Privacy Policy

This Privacy Policy explains how personal data is collected and processed on notonlyrocks.com.

Data controller

NotOnlyRocks, Sofia, Bulgaria (European Union). Contact: mail@notonlyrocks.com

1. Personal data we collect

• Full name
• Email address
• Phone number, if provided
• Shipping address, including country, postal code, city and street
• Order and request details

We do not intentionally collect sensitive personal data.

2. Legal basis

We process data with your consent when you use a contact or request form, and when it is necessary to respond to an enquiry or perform an agreed service.

3. How we use data

We use personal data to respond to enquiries, confirm availability, arrange shipping and fulfil requests. We do not send marketing communications without explicit consent.

4. Data sharing

Where necessary, relevant details may be shared with payment providers and postal or courier services to complete a request. We do not sell personal data or share it with unrelated third parties.

5. Data retention

We keep information for as long as it is needed to handle the request and meet applicable legal obligations.

6. Your rights

You may request access to, correction or deletion of your personal data, or ask us to restrict processing. You may also complain to the competent data protection authority in Bulgaria.

For privacy questions, contact mail@notonlyrocks.com.