Privacy policy

PRIVACY POLICY

Last updated: 16 August 2026

At 101 Carat, operated by “101 CARAT” EOOD, the security of your personal data is as important to us as the quality and authenticity of our products.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit 101carat.com, contact us, or make a purchase through our Shopify-powered online store.

1. DATA CONTROLLER

The data controller is:

“101 CARAT” EOOD
UIC: 208744024
Registered address: Plovdiv, 12 Prespa Street, 4000, Bulgaria

We process personal data in accordance with Regulation (EU) 2016/679, also known as the General Data Protection Regulation (GDPR), and applicable Bulgarian legislation.

2. PERSONAL DATA WE COLLECT

To provide our services, we may collect the following categories of personal data:

Contact details
First name, last name, email address, phone number and delivery address.

Order and transaction details
Information related to your orders, purchased products, invoices, payments and delivery status.

Payment information
Payments are processed securely through Shopify Payments and its payment partners. We do not store or have access to your full card number or CVV code.

Technical data
IP address, browser type, device information, website usage data and cookie-related information collected through Shopify and, where enabled, approved analytics and marketing tools.

Verification data
For high-value orders, we may request additional identification or verification information where required by applicable anti-money laundering, fraud prevention or legal compliance rules.

3. WHY WE PROCESS YOUR DATA

We process your personal data for the following purposes:

Performance of a contract
To process your order, deliver your products, issue order confirmations and communicate with you regarding your purchase.

Legal obligations
To issue invoices, keep accounting records and comply with applicable tax, commercial, consumer protection and regulatory obligations.

Legitimate interest
To prevent fraud, protect our business, improve website functionality, maintain security and provide customer support.

Consent
To send marketing communications, newsletters or promotional messages only where you have given your explicit consent.

4. SHARING DATA WITH THIRD PARTIES

We share personal data only when necessary and only with trusted service providers, including:

Shopify
Our e-commerce platform, including checkout, payments, order management and store functionality.

Payment providers
For secure payment processing and fraud prevention.

Courier and logistics partners
For delivery, shipment tracking, insurance and returns.

Technology and analytics providers
Such as Google, Meta, TikTok or similar providers, only where applicable, where enabled and subject to your cookie preferences.

Public authorities
Where required by law, including tax, regulatory, consumer protection or supervisory authorities.

5. INTERNATIONAL DATA TRANSFERS

As our store is powered by Shopify, your personal data may be transferred to and stored outside the European Economic Area, including countries such as Canada or the United States.

Where such transfers occur, appropriate safeguards are applied, including mechanisms such as the European Commission’s Standard Contractual Clauses or other legally recognised transfer safeguards.

6. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this policy.

Accounting and invoice data
Stored for the legally required period under applicable Bulgarian law.

Customer account data
Stored while your account remains active or until you request deletion, unless further retention is required by law.

Marketing data
Stored until you withdraw your consent or unsubscribe.

Order and support communication
Stored as necessary for customer service, legal protection, fraud prevention and business records.

7. YOUR RIGHTS

Under GDPR, you have the right to:

access your personal data;
request correction of inaccurate data;
request deletion of your data;
request restriction of processing;
object to certain types of processing;
request data portability;
withdraw your consent for marketing communications at any time;
lodge a complaint with a competent supervisory authority.

To exercise your rights, contact us at:

contact@101carat.com

8. COOKIES

Our website uses cookies and similar technologies to provide essential store functionality, improve user experience, analyse traffic and support relevant advertising.

Essential cookies
Required for cart functionality, checkout, customer account access, security and payment processing.

Analytics cookies
Used to understand how visitors interact with our website and improve our services.

Marketing cookies
Used for personalised advertising and campaign measurement through platforms such as Google, Meta and TikTok.

Analytics and marketing cookies are used only where required consent has been given through the cookie consent mechanism available on the website.

You can change your cookie preferences at any time through the website’s cookie settings or through your browser settings.

9. DATA SECURITY

We apply appropriate technical and organisational measures to protect your personal data.

Our website uses SSL encryption, and payments are processed through the secure environment of Shopify Payments and its payment partners.

10. CONTACT AND COMPLAINTS

For questions about this Privacy Policy or the processing of your personal data, contact us at: