Privacy Policy
Effective: October 2026 | Last reviewed: October 2026
1. Data Controller
This Privacy Policy sets out how personal data collected through basicpatternblock.com is processed. The data controller is ELENA SAMARA LTD, 2 Bulgaria Str., 2850 Petrich, Bulgaria (UIC:207557662 , VAT: BG207557662).
No Data Protection Officer has been appointed, no such appointment being required. Enquiries relating to this policy should be directed to basicpatternblock@gmail.com.
2. Scope
This Policy applies to all visitors and customers. Section 8 sets out the rights of individuals in the European Economic Area, Switzerland and the United Kingdom. Section 9 describes additional rights that may be available to residents of certain United States jurisdictions, including California, where applicable.
3. Personal Data Collected
| Category | Data | Source |
|---|---|---|
| Identity and contact | Name, email address, billing address, telephone number | Supplied at checkout, account registration, contact form or newsletter subscription |
| Order and payment | Products purchased, order value, currency, date, transaction reference, payment method type | Generated upon purchase. Full card details are processed by our payment providers and are not retained by us |
| Account | Username, password hash, order and download history | Supplied upon account registration |
| Technical | IP address, browser type, device type, operating system, cookie identifiers and similar online identifiers | Collected automatically upon access |
| Usage | Pages viewed, referring website, campaign source, interactions with the website | Collected automatically, subject to applicable consent or opt-out requirements |
| Communications | Correspondence submitted by email, contact form or live chat | Supplied by the individual |
Special category data is not collected and should not be submitted to us.
4. Purposes and Legal Bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Processing orders and delivering products | Performance of a contract | For the period required by applicable accounting and tax law, generally up to 10 years. |
| Payment processing and fraud prevention | Contract; legal obligation in respect of tax records | For the period required by applicable accounting and tax law, generally up to 10 years. |
| Customer support relating to a purchase | Performance of a contract | For as long as reasonably necessary to provide support and handle potential legal claims. |
| Account registration and management | Performance of a contract | Until the account is closed |
| Responding to enquiries | Legitimate interests or steps taken at the individual’s request before entering into a contract. | Until resolution, plus 3 months |
| Newsletters and marketing communications | Consent | Until consent is withdrawn or the individual unsubscribes. Limited information may subsequently be retained on a suppression list to ensure that no further marketing is sent. |
| Website statistics and performance measurement | Consent | 14 months |
| Advertising, remarketing and campaign measurement | Consent | 6 months |
| Security, fraud prevention and spam filtering | Legitimate interests | Up to 12 months |
Where processing is based on consent, that consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
5. Cookies
Cookies, pixels and similar technologies are used on the website. Certain of these are necessary for the operation of the website and checkout; others are used only with consent. Full details are set out in our Cookie Policy at https://basicpatternblock.com/cookie-policy/.
6. Disclosure of Personal Data
Personal data is not sold for monetary consideration. Data is disclosed only as necessary, to the recipients set out below.
Service Providers and Other Recipients
| Recipient | Function | Location |
|---|---|---|
| Stripe | Payment processing | EU / United States |
| PayPal | Payment processing | EU / United States |
| Hostinger | Website and database hosting | European Union |
| MailPoet (Automattic) | Newsletter and email delivery | United States |
| Tawk.to | Live chat support | United States |
| Defiant (Wordfence) | Website security | United States |
| Google (reCAPTCHA) | Spam and bot prevention | United States |
Advertising and Analytics Providers
Disclosure to the following recipients is subject to applicable consent or opt-out requirements. These providers may also process certain data for their own purposes in accordance with their respective privacy policies.
| Recipient | Purpose | Location |
|---|---|---|
| Meta Platforms | Advertising, remarketing and campaign measurement | United States |
| Google (Analytics, Tag Manager) | Website statistics and tag management | United States |
Disclosure may additionally be made to our professional advisers, to public authorities where legally required, and to a purchaser or successor in the event of the sale or reorganisation of the business.
7. International Transfers
Certain service providers and other recipients may process personal data outside the European Economic Area, Switzerland or the United Kingdom, including in the United States. Where required by applicable law, such transfers are protected by a recognised adequacy decision or by appropriate safeguards, such as approved Standard Contractual Clauses or other legally recognised transfer mechanisms. Further information about the safeguards applicable to a particular transfer is available upon request.
8. Rights of Data Subjects — EEA, Switzerland and United Kingdom
Data subjects hold the right of access; the right to rectification of inaccurate data; the right to erasure; the right to restriction of processing; the right to data portability; the right to object to processing based on legitimate interests and to direct marketing; and the right to withdraw consent.
Decisions producing legal or similarly significant effects are not taken by automated means.
Requests should be submitted to basicpatternblock@gmail.com. We will respond without undue delay and normally within one month. Where permitted by applicable law, this period may be extended by up to two additional months due to the complexity or number of requests. Verification of identity may be required before a request is fulfilled. Requests are normally handled free of charge; however, where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act, as permitted by applicable law.
Data subjects have the right to lodge a complaint with a competent supervisory authority. In Bulgaria, the supervisory authority is the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, email: kzld@cpdp.bg, website: https://cpdp.bg. A complaint may also be lodged with the competent authority in the data subject’s country of residence
9. Rights of Residents of the United States
The following provisions apply only to the extent that the relevant United States state privacy law applies to our business and to the individual concerned.
In the preceding twelve months the categories of personal information set out in Section 3 have been collected, and identifiers and internet activity information have been shared with advertising partners for the purposes of targeted advertising. Under California law such sharing may constitute a “sale” or “sharing” notwithstanding the absence of monetary consideration.
Sensitive personal information is not sold or shared. No financial incentive is offered in exchange for personal information. The personal information of individuals under 16 is not knowingly sold or shared.
Depending on the individual’s jurisdiction and subject to applicable law, residents may have the right to know what personal information is collected, used and disclosed; request access, deletion or correction; obtain a portable copy of certain information; opt out of the sale or sharing of personal information and targeted advertising; appeal a refused request; and exercise their privacy rights without unlawful discrimination. Where permitted by applicable law, a request may be submitted through an authorised agent, subject to appropriate verification.
Opt-out may be exercised by means of the cookie preferences control on the website or by contacting basicpatternblock@gmail.com. The Global Privacy Control signal is recognised and treated as a valid opt-out request.
10. Security
We apply appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include encrypted transmission, website security and malware protection, hashed password storage, restricted administrative access, access controls, backups and regular software updates, where appropriate.
No method of transmission or storage can be guaranteed to be completely secure. If a personal data breach occurs, we will assess the risks and notify the competent supervisory authority and affected individuals where and within the time limits required by applicable law.
11. Children
The website is not directed at children, and we do not knowingly collect personal data directly from children. If you believe that a child has provided personal data to us, please contact us at basicpatternblock@gmail.com. We will investigate and take appropriate steps to delete or restrict the data, unless its retention is required by applicable law.
12. Third-Party Websites
This policy applies to basicpatternblock.com only. Websites accessed by means of links from this website operate under their own policies, over which we exercise no control.
13. Amendment
This policy may be amended from time to time. The date stated above indicates the date of last revision. Where an amendment is material, notification shall be given directly where practicable.
14. Contact
ELENA SAMARA LTD, 2 Bulgaria Str., 2850 Petrich, Bulgaria
basicpatternblock@gmail.com | https://basicpatternblock.com