Privacy Policy


This Privacy Policy describes how Crystal Pro Jewelry ("the website", "we", "us") collects, uses and discloses your personal information when you visit and use our services or make a purchase from crystalpro.bg or otherwise communicate with us regarding the services (collectively, the "Services").

Updates to this policy
We may periodically update this policy to reflect changes in our practices, legal and regulatory requirements. We will post the new version on the site and note the "last updated date".

What information do we collect:
- Personal data that you voluntarily provide: name, email, address, phone, order data, account login, correspondence
- Automatically collected information: IP address, browser type, device, cookies, site behavior
- Third-party data: from platforms like Shopify, payment providers, marketing partners, etc.

Purpose and legal basis of processing:
We process your personal data based on:
- Your consent (Art. 6, para. 1, b. "a" of the GDPR)
- Performance of a contract (Art. 6, para. 1, b.)
- Legal obligation (Art. 6, para. 1, b. "c")
- Legitimate interest (Art. 6, para. 1, b. "f")

The goals include:
- Order processing and delivery
- Customer account maintenance
- Marketing communication (only with express consent)
- Website analysis and improvement
- Fulfillment of legal obligations
- Protection against fraud and abuse

Data retention period:
We store your personal data:
- up to 5 years for the purposes of accounting and tax control;
- up to 1 year for marketing, or until consent is withdrawn;
- for the term of the contractual relationship and up to 6 months thereafter if necessary to protect our interests.

Cookies:
We use cookies to improve user experience, analytics and advertising. You can manage or block cookies through your browser settings.
More at: https://www.shopify.com/legal/cookies

Disclosure of information:
We may share information with:
- E-commerce, logistics and payment platforms
- Law enforcement authorities when required by law


Data transfer outside the EU/EEA:
Some of the information may be processed in the USA and other countries through services such as Shopify, Meta, Google, etc. These transfers are made under the terms of Standard Contractual Clauses approved by the European Commission.

Automated solutions:
We do not carry out automated decision-making or profiling within the meaning of Article 22 of the GDPR.

Personal data of children:
Our Services are not intended for children under the age of 16. We do not knowingly collect personal information from them. If you are a parent or guardian and believe that your child has provided such information, please contact us.

Security and storage:
We implement technical and organizational measures to protect personal data from unauthorized access, loss, alteration or destruction. We retain the information for as long as necessary for the purposes described here and in accordance with the law.

Your rights:
You have the right to:
- Access to your personal data
- Correction of inaccurate data
- Data erasure ("right to be forgotten")
- Restriction or objection to processing
- Data portability
- Withdrawal of consent
- Complaint to a supervisory authority

Response time: You will receive a response to your requests within 1 month. If necessary, the deadline may be extended by up to 2 months, of which you will be notified.
You can exercise your rights via email: crystalpro.office@gmail.com

Complaints:
If you believe that we are processing your data unlawfully, you can file a complaint with:
Commission for Personal Data Protection – www.cpdp.bg

Admin and contact:
Administrator: Crystal Pro Ltd.
UIC: B G201292171
Address: 20 Chataldzha St., entrance A, office 1, Varna, Bulgaria
Email: crystalpro.office@gmail.com
Phone: 089 551 8745