Privacy Policy
This Privacy Policy describes how Kristal Pro EOOD ("Crystal Pro Jewellery", "we", "us") collects, uses, and discloses your personal information when you visit crystalpro.bg, use our services, or make a purchase from us.
Updates to this policy
We may periodically update this policy to reflect changes in our practices or legal requirements. The new version will be published on the site with a "last updated date" indicated.
What information we collect
Information you provide voluntarily:
- Full name, email address, phone number, shipping address
- Order and payment details
- Account login information
- Correspondence with us
Automatically collected information:
- IP address, browser and device type
- Cookies and site usage behavior
Information from third parties:
- Platforms such as Shopify, payment processors, marketing partners
Purpose and legal basis for processing
We process your personal data based on:
- Your consent — Art. 6, para. 1, letter "a" of the GDPR
- Performance of a contract — Art. 6, para. 1, letter "b"
- Legal obligation — Art. 6, para. 1, letter "c"
- Legitimate interest — Art. 6, para. 1, letter "f"
The purposes include processing and delivering orders, maintaining customer accounts, marketing communication (only with express consent), website analysis and improvement, fulfillment of legal obligations, and protection against fraud and abuse.
Data retention period
- Up to 5 years — for accounting and tax audit purposes
- Up to 1 year — for marketing, or until consent is withdrawn
- For the duration of the contractual relationship and up to 6 months thereafter — if necessary to protect our interests
Cookies
We use cookies to improve user experience, analysis, and advertising. You can manage or block cookies through your browser settings.
More information: shopify.com/legal/cookies
Disclosure of information
We may share information with:
- E-commerce platforms, logistics (Speedy), and payment processors
- Law enforcement agencies when required by law
Data transfer outside the EU/EEA
Some information may be processed in the USA and other countries through services such as Shopify, Meta, and Google. These transfers are carried out under the terms of Standard Contractual Clauses approved by the European Commission.
Automated decision-making
We do not engage in automated decision-making or profiling within the meaning of Article 22 of the GDPR.
Children's personal data
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided such data, please contact us immediately.
Security
We implement technical and organizational measures to protect personal data from unauthorized access, loss, alteration, or destruction. Data is stored only for as long as necessary for the described purposes and in accordance with the law.
Your rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Erasure ("right to be forgotten")
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
We respond to your requests within 1 month. If necessary, the period may be extended by up to 2 months, of which you will be notified in advance.
Exercise your rights at: info@crystalpro.bg
Complaints
If you believe we are processing your data unlawfully, you can file a complaint with:
Commission for Personal Data Protection — cpdp.bg
Controller and contact
KRISTAL PRO EOOD, UIC 201292171 · registered office: Varna 9002, 9 Kiril Shivarov St., ent. G · 📍 office: Varna 9002, 20 Chataldzha St. 📧 info@crystalpro.bg 📞 089 551 87 45