Introduction

This Privacy Policy explains how Pure Chocolate (“we”, “our”, “us”) collects, uses, and protects your personal data when you visit or make a purchase on purechocolate.ro. We are committed to ensuring your privacy and complying with the General Data Protection Regulation (GDPR).

Data Controller

SAFE SWEETS SRL

Str. Strâmbǎ, nr. 10, Sângeorgiu de Mureș, 547530, România

Email: office@purechocolate.ro

Data Processors (Shopify)

Our website is hosted on Shopify. Shopify processes personal data on our behalf to provide website hosting, checkout, order processing, payment processing, analytics, and store functionality.

Shopify may store data on servers located in the EU, US, and Canada.

For more information, see Shopify’s privacy policy.

Personal Data We Collect

We may collect the following categories of personal data:

1. Information You Provide

• Name

• Billing and shipping address

• Email address

• Phone number

• Payment details (processed securely by third-party payment providers; we do not store full card numbers)

2. Automatically Collected Information

• IP address

• Browser type and device information

• Pages visited and time spent on the site

• Cookies and tracking data (see Cookies section)

3. Order & Account Information

• Purchase history

• Account login information (if applicable)

Use of Personal Data

We use your data to:

• Process and deliver your orders

• Provide customer support

• Send order updates and transactional emails

• Improve website functionality and user experience

• Comply with legal obligations

We do not sell or rent your personal data.

Legal Basis for Processing

• Contract performance (order processing)

• Legal obligations (tax, accounting)

• Legitimate interest (website security, fraud prevention)

• Consent (newsletter, non-essential cookies)

Data Sharing

We may share data with:

• Payment processors

• Shipping carriers

• IT and hosting services

• Analytics providers (with anonymization when possible)

All partners comply with GDPR requirements.

Cookies

We use cookies to enhance your browsing experience. Essential cookies are required for site functionality. You may manage cookie preferences through your browser settings.

Data Retention

We retain your personal data only as long as necessary for legal or business purposes:

• Order and invoice data: 10 years (required by Romanian tax law)

• Customer account data: until you request deletion

• Analytics data: retained according to the provider’s policy

Your Rights (GDPR)

You have the right to:

• Access your data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict or object to processing

• Data portability

• Withdraw consent

• File a complaint with ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal)

To exercise any rights, contact us at office@purechocolate.ro.

Security

We use encryption, secure hosting, and access controls to safeguard your data.

Changes to This Policy

We may update this Privacy Policy at any time. Changes take effect once posted on purechocolate.ro.