Privacy Policy

Privacy Policy
This Privacy Policy explains how personal data is collected and processed on notonlyrocks.com.
Data ControllerNotOnlyRocks
Sofia, Bulgaria (European Union)
Contact: mail@notonlyrocks.com
1. What personal data we collectWhen you place an order or contact us through the website, we may collect:
• Full name
• E-mail address
• Phone number (if provided)
• Shipping address (country, postal code, city, street address)
• Order details
We do not collect sensitive personal data.
2. Legal basis for processingYour personal data is processed based on:
• Your consent (when submitting a contact or order form)
• The necessity to perform a contract (processing and shipping your order)
3. How your data is usedYour data is used solely for:
• Processing and fulfilling your order
• Communication regarding your purchase
• Shipping and delivery
• Responding to inquiries
We do not use your data for marketing purposes without your explicit consent.
4. Data sharingPersonal data may be shared only with:
• Payment providers (e.g. PayPal, Stripe)
• Postal and courier services for delivery
No other third parties receive your data.
5. Data retentionPersonal data is stored only for as long as necessary to fulfil the purpose of processing and to comply with legal obligations.
6. Your rightsUnder the General Data Protection Regulation (EU) 2016/679 (GDPR), you have the right to:
• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP).

To exercise your rights, please contact:
mail@notonlyrocks.com
© NotOnlyRocks
Made on
Tilda