Mason’s Vision operates the website https://masonsvision.com, an online jewellery store offering ready-to-order and made-to-order jewellery, including personalised and custom creations.
The website is operated by Mason’s Vision EOOD, registered in Bulgaria.
For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), Mason’s Vision EOOD acts as the data controller responsible for the personal information processed through this website, except where another party independently determines the purposes and means of its own processing.
We collect personal information necessary to operate our online store, process orders, manufacture and deliver jewellery, provide customer support and improve our services.
The information we collect depends on how you interact with our website.
When you place an order, create an account or contact us, we may collect:Full name.
• Email address.
• Phone number, where provided.
• Billing and delivery addresses.
• Account information and login credentials.
• Order details, purchase history and transaction references.
• Selected product options and jewellery specifications.
• Customisation details, including engraving text, ring sizes, chain lengths, plating choices and stone colours.
• Information provided in customer service enquiries, complaints, repair requests and return requests.
• Information submitted through public product reviews.
Please do not submit payment card details or other sensitive information through public reviews or general contact forms.
We offer or intend to offer payment methods including credit and debit cards, Apple Pay, Google Pay, PayPal and bank transfers.
Depending on the payment method, payment information is processed by the relevant payment provider or financial institution. We may receive transaction references, payment status, payment method details and other information necessary to confirm and manage an order.
We do not intend to store complete payment card details in our customer database. The actual handling of payment information depends on the payment integrations enabled on the website.
When you visit the website, certain technical information may be collected automatically, including:
• IP address.
• Browser type and version.
• Device and operating system information.
• Pages visited and interactions with website features.
• Referral information and approximate geographic information.
• Cookie identifiers and session information.
• Website security and diagnostic logs.
The information collected depends on the website configuration, your device settings and the services you use.
If you submit a product review, the information you choose to publish may be visible to other website visitors.
Depending on the review functionality, this may include your display name, review content, rating and submission date.
Please avoid including personal contact details, payment information or other private information in public reviews.
We use personal information for the following purposes:
• Processing and confirming orders.
• Manufacturing jewellery according to the specifications selected by customers.
• Managing customer accounts and order histories.
• Processing payments and verifying transactions.
• Arranging shipping, delivery and customs procedures.
• Sending order confirmations, dispatch notifications and other transactional communications.
• Responding to customer enquiries.
• Managing returns, repairs, complaints and applicable warranty or conformity claims.
• Maintaining website security and preventing fraud or abuse.
• Meeting accounting, tax and other legal obligations.
• Understanding website performance and visitor behaviour through analytics, where permitted.
• Measuring advertising performance through Google Ads, where permitted.
• Sending promotional communications where legally permitted.
• Establishing, exercising or defending legal claims where necessary.
We do not use personal information for purposes incompatible with those described in this Privacy Policy without providing any additional information or obtaining consent where required by law.
Where the GDPR applies, we process personal information on one or more of the following legal bases.
We process information necessary to fulfil our contractual obligations, including manufacturing, processing and delivering orders, managing accounts and responding to order-related enquiries.
We may process and retain information to comply with applicable accounting, tax, consumer protection and other legal requirements.
Where permitted by law, we may process information for legitimate interests such as maintaining website security, preventing fraud, managing our business, responding to disputes and improving our services.
We consider the rights and interests of individuals when relying on this legal basis.
We rely on consent where required, including for non-essential analytics or advertising cookies and applicable promotional communications.
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Payments are handled through the payment method selected at checkout.
Depending on the payment integration, relevant payment providers or financial institutions may process information such as payment details, transaction references, billing information and fraud-prevention data.
PayPal transactions are subject to PayPal’s applicable privacy terms. Card payments and Apple Pay or Google Pay transactions may involve the relevant payment processor and financial institutions.
Bank transfers may require the processing of payment references and relevant bank transaction information.
The specific payment processors used by Mason’s Vision will depend on the integrations enabled on the website. Their identities and applicable privacy information should be made available where appropriate.
Mason’s Vision operates a made-to-order jewellery business. Depending on the order and fulfilment arrangement, a piece may be shipped directly from a manufacturing supplier to the customer or may pass through an intermediate destination before delivery.
