Privacy and Personal Data Protection Policy

This Privacy and Personal Data Protection Policy governs the manner in which SHELLS FROM BLACK SEA LLC collects, uses, stores, and protects personal data provided through the website shellsfromtheblacksea.com, hereinafter referred to as „the Site.“.

We respect the right to privacy of visitors to the Site and process personal data in good faith, in accordance with the law, transparently, and only for specific purposes.

This policy applies to personal data provided via the contact form, email, telephone, or any other communication channel listed on the Site.

I. Information About the Data Controller

The data controller is:

For any questions regarding the processing of personal data, please contact us at the email address or phone number provided.

II. What Personal Data Do We Collect?

Depending on how you use the Site or contact us, we may process the following categories of personal data:

• First and Last Name — when you provide them via a contact form, email, or another channel.
• Company Name — when you submit a business or partnership inquiry.
• Government and the Market — when the information is necessary to process a B2B inquiry.
• Email address — for feedback and marketing communications.
• Phone number — when you provide it as a contact.
• Information About a Product of Interest — for example, Rapana venosa, clams, marinated fish, or other seafood.
• Estimated Quantity and Business Requirements — when you voluntarily provide them in a message.
• Contents of the Notice — the information you provide yourself via the form or by email.
• Technical Specifications — IP address, device type, browser, operating system, date and time of visit, pages visited, when such data is collected through standard server logs or analytics tools.

We do not require or wish to receive sensitive personal data, such as data regarding health, ethnic origin, religious beliefs, political views, biometric data, or other special categories of personal data.

Please do not send sensitive or unnecessary personal information through the Site.

III. How We Collect Personal Data

Personal data may be collected in the following ways:

• When you fill out a contact form on the Site.
• When you send us an email.
• When you contact us by phone.
• When you submit a sales or partnership inquiry.
• Through technical logs on the website and the hosting environment.
• Through cookies or analytics tools, if such tools are enabled on the Site.

The information you provide via the contact form or email is provided voluntarily by you.

IV. Purposes of Processing

We process personal data for the following purposes:

• Response to inquiries submitted through the Site.
• Conducting business communications.
• Discussion of opportunities for B2B partnerships.
• Specifying product parameters, quantities, requirements, documents, and conditions.
• Preparing a personalized message or sales proposal, as applicable.
• Maintaining the normal operation and security of the Site.
• Preventing abuse, spam, technical attacks, and unauthorized access.
• Compliance with legal obligations, where applicable.
• To protect the Company’s legitimate interests in the event of a dispute, an audit, or a need to provide evidence of communication.

V. Legal Bases for Processing

The processing of personal data is carried out on one or more of the following legal grounds:

• Consent — when you voluntarily provide your data through a contact form or another channel.
• Pre-contractual Relations — when you send an inquiry to discuss a potential business partnership.
• Legitimate interest — to communicate with business partners, protect the Site, prevent abuse, and retain evidence of correspondence.
• Legal obligation — when processing is necessary to comply with applicable legal requirements.

When processing is based on consent, you have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing prior to the withdrawal.

VI. Storage Periods

We retain personal data only for the period necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.

Estimated timeframes:

• Data from the contact form — up to 24 months after the last communication, unless a contractual relationship arises or there is a legal requirement for longer retention.
• Email correspondence — up to 24 months after the last communication, unless it is necessary to establish a relationship, protect rights, or for accounting or legal purposes.
• Data related to actual commercial cooperation — in accordance with the applicable legal, accounting, and contractual deadlines.
• Technical Logs — for a period determined by the hosting provider or the security settings, typically for a limited time necessary for technical maintenance and security.
• Data Processed Based on Consent — until consent is withdrawn or the purpose of the processing no longer applies.

After the applicable period has expired, the data is deleted, anonymized, or archived, when necessary and permitted by law.

VII. To Whom We May Disclose Personal Data

We do not sell personal data to third parties.

