Privacy policy

Data controller

The data controller is Lavinia Bijouterie, 16A San Stefano St., Kardzhali, Bulgaria. We process your data under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.

What we collect

When you order: name, phone, email (if given), delivery address or courier office and the contents of the order. Through the contact form: name, email and your message.

Why we use it

• Fulfilling and delivering your order (legal basis: contract).
• Accounting records (legal basis: legal obligation).
• Answering enquiries (legal basis: legitimate interest).

We do not send marketing messages and do not sell data to third parties.

Who has access

We pass only the data needed for delivery to the courier you chose (Econt or Speedy). The site is hosted on a server in the EU.

Retention

Order data is kept for 5 years as required by accounting law; contact form messages for up to 12 months.

Cookies

We use only technically necessary cookies (session, cart, language). We use no tracking or advertising cookies.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg). To exercise them, write to us via the Contact page.