Where necessary to manufacture or fulfil an order, we may share relevant information with a supplier or fulfilment partner.
This may include:
• Product specifications and customisation instructions.
• Order references.
• The customer’s name and delivery information, where required for fulfilment.
• Contact details necessary for shipping or delivery, where applicable.
We aim to share only the information reasonably necessary for the relevant purpose.
Our suppliers and fulfilment partners may use the information to manufacture, prepare, dispatch or deliver the order and to meet applicable legal obligations.
The identities and locations of the relevant suppliers and fulfilment partners depend on the order and the fulfilment arrangement used.
To deliver orders, we may share relevant customer information with courier companies, postal operators, shipping agents, customs brokers and other delivery partners.
Information may include your name, delivery address, contact details, shipment reference and order information required for delivery.
For international shipments, information may also be disclosed to customs authorities or other public authorities where required by applicable law.
The courier used may be selected by our supplier or fulfilment partner, depending on the shipment arrangement.
We may use third-party service providers to operate our website, process transactions and provide associated services.
Depending on the services enabled, these may include:
• Website hosting and infrastructure providers.
• Payment processors and financial institutions.
• Manufacturing suppliers and fulfilment partners.
• Shipping and courier companies.
• Google Analytics.
• Google Ads.
• Business email and communications providers.
• Security, fraud-prevention and technical support providers.
• Email marketing services, if implemented.
These providers may process personal information on our behalf or independently for their own purposes, depending on the service and their role.
Where required by law, we take appropriate steps to ensure that personal information is disclosed and processed under suitable contractual and legal arrangements.
We do not sell personal information in exchange for money. However, certain advertising or analytics activities may constitute sharing or targeted advertising under some jurisdictions’ privacy laws, depending on how those services are configured.
We may use Google Analytics to understand how visitors interact with our website and to improve website performance.
We may also use Google Ads conversion tracking to measure advertising effectiveness and understand whether advertising campaigns lead to relevant actions, such as purchases.
Depending on the configuration, these services may collect information such as:
• Pages viewed and website interactions.
• Device and browser information.
• Approximate location.
• Cookie identifiers and online identifiers.
• Advertising and conversion events.
Where required, non-essential analytics and advertising technologies will be activated only after the appropriate consent has been obtained.
You can manage your cookie preferences through the cookie settings available on our website, where implemented.
Google’s own privacy terms also apply to information Google processes through its services. Further information is available at:
https://policies.google.com/privacy
The precise data collected and retention periods depend on the services enabled and their configuration.
Our website may use cookies and similar technologies to operate the online store, maintain sessions, remember preferences, measure website performance and support advertising activities.
Essential cookies support necessary website functions, including shopping cart functionality, checkout sessions, account authentication and security.
These cookies are used where necessary to provide the service you request and do not require consent where an applicable legal exemption applies.
Analytics cookies may help us understand website traffic and how visitors interact with our products and pages.
Where required by law, these cookies are used only after you provide consent.
Advertising technologies may be used to measure the performance of our Google Ads campaigns or support related advertising functions.
Where consent is required, these technologies will not be activated before you consent.
Our cookie banner is intended to allow visitors to accept or reject optional cookies.
You should be able to change or withdraw your consent through the website’s cookie settings where available.
You can also manage cookies through your browser, although blocking essential cookies may affect certain website functions.
For more information about cookies and applicable consent requirements, please consult the relevant cookie information provided on our website.
Mason’s Vision may send promotional emails about jewellery, new collections, special offers and related products where legally permitted.
Where consent is required, we will obtain it before sending promotional communications.
You may unsubscribe using the unsubscribe mechanism included in the message or by contacting us at privacy@masonsvision.com.
Unsubscribing from marketing communications does not prevent us from sending necessary transactional messages, such as order confirmations, payment notifications or shipping updates.
The email marketing service used by Mason’s Vision, if any, will be identified once selected and implemented.
Mason’s Vision sells internationally and may use suppliers, fulfilment partners, payment providers, couriers and technology providers located in different countries.
