• Your shopping cart is empty!

Privacy Policy & GDPR

This Privacy Policy explains how "BLOOM JEWELLERY" Ltd. (Bloom Jewellery & Diamonds) processes personal data of visitors and customers of the online store bloomjewellerydiamonds.com, as well as how you can exercise your rights under Regulation (EU) 2016/679 (GDPR).

1) Data Controller

"BLOOM JEWELLERY" Ltd.
UIC: 204948809
Address: 66 Bratya Buxton Blvd., Sofia, Bulgaria
E-mail: sales@bloomjewellerydiamonds.com
Tel.: +359 888 801 433

2) Personal Data We Collect

  • Account & Registration Data: First and last name, e-mail address, contact phone number, and any additional details you voluntarily add to your account.
  • Order & Shipping Data: Recipient name, full delivery address, phone number, e-mail address, ordered jewelry items, and order history.
  • Invoicing Data: Billing address and required payment information for invoice issuance.
  • Communication Data: Content of inquiries submitted via contact forms or e-mail, as well as customer service records.
  • Technical Data: IP address, device type, browser information, technical security logs, session data, and shopping cart preferences.
  • Marketing Data (Optional): E-mail address for promotional offers and newsletters (collected strictly with your explicit consent).

3) Purposes & Legal Grounds for Processing

  • Order Fulfillment & Delivery (including warranty claims, custom adjustments, and repairs) – Legal Basis: Performance of a Contract.
  • Customer Care & Account Support – Legal Basis: Performance of a Contract.
  • Accounting & Legal Compliance – Legal Basis: Compliance with Legal Obligations.
  • Security & Fraud Prevention – Legal Basis: Legitimate Interest.
  • Newsletters & Direct Marketing – Legal Basis: Consent (which can be withdrawn at any time).

4) Third-Party Data Recipients

We share personal data strictly on a need-to-know basis and in minimal volume with trusted third-party providers:

  • Express Couriers – DHL Express and logistics partners for international order dispatch and tracking.
  • Payment Gateways & Banks – Secure credit/debit card processing partners. Card details are entered directly into encrypted payment gateway interfaces; we only receive transaction authorization status.
  • Hosting & Security Infrastructure – IT service providers supporting site reliability, SSL encryption, and server security.
  • Legal & Tax Authorities – When required by applicable statutory regulations.

5) Data Retention Periods

  • Customer Account: Retained until account closure by the user, unless longer retention is required by tax law.
  • Orders & Invoices: Retained for the statutory period required by European tax and accounting legislation.
  • Communications: Kept for the duration necessary to resolve inquiries and protect against potential claims.
  • Newsletter Subscription: Retained until you opt out or withdraw your consent.

6) Your GDPR Rights

  • Right of access to your personal data;
  • Right to rectification of inaccurate information;
  • Right to erasure ("Right to be forgotten") subject to statutory requirements;
  • Right to restriction of processing;
  • Right to data portability;
  • Right to object to processing based on legitimate interests;
  • Right to withdraw consent for marketing communications at any time.

7) How to Exercise Your Rights

To submit a data access or deletion request, please contact us at: sales@bloomjewellerydiamonds.com. Identity verification may be required prior to processing your request.

8) Cookies Policy

We use cookies and essential tracking technologies to maintain basic store functionality (such as shopping cart sessions, currency selection, and security). Performance and analytical cookies are managed according to your privacy settings.

9) Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection (CPDP): www.cpdp.bg.