Privacy Policy
Who is responsible
Etoile Diamonds EOOD, 47 Cherni Vrah Blvd, Sofia, 1000, Bulgaria is the controller of personal data processed through this portal. Contact: hello@etoilediamonds.com.
What we collect and why
- Account and company details (name, email, company, VAT number, delivery address): to review your application, run your account and deliver orders. Legal basis: contract (Art. 6(1)(b) GDPR).
- Orders, payments and invoices: to fulfil orders and meet tax, accounting and anti-money-laundering duties. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
- Security data (IP address, sign-in attempts): to protect accounts and prevent abuse. Legal basis: legitimate interest (Art. 6(1)(f)).
- Usage statistics, if enabled: anonymous page-view counts without cookies or personal profiles.
Cookies
We only use cookies the portal needs to work: a session cookie to keep you signed in and a cookie for your chosen language. We do not use advertising or tracking cookies.
Who we share data with
- Google Cloud (hosting, EU region)
- Stripe (card payments)
- [Email provider] (sending account and order emails)
- The European Commission’s VIES service (checking VAT numbers)
- Couriers (delivering your orders)
- Tax authorities and auditors, where the law requires
Where a provider processes data outside the EU, we rely on adequacy decisions or standard contractual clauses.
How long we keep it
Account data is kept while your account is open. Orders and invoices are kept for as long as tax and accounting law requires. Security logs are kept for a short period, normally no more than 90 days.
Your rights
You can ask for access to, correction or deletion of your data, restrict or object to processing, and receive your data in a portable format, within the limits the law sets. You may also complain to your data protection authority, in Bulgaria the Commission for Personal Data Protection.