Privacy Policy

1. Introduction

Ciavore ("we," "our," or "us"), based in Stara Zagora, Bulgaria, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

We comply with the General Data Protection Regulation (GDPR) and applicable Bulgarian data protection laws.

2. Data Controller

Ciavore EOOD
Stara Zagora, Bulgaria
Email: concierge@ciavore.com

3. Information We Collect

We collect information you provide directly to us, including:

• Name, email address, and contact details
• Billing and shipping addresses
• Payment information (processed and stored entirely by our secure payment provider, Stripe)
• Order history and preferences
• Communications with Ciavore

We also automatically collect certain information when you visit our site, including your IP address, browser type, and browsing behaviour through cookies.

4. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Communicate with you about your purchases
• Send marketing communications (with your consent)
• Improve our website and services
• Comply with legal obligations

5. Legal Basis for Processing

Under GDPR, we process your data based on: contractual necessity (to fulfil orders), legitimate interests (to improve our services), consent (for marketing), and legal compliance.

6. Data Sharing

We share your information only with trusted third parties who assist in operating our business: payment processors (Stripe), shipping carriers (DHL, Econt), and analytics providers. We do not sell your personal data.

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact our team at concierge@ciavore.com. We will process your request in accordance with applicable laws.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically retained for 7 years for accounting purposes.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction.

10. Contact Us

For any privacy-related enquiries or to exercise your rights, please contact us at concierge@ciavore.com or through our Concierge service.