Personal data may be disclosed only when necessary and lawful, including to:

• The Site's hosting provider.
• Technical support providers.
• Email service providers.
• Providers of the contact form or software tools used on the Site.
• Accountants, attorneys, consultants, or other professionals, as needed.
• Competent government authorities, when required by law.
• Logistics, business, or other partners, only when necessary to address a specific business inquiry and where there is an appropriate basis for doing so.

When we use third-party service providers, we strive to work with those that implement appropriate technical and organizational measures to protect personal data.

VIII. International Data Transfer

It is possible that some of the technical services we use, such as hosting, email, analytics tools, or communication platforms, may process data outside the European Economic Area.

When personal data is transferred outside the European Economic Area, such transfers must be based on an appropriate legal basis and supported by appropriate safeguards in accordance with applicable law.

If the use of tools such as Google Analytics, Meta Pixel, advertising platforms, or other third-party services is enabled, this policy should be updated to include specific information about these tools.

IX. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Cookies are small files that are stored on a visitor’s device and can be used to ensure the website functions properly, improve the user experience, analyze website traffic, or for marketing purposes.

Possible types of cookies:

• Essential cookies — necessary for the normal operation of the Site.
• Functional cookies — help you remember settings or preferences.
• Analytics Cookies — are used to analyze website traffic, if such a tool is enabled.
• Marketing Cookies — are used for advertising purposes if such tools are enabled.

If the Website uses only strictly necessary technical cookies, it is not mandatory to request explicit consent for them. If analytical or marketing cookies are used, the visitor should be given the option to choose and manage their consent.

Detailed information may be provided in a separate Cookie Policy or in a consent management banner, if such technologies are used.

X. Rights of Data Subjects

You have the following rights regarding your personal data:

• Right to Information — to obtain information about whether and how we process your personal data.
• Right of Access — to request a copy of the personal data we process about you.
• Right to Correction — to request the correction of inaccurate or incomplete personal data.
• Right to Erasure — to request the deletion of your personal data when there is a valid reason to do so.
• Right to Restrict Processing — to request a temporary restriction on processing under certain conditions.
• Right to Object — to object to processing based on a legitimate interest.
• Right to Data Portability — where applicable, to receive your data in a structured, widely used, and machine-readable format.
• Right to Withdraw Consent — when the processing is based on consent.
• Right to Appeal — to file a complaint with the competent supervisory authority.

To exercise your rights, you can contact us at:

Upon receiving a request, we may ask for additional information to verify the applicant’s identity when necessary to protect personal data.

XI. Right to File a Complaint with a Supervisory Authority

If you believe that your personal data is being processed unlawfully or that your rights have been violated, you have the right to file a complaint with the competent supervisory authority.

In the Republic of Bulgaria, the supervisory authority is:

We recommend that you contact us first before filing a complaint so that we can try to review and resolve the issue.

XII. Protection of Personal Data

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, or destruction.

Such measures may include:

• Use of a secure hosting environment.
• Restricted access to the admin panels.
• Password Use and Access Control.
• Maintenance and updating of the systems, as applicable.
• Restricting access to personal data to only those who need it.
• Measures against spam, malicious requests, and technical attacks.

Despite the measures taken, no method of transmitting or storing information on the Internet can be guaranteed to be completely secure.

XIII. Children's Data

This website is not intended for children and does not aim to collect personal data from individuals under the age of 18.

If we determine that we have received personal data from a child without a valid basis, we will take steps to delete it.

XIV. Automated Decision-Making

We do not use the personal data provided through the Site for automated decision-making that produces legal effects concerning the visitor or similarly significantly affects the visitor.

XV. Links to Other Websites

This website may contain links to external websites or third-party platforms.

We are not responsible for how third parties process personal data. When visiting external websites, you should review their privacy policies.

XVI. Changes to This Policy

We may periodically update this Privacy Policy when necessary due to changes to the Site, the technologies used, applicable laws, or the manner in which personal data is processed.

The current version of the policy is published on this page.

The changes take effect upon publication, unless otherwise specified.

XVII. Contact

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact us at:

Last updated: June 17, 2026.