Privacy policy

Who this policy covers

This policy explains how ANTE ("we", "us") processes personal data when you visit anteheritage.com (the "Site") and when you communicate with us through the contact or product enquiry forms. It is intended to assist users in the European Economic Area and the United Kingdom; rights may vary by jurisdiction.

Data controller

The data controller is ANTE, based in Sofia, Bulgaria. For privacy-related requests you may contact us at [email protected] or +359882302740.

Personal data we collect

When you send a message via the Site we collect the information you provide, typically your name (if supplied), email address and message content. When you use the Site, our servers and security tools may automatically process technical data such as IP address, approximate location derived from the IP, browser type, device identifiers, date and time of access and referring URL, in order to deliver the pages and protect against abuse. We do not use the Site to collect sensitive categories of data (such as health data) and we ask that you do not submit such information through our forms.

Purposes and legal bases

We use your data to: (1) read and respond to your enquiries, and take steps you request before a possible contract — based on our legitimate interests in operating a jewellery business and communicating with clients, and where relevant on pre-contractual measures; (2) maintain the security, integrity and availability of the Site, including rate limiting and fraud prevention — based on our legitimate interests and, where applicable, legal obligations; (3) comply with accounting, tax and legal obligations — where the law requires us to retain or disclose information. Where we rely on legitimate interests, you may object in accordance with applicable law and we will consider your request.

Recipients and international transfers

We use carefully selected service providers (“processors”) to host the Site and to send transactional email (for example via Resend). They may only process personal data on our instructions and under contractual terms compliant with GDPR. Some providers may be established outside the European Economic Area; where data is transferred internationally we rely on appropriate safeguards such as the European Commission’s standard contractual clauses or an adequacy decision, as required by law.

How long we keep data

Enquiry and contact messages are retained for as long as needed to handle your request and then for a limited further period to resolve follow-up questions, protect legal positions and meet statutory limitation or record-keeping requirements. Short-term technical and security logs are kept only as long as necessary for those purposes and in line with our technical configuration.

Cookies and local storage

The Site uses only cookies and similar technologies that are strictly necessary to provide the service (for example to apply security controls or remember essential preferences). We may store your language preference locally in your browser (local storage) so the Site can display content in the language you selected. You can clear storage through your browser settings; doing so may reset preferences.

Your rights and complaints

Depending on applicable law, you may have the right to access, rectify or erase your personal data, restrict or object to certain processing, and to data portability where processing is based on consent or contract and carried out by automated means. You may also withdraw consent where processing was based on consent. To exercise these rights, email [email protected]. You may lodge a complaint with a supervisory authority; in Bulgaria this is the Commission for Personal Data Protection (КЗЛД).

Updates

We may update this policy from time to time to reflect changes in our practices or legal requirements. We encourage you to review this page periodically. Continued use of the Site after we publish changes constitutes your acceptance of the revised policy where permitted by law.