Privacy Policy

This privacy policy explains how Roza Aroma Ltd., located at 17 Bulevard Maritsa-Yug, 4002 Plovdiv, Plovdiv Province, Bulgaria, collects, uses, and protects your personal information when you use our site or online services. We are committed to protecting your privacy and handling your data in an open and transparent manner, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Information We Collect

We may collect personal information that you voluntarily provide to us when you interact with our site or services. This includes information you provide when you make a purchase, register for an account, subscribe to our newsletter, contact us with inquiries, or use certain features of our online platform. The types of personal information we may collect include your name, postal address, payment information, and any other information you choose to provide.

We may also automatically collect certain information about your device and usage patterns when you visit our site. This information may include your IP address, browser type, operating system, referral URLs, and information about how you interact with our online platform. This data is typically collected through cookies and similar tracking technologies.

How We Use Your Information

We use the information we collect for various purposes, including:

• To provide, operate, and maintain our services;
• To process and fulfill your orders and manage your account;
• To communicate with you, respond to your inquiries, and provide customer support;
• To send you promotional communications, such as newsletters and marketing materials, where you have consented;
• To personalize your experience on our site;
• To understand and analyze how you use our services and improve our online platform;
• To detect, prevent, and address technical issues and fraudulent activity;
• To comply with legal obligations and enforce our terms and conditions.

Legal Basis for Processing

We will only process your personal data when we have a lawful basis to do so. This may include:

• Your consent: Where you have given clear consent for us to process your personal data for a specific purpose.
• Performance of a contract: Where processing is necessary for the performance of a contract to which you are a party, such as processing your order.
• Legal obligation: Where processing is necessary to comply with a legal obligation that applies to us.
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms.

Sharing Your Information

We may share your personal information with third-party service providers who perform services on our behalf, such as payment processing, shipping, data analysis, email delivery, and marketing services. These service providers are authorized to use your personal information only as necessary to provide these services to us.

We may also disclose your information if required to do so by law or in response to valid requests by public authorities, or if necessary to protect our rights, property, or safety, or the rights, property, or safety of others.

In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction.

Data Retention

We will retain your personal information only for as long as is necessary for the purposes set out in this privacy policy and in accordance with our legal and regulatory obligations. When we no longer need your personal data, we will securely delete or anonymize it.

Your Data Protection Rights

Under applicable data protection laws, you have certain rights regarding your personal data. These rights may include:

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate or incomplete personal data.
• The right to request erasure of your personal data in certain circumstances.
• The right to request restriction of processing your personal data in certain circumstances.
• The right to object to the processing of your personal data in certain circumstances.
• The right to data portability, allowing you to obtain and reuse your personal data for your own purposes across different services.
• The right to withdraw your consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us using the address provided in the contact section below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, disclosure, alteration, or destruction. However, please be aware that no method of transmission over the internet or electronic storage is completely secure.

Cookies

Our site uses cookies and similar tracking technologies to collect information about your browsing activities and distinguish you from other users. This helps us provide you with a good experience when you use our site and allows us to improve our online platform.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verifiable parental consent, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page. We encourage you to review this privacy policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at the following physical address: