# Privacy policy

Source: https://svetlina-candles.cgshops.com/en/privacy

## Who processes your data

Svetlina Candles, address Bulgaria. We are the controller of your personal data.

## What data, and why

- Name, email, phone, address and the order: to fulfil and deliver your order, and to handle a withdrawal or complaint (contract, GDPR art. 6(1)(b)).
- Orders and accounting records: for accounting and tax (legal obligation, (c)).
- Your account (email, password, addresses), if you create one: so you can order more easily and see your orders (contract, (b)).
- IP address and technical cookies: for the security and running of the shop (legitimate interest, (f)).
- Analytics cookies: only if you accept them (consent, (a)).

Without your name, phone and address we cannot deliver your order. We make no decisions about you by automated means alone.

## Who we share it with

- The courier you choose: name, phone, email and address.
- The payment provider you choose (for example Stripe, myPOS or PayPal). It also uses the data for its own purposes, such as preventing fraud, as a controller in its own right.
- CraftGenie, which runs the shop on our behalf, and its sub-processors for hosting and sending email.
- Google, only if you accept analytics cookies.
- Our accountant, and public authorities where the law requires.

Some of them process data outside the EU (for example in the US) under the GDPR's safeguards: a European Commission adequacy decision or standard contractual clauses.

## How long we keep it

- Orders and accounting records: 10 years, as accounting law requires.
- Your account: while you have it.
- Complaints: 5 years after they are closed.

## Your rights

You can ask for access to and a copy of your data, correction, erasure, restriction, object, or withdraw your consent: write to us. We reply within one month. If we erase your data, your orders stay without your name or contact details for as long as the law requires. You can complain to the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd, Sofia 1592, kzld@cpdp.bg, www.cpdp.bg.

## Cookies

We use cookies the shop cannot work without: for the cart and for signing in. If we use analytics cookies, we ask you first, use them only if you accept, remember your choice in a cookie, and let you change it with "Cookie settings" at the bottom of every page. Which cookies, what for and for how long: see the "Cookie policy" page.