Depending on the services used and the destination of an order, personal information may be transferred outside Bulgaria or the European Economic Area (EEA), including to countries where a supplier or service provider operates.
Where the GDPR applies, transfers of personal information outside the EEA must comply with the applicable international transfer rules.
Depending on the circumstances, this may involve an applicable adequacy decision, appropriate safeguards such as Standard Contractual Clauses, or another legally recognised transfer mechanism.
We will take the measures required by applicable law for relevant international transfers.
Information about specific recipients, transfer destinations and safeguards should be provided where required by law and relevant to the processing involved.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, taking account of applicable legal obligations and the nature of the information.
Retention periods depend on the type of information and the reason for processing.
Order, payment and transaction information may be retained for the periods required by applicable accounting, tax and other legal requirements, and as necessary to manage disputes or legal claims.
Account information is retained while the account remains active and for an appropriate period afterwards where necessary to fulfil legal obligations, resolve disputes or protect our legitimate interests.
Customer support messages and related records may be retained for as long as necessary to respond to enquiries, manage complaints and establish or defend legal claims.
Marketing subscription information is retained while the relevant subscription remains active and for an appropriate period afterwards where necessary to maintain suppression records or demonstrate compliance with applicable law.
Technical logs and analytics information are retained according to the configuration of our website, security systems and analytics services.
Specific retention periods will depend on the relevant service and settings.
When personal information is no longer necessary and no legal retention obligation applies, we will delete it or take appropriate steps to anonymise it.
We take appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration, disclosure or destruction.
These measures may include access controls, secure connections, system updates, security monitoring and other safeguards appropriate to the systems used.
Access to customer information is limited to authorised persons and service providers who need it for legitimate business or legal purposes.
No method of storing or transmitting information over the internet can be guaranteed to be completely secure.
Where the GDPR applies, you may have the following rights, subject to the conditions and exceptions established by law:
• Right of access: Request confirmation of whether we process your personal information and obtain a copy.
• Right to rectification: Request correction of inaccurate or incomplete information.
• Right to erasure: Request deletion of your personal information where the legal conditions are met.
• Right to restriction: Request that certain processing be restricted in applicable circumstances.
• Right to object: Object to processing based on legitimate interests in circumstances provided by law.
• Right to data portability: Request certain information in a structured, commonly used and machine-readable format where the right applies.
• Right to withdraw consent: Withdraw consent where processing relies on consent.
• Right to complain: Lodge a complaint with a competent data protection supervisory authority.
These rights are not absolute and may be subject to legal conditions and exceptions.
To exercise your rights, contact privacy@masonsvision.com. We may request information reasonably necessary to verify your identity before responding.
We will respond within the time limits required by applicable law.
If you are located in Bulgaria or the GDPR applies to the relevant processing, you may have the right to lodge a complaint with the competent supervisory authority.
In Bulgaria, the supervisory authority is the Commission for Personal Data Protection (CPDP).
Official website: https://www.cpdp.bg/
You may also have the right to complain to another competent supervisory authority where permitted by applicable law.
Our website is intended for customers who can legally enter into purchases under the laws applicable to them.
We do not knowingly seek to collect personal information from children in circumstances where doing so would be unlawful.
If you believe that a child has provided personal information to us unlawfully, please contact us so that we can assess the situation and take appropriate action.
Our website may allow customers to publish product reviews. Information submitted for public display may be visible to other visitors.
Please consider carefully what information you include in a public review.
Our website may also contain links to third-party websites. Those websites operate under their own privacy policies and practices. We are not responsible for the privacy practices of external websites that we do not control.
We may update this Privacy Policy when our business practices, website functionality, service providers or applicable legal requirements change.
The latest version will be published on this page with an updated revision date.
Where required by law, we will provide additional notice or obtain consent before implementing relevant changes to our data-processing practices.
For questions about this Privacy Policy, our handling of personal information or your data protection rights, contact:
Mason’s Vision EOOD
Website: https://masonsvision.com
Privacy email: privacy@masonsvision.com
Registered business address: [Sofia, zh.k. Mladost 3, bl. 368, ent.5, fl.5 , Bulgaria]