Privacy policy
Effective from 1 November 2026. This is an English translation; if the versions differ, the Bulgarian version prevails.
1. Who processes your data
The data controller is Bizhuta ot prirodata EOOD („Бижута от природата“ ЕООД), company number (EIK) 206346484, Ovcha Kupel 1, Sofia, Bulgaria. For any questions about personal data, write to dropsofemotions@gmail.com or call +359 878 707 253.
2. What data we collect and why
- Orders: name, phone, email, delivery address or office, order contents, payment method, note. We need them to fulfil your order and issue a receipt (performance of a contract and a legal obligation).
- Custom design requests and messages: name, email, phone, text and the photos you send us. We use them to reply and prepare a proposal (steps before entering into a contract, and our legitimate interest in answering enquiries).
- Gift cards: the recipient's name and email and your message, if you give them. We use them only to send the card.
- Newsletter: email and name, only if you have given consent (checkbox or subscription). You can unsubscribe at any time from the link in every email.
- Card payments: processed entirely by Stripe. We never see or store your card details.
- Cookies and analytics: see section 6.
3. Who we share data with
Only with providers who help us run the shop, and only as much as they need:
- Speedy AD (Bulgaria) – delivering parcels;
- Stripe Payments Europe, Limited (Ireland) – card payments;
- Brevo (Sendinblue SAS) (France) – sending order emails and the newsletter;
- Cloudflare, Inc. – hosting the site and storing data;
- Google Ireland Ltd (Google Analytics and Google Ads) and Meta Platforms Ireland Ltd (Meta Pixel) – only if you accept the relevant cookies;
- our accountant and public authorities, when the law requires it.
Some of these providers may also process data outside the EU (for example in the USA). This is done on the basis of a European Commission adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
We do not sell your personal data.
4. How long we keep data
- Order and receipt data – 10 years, as required by the Bulgarian Accountancy Act;
- Messages and design requests that did not become an order – up to 2 years;
- Photos sent for a custom design order – up to 1 year after the order is completed;
- Newsletter – until you unsubscribe;
- Cookies – see section 6.
5. Your rights
You have the right to request access to your data, correction, erasure, restriction of processing and portability, to object to processing based on legitimate interest, and to withdraw consent at any time. Write to us at dropsofemotions@gmail.com – we reply within one month.
You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg) or with the data protection authority of the EU country where you live.
6. Cookies
- Necessary (always on): the cart, checkout, admin login and remembering your cookie choice.
- Analytics (with your consent): Google Analytics, so we can see how the site is used and which pieces you like.
- Advertising (with your consent): Meta Pixel and Google Ads, to measure our ads on Facebook, Instagram and Google and show you relevant jewellery.
You can change your choice at any time from "Cookie settings" at the bottom of every page.
7. Security
The site runs entirely over a secure connection (HTTPS). Access to orders is password-protected. Card payments take place on Stripe's secure page.
8. Children
The shop is not intended for people under 16 and we do not knowingly collect their data.
9. Changes
If we change this policy, we will publish the new version here with its effective date.