Privacy Policy | Diamonds N Carats

1. Who We Are

This website is operated by Diamonds and Carats Ltd. (Диаманти и Карати ЕООД), a company registered in Bulgaria, UIC 207876418, VAT BG207876418, with registered address at European Trade Center, 115 M, Building D, Floor 1, Tsarigradsko Shose Blvd., Mladost District, Sofia 1784, Bulgaria ("we", "us", "our").

2. Information We Collect

We may collect the following personal data:

Account information — name, email address, phone number when you create an account or submit an inquiry.
Inquiry data — product preferences, messages, and any details you share through our contact or inquiry forms.
Usage data — pages visited, time spent, browser type, device information, and IP address collected automatically through cookies and analytics.
Communication data — messages exchanged via WhatsApp, Viber, email, or other channels you initiate.

3. How We Use Your Information

To respond to your inquiries about our jewelry and provide personalized recommendations.
To process and fulfill orders placed through direct communication.
To manage your account and wishlist preferences.
To send you information about new collections, promotions, and events (only with your consent).
To improve our website, products, and customer experience.
To comply with legal obligations.

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on: (a) your consent, (b) the performance of a contract or pre-contractual steps, (c) our legitimate business interests, and (d) compliance with legal obligations.

5. Data Storage

Account data and preferences (such as wishlist items) are stored locally in your browser using localStorage technology. This data is not transmitted to our servers and remains entirely on your device. Inquiry form submissions may be processed through third-party email services. We do not store payment information as all transactions are handled through direct communication.

6. Cookies

We use essential cookies to ensure the proper functioning of our website and optional analytics cookies to understand how visitors interact with our site. You can manage your cookie preferences through the consent banner displayed on your first visit. You may also disable cookies through your browser settings at any time.

7. Third-Party Services

Our website may contain links to third-party services including WhatsApp (Meta Platforms), Viber (Rakuten), and Instagram (Meta Platforms). These services have their own privacy policies, and we encourage you to review them. We use Vercel for website hosting. Analytics data may be processed by these providers in accordance with their respective privacy policies.

8. Your Rights

Under GDPR, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — request correction of inaccurate personal data.
Erasure — request deletion of your personal data ("right to be forgotten").
Restriction — request restriction of processing of your personal data.
Portability — receive your personal data in a structured, machine-readable format.
Object — object to processing based on legitimate interests or for direct marketing.
Withdraw consent — withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at hello@diamondsncarats.com.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws. Inquiry data is retained for up to 24 months. You may request deletion at any time.

10. Children's Privacy

Our website is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.

12. Contact

For any questions regarding this Privacy Policy or your personal data, please contact:

Diamonds and Carats Ltd.
European Trade Center, 115 M, Building D, Floor 1
Tsarigradsko Shose Blvd., Sofia 1784, Bulgaria
Email: hello@diamondsncarats.com

13. Supervisory Authority

You have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria (CPDP) at www.cpdp.bg if you believe your data protection rights have been violated.