Elizabeth M Jewelry values the trust you place in us and is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal data when you visit our website or make a purchase.

​

1. Data Controller

​

The entity responsible for processing your personal data, in accordance with the GDPR, is:

• Trade Name: Elizabeth M Jewelry

• Headquarters/Address: Rua da Charneca, 5, 2565-030 Campelos, Portugal

• Contact E-mail: jewelrybyelizabethm@gmail.com

​

2. Data We Collect

​

We collect only the data necessary to provide you with a secure and personalised shopping experience:

• Identification: First and last name.

• Contact: E-mail address, phone number, and billing/shipping address.

• Payment: Payment data (credit cards/PayPal) is processed by secure external entities. We do not store your full card details.

• History: Details of orders placed and product preferences.

• Technical Data: IP address, device type, and cookies (see Cookie Policy).

​

3. Purpose of Processing

​

We use your data for the following purposes:

1. Contract Execution: To process your order, manage payments, and arrange the shipping of your jewellery.

2. Customer Support: To respond to enquiries, exchanges, or returns.

3. Marketing (with consent): To send newsletters regarding new collections and exclusive offers.

4. Security: Fraud prevention and protection of our website.

​

4. Legal Basis for Processing

​

In accordance with the GDPR, we process your data based on:

• Performance of a contract: Necessary to sell and deliver products to you.

• Consent: For sending marketing communications.

• Legitimate Interest: To improve our services and ensure website security.

• Compliance with legal obligations: Billing and tax obligations.

​

5. Data Sharing with Third Parties

​

We do not sell your data to third parties. However, we share data with essential partners for our operation:

• Shipping Companies: For order delivery (e.g., CTT, DHL).

• Payment Platforms: To process financial transactions.

• IT and Hosting Services: To keep the website functional.

• Legal Authorities: Whenever required by law.

​

6. International Transfers

​

If your data is processed outside the European Economic Area (EEA), we guarantee that these providers comply with security standards equivalent to those required in the European Union through Standard Contractual Clauses.

​

7. Data Retention

​

We retain your data only for the period necessary for the purposes described:

• Billing data: Retained for 10 years (legal obligation in Portugal/EU).

• Customer account data: Until you request its deletion or after an extended period of inactivity.

​

8. Your Rights

​

As a data subject, you have the right to:

• Access the personal data we hold about you.

• Rectify incorrect or incomplete data.

• Erase your data (Right to be Forgotten), under certain conditions.

• Restrict or Object to the processing of your data.

• Data Portability to another entity.

• Withdraw consent at any time (for marketing).

To exercise these rights, please contact us at: jewelrybyelizabethm@gmail.com

​

9. Cookies

​

We use cookies to improve your browsing experience. You can manage your cookie preferences at any time through your browser settings or the cookie banner on our website.

​

10. Complaints

​

If you consider that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority (in Portugal, the CNPD – Comissão Nacional de Proteção de Dados).

​

Last updated: 05/01/2026