projects.
- To communicate with you
– To respond to inquiries, provide updates, send service-related messages, and coordinate site visits or sample deliveries.
- To issue invoices and comply with legal obligations
– For billing, accounting, and tax compliance under Bulgarian and EU law.
- To improve our services and user experience
– By analyzing how you interact with our website, we optimize its structure, content, and functionality.
- To ensure safety and compliance
– To prevent fraud, enforce our Terms & Conditions, and comply with regulatory requirements.
- With your explicit consent (where required)
– For optional actions like including your project as a reference in our portfolio or sending marketing materials (only if you opt in).
We do not use your data for profiling or automated decision-making.
- Your Data Protection Rights
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right to Access
You have the right to request a copy of the personal data we hold about you.
- Right to Rectification
You may request corrections to inaccurate or incomplete personal information.
- Right to Erasure (“Right to be Forgotten”)
You may request the deletion of your personal data where there is no legal reason for us to continue processing it.
- Right to Restrict Processing
You can ask us to temporarily suspend processing of your data in certain cases – e.g., if you contest its accuracy.
- Right to Object to Processing
You may object to processing based on legitimate interests. We will stop unless we demonstrate compelling legitimate grounds.
- Right to Data Portability
You can request that we transfer your personal data to another service provider, where applicable.
- Right to Withdraw Consent
If we process your data based on consent, you may withdraw it at any time without affecting prior lawful processing.
- Right to Lodge a Complaint
If you believe your rights have been violated, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP) or another competent authority.
- Third Parties and Confidentiality
We do not sell, trade, or rent your personal data to unrelated third parties.
Your personal information is only shared under the following conditions:
- Service Fulfilment
We may share limited information (e.g., delivery address or technical specifications) with subcontractors, powder suppliers, or logistics providers strictly for the purpose of fulfilling your order. All such third parties are contractually bound by confidentiality and data protection obligations.
- Legal Obligations
We may disclose your data if required by law, court order, or regulatory authority (e.g., tax reporting or inspection by consumer protection bodies).
- Business Operations
We may engage trusted partners (such as accountants, legal advisors, or IT system providers) who help us operate our business. These partners have access only to the data necessary for their task and are contractually bound by non-disclosure and data security clauses.
- Website Analytics & Security
We may use third-party services (e.g., Google Analytics, reCAPTCHA, or hosting providers) to analyze site traffic or protect against spam and cyber threats. These services may collect limited technical data (like your IP address or device type) but do not access any personally identifying information unless explicitly stated.
- Confidentiality of Business Information
Any technical specifications, drawings, photos, or material samples you provide in relation to coating requests will be treated as strictly confidential and will not be used or disclosed beyond the purpose of fulfilling the service. We do not reproduce, reuse, or share client technical data without written consent.
Our website uses cookies to enhance your browsing experience, improve site functionality, and analyze usage statistics. Cookies are small text files stored on your device when you visit our site.
Types of cookies we use:
- Essential cookies
These are necessary for the proper functioning of the website (e.g., to remember your language preference or maintain session security).
- Performance and analytics cookies
We use tools like Google Analytics to understand how visitors interact with our site – which pages are most visited, how long users stay, and which devices are used. This helps us improve our content and user experience.
- Security cookies
Used to detect spam, bots, or abuse (e.g., Google reCAPTCHA), ensuring your browsing is safe.
Cookie preferences and control:
By default, only essential cookies are active. Upon your first visit, you will see a cookie banner where you can:
- Accept all cookies
- Customize your preferences
- Reject non-essential cookies
You can also control or delete cookies at any time through your browser settings.
Please note: Disabling cookies may affect some site functionality or user experience.
- Security and Data Retention
We take the protection of your personal data seriously and implement appropriate technical and organizational measures to prevent unauthorized access, loss, misuse, or alteration.
Data Security Measures:
- All personal data is stored on secure servers with restricted access.
- Communication via our website is encrypted using SSL (Secure Socket Layer) technology.
- Access to sensitive customer information is limited to authorized personnel only and governed by strict confidentiality obligations.
- For customer orders, technical files and contact data are only accessible by the personnel assigned to the project.
Data Retention Period:
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Execution and documentation of coating services;
- Legal obligations (e.g., tax or accounting records);
- Warranty and after-service support;
- Dispute resolution or defense of legal claims.
Retention examples:
- Contact and order data: up to 5 years after project completion;
- Invoices and tax documents: up to 10 years, in line with Bulgarian accounting legislation;
- Technical files related to coatings: retained for the duration of the warranty period (e.g., up to 10 years), unless otherwise required.
When data is no longer necessary, we securely delete or anonymize it.
If you have any questions regarding this Privacy Policy, the way we handle your personal data, or if you wish to exercise any of your rights under applicable data protection laws, you may contact us at:
Flame Spray Coating Services
Email: [email protected]
Phone: +359 893 777 686
Website: https://flamespraycoatings.com/
Business Address: Available upon legitimate request.
We aim to respond to all legitimate requests within 30 days.
Complaints
If you believe that your data has been processed in violation of your rights or applicable data protection legislation, you have the right to lodge a complaint with:
Commission for Personal Data Protection
Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria
Website: www.cpdp.bg
Phone: +359 2 915 35 18
Email: [email protected]
We always encourage you to contact us first, so we can try to resolve the issue promptly and amicably.
We operate in accordance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable national data protection laws of the Republic of Bulgaria.
We do not knowingly collect personal data from individuals under the age of 16. If we learn that we have collected such data inadvertently, we will take steps to delete it.
To exercise any of your rights, please contact us using the contact details at the end of this policy.
All third-party service providers are carefully selected and subject to appropriate due diligence, including compliance with applicable data protection laws and data security standards.
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant data protection authority in accordance with Article 33 and 34 of the GDPR.
This Privacy Policy is governed by the laws of the Republic of Bulgaria. For more details about your rights or the applicable legal framework, you may also consult the website of the European Data Protection Board (https://edpb.europa.eu).
Last updated: 27 July 2025