Privacy Policy — beadpalette.ai

1. Data Controller

beadpalette.ai is operated by a sole proprietor.

• Data Controller: Nadezhda Doncheva
• Country of establishment: Bulgaria
• Contact email: privacy@beadpalette.ai
• Contact address: Bulgaria

2. Personal Information We Collect

A. Information you provide directly

• Email address
• First and last name (if provided)
• Country
• Messages submitted via the contact page

B. Payments

Payments are processed by Stripe. We do not store full payment card details. Stripe processes payment data in accordance with its own privacy policy.

C. Usage data (analytics)

We use Google Analytics to understand how users interact with the Service. This may include:

• IP address (processed in a limited or truncated form)
• Browser and device information
• Pages visited, session duration, and interaction data

D. Cookies

We use cookies and similar technologies for analytics and basic functionality. See Section 8.

3. How We Use Personal Data

We use personal data to:

• Operate and maintain the Service
• Communicate with users and respond to inquiries
• Process payments and manage purchases
• Improve and optimize the Service
• Send emails only if you opt in
• Comply with legal obligations
• Prevent fraud and ensure security

4. Legal Bases for Processing (GDPR)

For users in the EEA and UK, we process personal data under:

• Consent
• Contractual necessity
• Legitimate interests
• Legal obligation

Consent may be withdrawn at any time.

5. Sharing of Personal Data

We do not sell personal data. We may share data only with:

• Stripe — payment processing
• Google Analytics — usage analytics
• Email service providers (e.g. Mailchimp, if introduced in the future) — only for users who opt in
• Trusted service providers under confidentiality obligations

We may also disclose data if required by law or to protect rights and security.

6. Your Rights and Choices

A. Email communications

You may unsubscribe at any time using the link in the email. Transactional or service-related emails may still be sent when necessary.

B. GDPR rights (EEA/UK)

You have the right to access, correct, delete, restrict, object, request portability, withdraw consent, and lodge a complaint with a supervisory authority.

C. California Privacy Rights (CCPA / CPRA)

California residents have the right to know, access, delete, and correct personal information, and to not be discriminated against. beadpalette.ai does not sell or share personal information for cross-context behavioral advertising. Requests can be sent via email with the subject "California Privacy Request".

7. Data Retention

We retain personal data only as long as necessary:

• User/contact data: up to 12 months after last interaction
• Contact messages: up to 12 months
• Email subscription data (if applicable): until unsubscribe + 12 months
• Transaction records: as required by law

8. Cookies, Analytics, and Do Not Track (CalOPPA)

Cookies are used for analytics and basic functionality. The Service does not currently display a cookie consent banner. Google Analytics tracking can be limited via browser or Google tools. Do Not Track: We do not guarantee a response to DNT signals due to lack of a universal standard.

9. International Data Transfers

Personal data may be processed outside your country. Appropriate safeguards are applied where required.

10. Data Security

We use reasonable technical and organizational measures to protect personal data. No system is 100% secure.

11. Children's Privacy

The Service is intended for users 16 years of age or older. We do not knowingly collect personal data from children under 16.

12. Third-Party Links

We are not responsible for the privacy practices of third-party websites.

13. Changes to This Policy

Updates will be posted on this page with a revised effective date.

14. Contact

Email: privacy@beadpalette.ai