Privacy Policy

Last updated: September 2026

This Privacy Policy explains how personal data relating to visitors of the DIORA Jewels website may be collected, used, stored and protected.

The data controller for personal data processed through this website is:

Ivelina Diomova, Bulgaria

For questions regarding privacy or personal data, please contact:

contact@diora-jewels.com

1. Personal Data We May Collect

When you browse the website, submit an enquiry through the contact form, or contact us by email, the following information may be processed:

● your name;
 ● your email address;
 ● information you voluntarily provide in your message;
 ● technical information necessary for the proper functioning and security of the website;
 ● information concerning website usage and traffic through Squarespace Analytics, where the relevant analytics technologies are permitted according to your cookie choices.

We do not intentionally collect more personal data than is necessary for the relevant purpose.

2. Contact Form

The website includes a contact form through which you may voluntarily submit an enquiry to DIORA Jewels.

Your name, email address and the contents of your message may be used to:

● receive and review your enquiry;
 ● respond to your enquiry;
 ● conduct follow-up communication relating to that enquiry.

Submitting a contact form does not subscribe you to a newsletter, advertising or other marketing communications.

3. How Your Personal Data May Be Used

Personal data may be used to:

● respond to your enquiries;
 ● communicate with you regarding artworks, exhibitions, events or other DIORA Jewels activities where such communication relates to your enquiry;
 ● ensure the proper and secure operation of the website;
 ● obtain statistical information about website usage and traffic through Squarespace Analytics;
 ● comply with applicable legal obligations;
 ● protect legal rights and interests where necessary.

Information submitted through the contact form is not used to send unsolicited marketing communications.

4. Squarespace Analytics

The website uses Squarespace Analytics, provided by Squarespace, to obtain statistical information about website traffic and usage.

Squarespace may use analytics and performance cookies for this purpose. Where prior consent is required, such cookies are activated only after the visitor has made the relevant choice through the website’s cookie settings.

The website currently does not use:

● Google Analytics;
 ● Meta/Facebook Pixel;
 ● Google Ads tracking;
 ● additional advertising or marketing tracking pixels.

5. Legal Basis for Processing

Depending on the circumstances, personal data may be processed on the basis of:

● taking steps in connection with an enquiry submitted by you;
 ● your consent, where required;
 ● a legitimate interest in maintaining a secure and functional website and protecting legal interests;
 ● compliance with an applicable legal obligation.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.

6. Service Providers and Sharing of Personal Data

Your personal data is not sold or provided to third parties for their own marketing purposes.

Technical service providers may be used for the operation of the website, including Squarespace, which provides the website platform, hosting and certain analytics functionality.

Such providers may process information only to the extent necessary to provide the relevant services and in accordance with applicable data protection requirements.

7. International Data Processing

Certain technical service providers may process or store data outside the European Economic Area.

Where an international transfer of personal data takes place, appropriate legal mechanisms and safeguards required under applicable data protection legislation are applied.

8. External Links and Social Media

The website may contain links to DIORA Jewels profiles on social media platforms, including Instagram.

These links lead to external platforms. When you follow such a link, you leave the DIORA Jewels website and any processing of information by the relevant platform is governed by that platform’s own terms and privacy policy.

9. Data Retention

Personal data submitted through the contact form is retained for up to 12 months after the relevant communication has ended.

Information may be retained for a longer period where necessary:

● to comply with a legal obligation;
 ● to establish, exercise or defend legal claims or interests;
 ● in connection with an established contractual relationship.

When there is no longer a legitimate need to retain the information, it will be deleted or processed in a manner that no longer permits identification of the individual, where applicable.

10. Your Rights

Under applicable data protection legislation and where the relevant conditions apply, you may have the right to:

● access your personal data;
 ● request correction of inaccurate or incomplete information;
 ● request deletion of your personal data;
 ● request restriction of processing;
 ● request data portability;
 ● object to certain processing;
 ● withdraw your consent.

To exercise these rights, please contact:

contact@diora-jewels.com

11. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with:

Commission for Personal Data Protection (CPDP)
 2 Prof. Tsvetan Lazarov Blvd.
 Sofia 1592
 Bulgaria

12. Security

Reasonable technical and organisational measures are taken to protect personal data against unauthorised access, loss, misuse, alteration or unlawful disclosure.

13. Changes to This Policy

This Privacy Policy may be updated from time to time, including when the website’s functionality, technologies or services change.

The current version will always be published on this page.