Privacy Policy

Last updated: 6 September 2026

Locks-On-Line respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, create an account, contact us, subscribe to our newsletter or purchase products from us.

1. Who We Are

Locks-On-Line is operated by:

Mt-2024 Ltd
VAT Number: BG 207788651
OSS Registered
J.k. Serdika, bl. 18A
Sofia 1379
Bulgaria

Telephone / WhatsApp: +359 896 210 063
Email: [confirm and insert privacy/contact email]

For the purposes of the General Data Protection Regulation (GDPR) and applicable Bulgarian data-protection legislation, Mt-2024 Ltd is the data controller for personal data covered by this Privacy Policy.

2. Personal Data We Collect

Depending on how you use our website, we may collect the following information:

• Your name and contact details, including your email address, telephone number, billing address and delivery address.

• Account information if you create a customer account.

• Order and transaction information, including products purchased, order value, delivery method and transaction details.

• Information you provide when contacting us by email, telephone, WhatsApp or through our website.

• Newsletter subscription information.

• Technical information relating to your use of our website, such as your IP address, browser type, device information and cookie or similar technology identifiers.

• Information about how you navigate and interact with our website.

We do not normally receive or store your complete payment-card details. Payments may be processed by third-party payment providers, which process payment information according to their own privacy and security policies.

3. Why We Use Your Personal Data

We may process your personal data in order to:

• Process, fulfil and deliver your orders.

• Take payment and manage transactions.

• Provide order confirmations, dispatch information and tracking updates.

• Communicate with you about an order, enquiry, return, refund or other customer-service matter.

• Create and administer your customer account.

• Detect and prevent fraud, misuse and security incidents.

• Maintain appropriate accounting, tax and business records.

• Comply with legal and regulatory obligations.

• Improve our website, products and customer experience.

• Send marketing communications where you have consented to receive them or where otherwise permitted by applicable law.

4. Legal Bases for Processing

Under the GDPR, we rely on one or more of the following legal bases when processing personal data:

Contract: Processing is necessary to enter into or perform a contract with you, including processing and delivering an order.

Legal obligation: Processing is necessary for us to comply with legal requirements, including accounting, taxation and consumer-protection obligations.

Legitimate interests: Processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms. This may include website security, fraud prevention and improving our services.

Consent: Where required, we process personal data on the basis of your consent, for example for certain marketing communications or non-essential cookies. You may withdraw your consent at any time.

5. Orders and Delivery

When you place an order, we use the personal information you provide to process the transaction and deliver your products.

We may provide necessary information such as your name, delivery address, telephone number and other shipment information to postal services, couriers and logistics providers responsible for delivering your order.

For expedited or express courier deliveries, a telephone number may be required so that the courier can complete delivery.

Where an order is shipped internationally, information may also need to be provided to customs authorities, postal operators or other organisations involved in customs clearance and international delivery.

6. Payments

Payments are processed through the payment methods made available during checkout.

Payment providers may collect and process personal and financial information necessary to authorise and complete your transaction. Their processing of your information is also governed by their own privacy policies.

Locks-On-Line should not receive or retain complete payment-card information where the transaction is handled directly by an external payment processor.

7. Service Providers and Other Recipients

We may share personal data with trusted third parties where necessary to operate our business, including:

• Payment processors.

• Postal, courier and logistics providers.

• Website hosting and e-commerce service providers.

• Email and communications providers.

• Accounting, tax and professional advisers.

• IT, security and fraud-prevention providers.

• Government, tax, customs, regulatory or law-enforcement authorities where disclosure is legally required.

We only provide third parties with information reasonably necessary for the relevant service or legal requirement.

We do not sell your personal data.

8. International Transfers

Locks-On-Line sells and ships products internationally. Some service providers involved in operating our website, processing transactions, communicating with customers or delivering orders may be located outside Bulgaria or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we take appropriate steps where required by applicable data-protection law to ensure that the information receives an adequate level of protection.

These safeguards may include an adequacy decision adopted by the European Commission, approved contractual safeguards such as Standard Contractual Clauses, or another legally permitted transfer mechanism.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, warranty, fraud-prevention and dispute-resolution requirements.

Order, invoice and transaction records may therefore be retained for the period required under applicable Bulgarian accounting and tax legislation.

Customer-account information may be retained while your account remains active and for an appropriate period afterwards where necessary for legal or legitimate business purposes.

Marketing subscription information is normally retained until you unsubscribe or withdraw your consent, subject to retaining limited information where necessary to record your opt-out.

Customer correspondence may be retained for an appropriate period depending on the nature of the enquiry and whether it relates to an order, warranty, dispute or legal obligation.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate essential website functionality, remember preferences, maintain shopping-cart functionality, understand website usage and, where applicable, provide analytics or marketing functionality.

Where required by law, non-essential cookies will only be used after obtaining your consent.

You can manage cookies through the cookie controls provided on our website, where available, and through your browser settings.

For more information about the specific cookies and technologies used by the website, please refer to our Cookie Policy.

11. Marketing Communications

If you subscribe to our newsletter or otherwise agree to receive marketing communications, we may use your contact information to send you information about products, offers or other Locks-On-Line news.

You can unsubscribe at any time by using the unsubscribe option contained in our marketing emails or by contacting us.

Withdrawing consent to marketing does not affect the lawfulness of processing carried out before your consent was withdrawn.

12. Data Security

We take appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmitting or storing information online can guarantee absolute security.

13. Your Rights Under the GDPR

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you.

• Rectify inaccurate or incomplete personal data.

• Erase your personal data in certain circumstances.

• Restrict processing of your personal data in certain circumstances.

• Object to processing based on legitimate interests in certain circumstances.

• Data portability, allowing you to receive certain personal data in a structured, commonly used and machine-readable format.

• Withdraw consent at any time where processing is based on consent.

• Object to direct marketing at any time.

• Lodge a complaint with the relevant data-protection supervisory authority.

These rights are subject to the conditions and exceptions contained in applicable data-protection legislation.

To exercise your rights, please contact us using the details below. We may need to request information to verify your identity before fulfilling certain requests.

14. Complaints

If you have concerns about how we process your personal data, please contact us first so that we can investigate your concerns.

You also have the right to lodge a complaint with the Bulgarian data-protection supervisory authority:

Commission for Personal Data Protection (CPDP)
Sofia, Bulgaria

You may also have the right to contact a data-protection authority in another EU or EEA country where applicable.

15. Children's Privacy

Our website and products are not intended specifically for children.

We do not knowingly seek to collect personal information from children in circumstances where parental or guardian consent would be required under applicable law.

If you believe that a child has provided personal information to us improperly, please contact us.

16. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices of independent third parties. We recommend reviewing the privacy policy of any third-party website or service before providing personal information to it.

17. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our business, website, service providers or applicable law.

When we make changes, we will publish the revised Privacy Policy on this website and update the "Last updated" date at the top of the policy.

We encourage you to review this page periodically.

18. Contact Us

For questions about this Privacy Policy, the way we process your personal data, or to exercise your data-protection rights, please contact:

Locks-On-Line / Mt-2024 Ltd
J.k. Serdika, bl. 18A
Sofia 1379
Bulgaria

Telephone / WhatsApp: +359 896 210 063
Email: [confirm and insert privacy/contact email]