Privacy policy

Last updated: 14 December 2025

This Privacy Policy describes how Artisannel Ltd. (“we”, “us”, “our store”) collects, uses, and protects your personal data when you use the Artisannel website and related services (the “Services”).

This Policy is drafted in accordance with Regulation (EU) 2016/679 (GDPR), the Bulgarian Personal Data Protection Act, and applicable European and Bulgarian legislation.

1. Data Controller

Data Controller:
Artisannel Ltd.
Company ID (UIC/BULSTAT): 208042932
Address: 11 Raya Street, 4001 Plovdiv, Bulgaria
Email: contact@artisannel.com
Phone: +359 898 55 20 11

2. Personal Data We Collect

“Personal data” means any information that identifies or can be reasonably linked to an individual.

Depending on how you interact with our Services, we may collect the following categories of personal data:

Contact information – name, billing and shipping address, phone number, email address;
Payment information – transaction and payment details (we do not store full payment card numbers);
Order information – purchased products, order history, returns and complaints;
Communications – information you provide when contacting us via email or contact forms;
Technical data – IP address, device type, browser, logs;
Usage data – interaction with the website, viewed products, browsing behavior.

3. Sources of Personal Data

We collect personal data:

directly from you (when placing orders, creating an account, or contacting us);
automatically through the website (cookies and similar technologies);
from service providers (e.g. Shopify, payment and delivery providers).

4. Purposes of Processing

We process personal data for the following purposes:

Contract performance – processing orders, payments, deliveries, returns;
Customer support – responding to inquiries and complaints;
Marketing and communications – sending promotional messages where permitted and/or based on your consent;
Security and fraud prevention;
Legal compliance – accounting and tax obligations;
Service improvement – analytics and optimization of the shopping experience.

5. Legal Bases for Processing (Article 6 GDPR)

We process personal data on the following legal bases:

performance of a contract;
compliance with a legal obligation;
legitimate interest (security, fraud prevention, statistics);
consent (marketing communications and cookies, where applicable).

6. Disclosure of Personal Data to Third Parties

We may disclose personal data to:

Shopify – the platform hosting and operating our online store;
payment and delivery service providers;
IT and marketing service providers acting on our behalf;
public authorities where required by law.

All third parties process data in accordance with applicable data protection laws.

7. Shopify as Data Processor

Our store is hosted on Shopify Inc., which processes personal data as a data processor or, in certain cases, as an independent data controller.
More information is available at:
https://privacy.shopify.com/en

8. Cookies

We use cookies and similar technologies to operate the website, analyze traffic, and support marketing activities.
You can manage your preferences through the cookie banner and your browser settings.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

10. Your Rights

Depending on applicable law, you have the right to:

access your personal data;
rectify inaccurate data;
request erasure (“right to be forgotten”);
restrict processing;
data portability;
object to processing;
withdraw consent at any time.
You may exercise your rights by contacting us at contact@artisannel.com.

11. Children’s Data

The Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children.

12. International Data Transfers

Personal data may be processed outside the European Union through Shopify. In such cases, we rely on Standard Contractual Clauses or other recognized safeguards.

13. Complaints

If you believe your rights have been violated, you may contact us or lodge a complaint with the competent supervisory authority.

For Bulgaria, the competent authority is:
Commission for Personal Data Protection (CPDP).

14. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be published on this website.

15. Contact

If you have any questions regarding this Privacy Policy or the processing of personal data, you may contact us:

Artisannel Ltd.
Email: contact@artisannel.com
Phone: +359 898 55 20 11
Address: 11 Raya Street, 4001 Plovdiv, Bulgaria