Privacy policy

Data controller: My Ecobiz S.R.L., fiscal code (C/F) 1021605000467, production workshop: 9 Valea Bîcului St., Chișinău, Moldova. Contact: office@mysparklestone.com. This policy describes what data we process on mysparklestone.com and why.

What we collect and why

Orders: name, shipping address, phone, email — strictly to process and deliver your order and to meet legal accounting obligations.
Customer account (optional): your email and the password you choose — for order history and delivery tracking.
Contact form: name, email, phone and your message — only so we can reply.

We never sell or rent your data. Card payments (when active) are processed directly by Stripe/PayPal — your card details never touch our servers.

Legal basis for processing

Performance of a contract (Art. 6(1)(b) GDPR): order data, delivery, your customer account.
Legal obligation (Art. 6(1)(c)): keeping accounting and tax records.
Legitimate interest (Art. 6(1)(f)): replying to messages sent through the form, site security, fraud prevention.
Consent (Art. 6(1)(a)): audience statistics, if you enable them in the cookie bar; you can withdraw it at any time via “Cookie preferences” in the footer.

Who we share data with

Stripe Payments Europe Ltd. (Ireland) — card payment processing. Card details never reach our servers.
Google Ireland Ltd. — the office@sparklestone.ro mailbox (Google Workspace), where form messages and order confirmations arrive.
The courier chosen for delivery — name, address and phone, strictly to hand you the parcel.
Site hosting — our own server, administered by us.

Transfers outside the European Union

The controller, My Ecobiz S.R.L., is established in the Republic of Moldova, which holds a European Commission adequacy decision of 15 January 2024. Your data therefore enjoys protection equivalent to the EU, with no further safeguards required. The other recipients listed above process data inside the European Economic Area or under standard contractual clauses.

Cookies

We only use cookies that are strictly necessary for the shop to work: WooCommerce session and cart cookies (e.g. woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session) while your cookie choice is kept in the local storage of your browser (localStorage, key ss-consent), not in a cookie (180 days), which remembers that you dismissed the info bar. These do not require consent. If we ever enable analytics cookies (Google Analytics), they will load only after your explicit consent, and declining blocks them entirely.

How long we keep data

Order data — for as long as tax law requires. Customer accounts — until you ask us to delete yours. Contact messages — up to 2 years.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. Write to office@mysparklestone.com and we will reply within 30 days. You may also lodge a complaint with your local data protection authority.