Privacy policy
Information We Collect
At GemmaSoleil, we collect the following types of personal data when you interact with our website or make purchases:
- Order Information: Name, shipping/billing address, payment details, email ([email protected] for correspondence)
- Device Information: IP address, browser type, operating system through cookies and similar technologies
- Behavioral Data: Pages viewed, products browsed, time spent on site
How We Use Your Information
Your data is processed for these lawful purposes:
- Fulfilling orders for our jewelry products (necklaces, earrings, rings, bracelets)
- Processing payments and preventing fraud
- Providing customer support via [email protected]
- Improving website functionality and user experience
- Sending transactional emails (order confirmations, shipping updates)
We never sell your personal data to third parties.
Data Sharing & Third Parties
We share information only with necessary service providers:
- Payment processors to complete transactions
- Shipping carriers to deliver orders
- Analytics providers to understand website usage (data is anonymized where possible)
All third parties are GDPR/CCPA compliant and process data only for GemmaSoleil's purposes.
Data Security Measures
We implement robust protections including:
- SSL encryption for all data transmissions
- PCI-DSS compliant payment processing
- Regular security audits of our systems
- Limited employee access to personal data
Your Rights
Under GDPR, CCPA and other privacy laws, you may:
- Request access to your personal data
- Request correction or deletion of your data
- Opt-out of non-essential data processing
- Lodge complaints with supervisory authorities
To exercise these rights, contact us at [email protected]. We respond within 30 days.
Cookies & Tracking
We use essential cookies for:
- Maintaining your shopping cart
- Processing checkouts
- Basic website functionality
Optional analytics cookies are disabled by default. You may adjust cookie preferences through your browser settings.
Data Retention
We retain personal data only as long as necessary:
- Order records: 6 years for tax/compliance purposes
- Customer service communications: 3 years
- Inactive accounts: Deleted after 2 years of inactivity
International Data Transfers
As an international retailer, we may transfer data outside your home country only when:
- Using EU-approved Standard Contractual Clauses
- To jurisdictions with adequate data protection laws
- With your explicit consent when required
Children's Privacy
Our jewelry products and website are not intended for children under 16. We do not knowingly collect data from minors without parental consent.
Policy Changes
We may update this policy to reflect legal requirements or operational changes. Continued use of GemmaSoleil constitutes acceptance of the current policy.
Contact Us
For privacy-related inquiries, please email [email protected]. Include "Privacy Request" in your subject line for faster processing.