Privacy policy

Last updated: 6 October 2026

This policy explains what personal data Precious Jewels collects when you visit preciousjewels.be, order from us, book an appointment or contact us, why we collect it, who sees it, how long we keep it, and the rights you have. It is written to meet the EU General Data Protection Regulation (GDPR) and Belgian law.

1. Who is responsible

The controller of your personal data is Precious Jewels, trade name of Jimmy Dzanashvili, enterprise number 0769.604.433, Vestingstraat 22A, 2018 Antwerp, Belgium. For anything about your data: info@preciousjewels.be or +32 487 93 08 85.

2. What we collect, why, and on what legal basis

When	What	Why	Legal basis
You place an order	Name, e-mail, phone, billing and delivery address, the items ordered, ring size, engraving text, payment method (card details are handled by the payment provider and never reach us), order history	To make, ship and deliver your order, send order and shipping e-mails, handle returns, resizing and warranty claims	Performance of the contract; our legal obligations (invoicing, accounting, tax)
You create an account	Name, e-mail, addresses, saved orders	To let you follow your orders and reorder faster	Performance of the contract
You contact us or book an appointment	Name, e-mail, phone, the date and subject of the appointment, the content of your message	To answer you and prepare your visit	Our legitimate interest in answering you; steps before a contract
You subscribe to our e-mails	E-mail address, name if you give it, which e-mails you open	To send news and offers, including the welcome code	Your consent, which you can withdraw at any time with the unsubscribe link
You browse the site	IP address, device and browser, pages seen, how you reached us, cart contents, and, if you accept them, analytics and advertising cookies	To make the site work and keep it secure (always); to understand how it is used and to measure advertising (only with your consent)	Legitimate interest for strictly necessary processing; your consent for everything else
You pay	Transaction amount, date, method, and the fraud checks the payment provider runs	To collect payment and prevent fraud	Performance of the contract; legitimate interest in preventing fraud

We do not ask for, and do not want, data about your health, beliefs or other sensitive categories; please do not put such information in an engraving request or a message.

3. Who receives your data

• Shopify International Ltd. (Ireland) hosts our shop and processes order, customer and browsing data on our behalf under its data processing terms. Shopify may use certain data as an independent controller for fraud prevention and its own services; see Shopify's privacy policy at shopify.com/legal/privacy.
• Payment providers: Shopify Payments receives what is needed to process and secure your payment.
• Carriers receive your name, delivery address and phone number to deliver and insure the parcel.
• Appointment booking: if you book through our booking tool, the tool's provider processes the booking details on our behalf.
• E-mail tools used to send order e-mails and, with your consent, newsletters.
• Analytics and advertising services (such as Google Analytics and Meta) only if you accept their cookies in the cookie banner.
• Our accountant and, where required, the tax authorities, for invoices.

We never sell personal data, and we share it only for the purposes above.

4. Transfers outside the European Economic Area

Our data is hosted in the EU. Some providers (payment, e-mail, analytics, advertising) may process data in the United States or elsewhere. Where they do, the transfer rests on an adequacy decision of the European Commission (for instance the EU-US Data Privacy Framework) or on the Commission's standard contractual clauses, with additional safeguards where needed. You can ask us for details of the safeguard that applies.

5. How long we keep your data

• Order, invoice and payment records: 7 years after the end of the year of the order, as Belgian accounting and tax law requires.
• Warranty and repair records: for the two-year warranty period plus 3 years.
• Your account: until you delete it or after 3 years without activity.
• Messages and appointment requests: up to 2 years after our last exchange.
• Newsletter data: until you unsubscribe, after which we keep only what is needed to respect your choice.
• Cookies: see section 6.

6. Cookies

Cookies are small files placed on your device. We use three kinds:

• Strictly necessary: they keep your cart, your language and your checkout working, protect against fraud and remember your cookie choice. They cannot be switched off; they last at most 1 year.
• Analytics: they tell us which pages are visited and how the site performs (Shopify analytics, Google Analytics). Used only with your consent.
• Advertising: they let advertising platforms (such as Meta) measure campaigns and show you relevant content. Used only with your consent.

When you first visit, the cookie banner asks for your choice. You can change it at any time through the "Manage preferences" link in the banner, or by deleting cookies in your browser. Refusing analytics and advertising cookies never prevents you from ordering.

7. Your rights

Under the GDPR you can, at any time and free of charge:

• ask what data we hold about you and receive a copy (right of access);
• have inaccurate data corrected;
• have your data erased, where we no longer need it or you withdraw consent;
• restrict or object to processing based on our legitimate interest, including any direct marketing;
• receive the data you gave us in a machine-readable form, or have it sent to another provider;
• withdraw a consent you gave, without affecting what was done before.

Write to info@preciousjewels.be. We may ask you to confirm your identity and we answer within one month. If you are not satisfied, you can complain to the Belgian Data Protection Authority: Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels, contact@apd-gba.be, www.gegevensbeschermingsautoriteit.be.

8. Security

Our site and checkout are encrypted (TLS). Payment data is handled by PCI-DSS certified providers and never stored by us. Access to customer data is limited to the people who need it to serve you. No system is perfectly secure; if a breach ever affects your data and your rights, we will inform you as the law requires.

9. Children

Our site is not aimed at children under 16 and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

10. Changes

We update this policy when our practices or the law change. The date at the top is the current version; significant changes are announced on the site.