Privacy policy

Data controller: My Ecobiz S.R.L., fiscal code (C/F) 1021605000467, production workshop: 9 Valea Bîcului St., Chișinău, Moldova. Contact: office@mysparklestone.com. This policy describes what data we process on mysparklestone.com and why.

What we collect and why

Orders: name, shipping address, phone, email — strictly to process and deliver your order and to meet legal accounting obligations.
Customer account (optional): your email and the password you choose — for order history and delivery tracking.
Contact form: name, email, phone and your message — only so we can reply.

We never sell or rent your data. Card, Apple Pay and Google Pay payments are processed directly by Stripe — your card details never touch our servers.

Legal basis for processing

Performance of a contract (Art. 6(1)(b) GDPR): order data, delivery, your customer account.
Legal obligation (Art. 6(1)(c)): keeping accounting and tax records.
Legitimate interest (Art. 6(1)(f)): replying to messages sent through the form, site security, fraud prevention.
Consent (Art. 6(1)(a)): audience statistics, if you enable them in the cookie bar; you can withdraw it at any time via “Cookie preferences” in the footer.

Who we share data with

Stripe, Inc. (USA) — card payment processing. Card details never reach our servers.
Google Ireland Ltd. — the company’s Google Workspace mailbox (office@myecobiz.md), where form messages and order confirmations arrive.
Cloudflare, Inc. (USA) — email forwarding: messages sent to this site’s office@ address pass through Cloudflare Email Routing to the mailbox above.
Google LLC (USA) — the Google Maps map on our contact page: when you open that page, your browser sends Google your IP address, browser data and the page address (legitimate interest: showing you where our workshop is).
The courier chosen for delivery — name, address and phone, strictly to hand you the parcel.
Site hosting — our own server, administered by us.

Transfers outside the European Union

The controller, My Ecobiz S.R.L., is established in the Republic of Moldova, a country without a European Commission adequacy decision. The data you send us reaches us because it is necessary to perform your order or to answer your message (Art. 49(1)(b) GDPR); we also process it under Moldovan Law No. 195/2024. The other recipients listed above (including Stripe, Inc. and Google LLC, in the USA) process data inside the European Economic Area or under standard contractual clauses.

Cookies

We only use cookies that are strictly necessary for the shop to work: WooCommerce session and cart cookies (e.g. woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session) while your choice in the info bar is kept for 180 days in the local storage of your browser (localStorage, key ss-consent), not in a cookie; after that the bar appears again. These do not require consent. One exception: the Google Maps map on our contact page is served directly by Google, which may set its own cookies when you open that page (see “Who we share data with”). If we ever enable analytics cookies (Google Analytics), they will load only after your explicit consent, and declining blocks them entirely.

How long we keep data

Order data — for as long as tax law requires. Customer accounts — until you ask us to delete yours. Contact messages — up to 2 years.

Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data. Write to office@mysparklestone.com and we will reply within 30 days. You may also lodge a complaint with your local data protection authority.