Privacy policy
This Privacy Policy describes how I collect, use, and share your personal information when you visit or make a purchase from henriquettajewelry.com (the “Site”).
Collecting Personal Information
When you visit the Site, I collect certain information about your device, your interaction with the Site, and information necessary to process your purchases. I may also collect additional information if you contact me for customer support. In this Privacy Policy, “Personal Information” refers to any data that can be used to identify an individual.
Below is a breakdown of what I collect and why:
Device Information
-
Examples: browser version, IP address, time zone, cookie information, what products you view, search terms, how you interact with the Site
-
Purpose: to ensure the Site loads correctly and to perform usage analytics for optimization
-
Source: automatically collected using cookies, log files, web beacons, tags, or pixels
-
Disclosure: shared with my processor, Shopify
Order Information
-
Examples: name, billing and shipping address, payment information (including credit card details), email, phone number
-
Purpose: to process your order, complete payment, arrange delivery, provide invoices and confirmations, screen for fraud, and—if applicable—send product-related communication
-
Source: collected directly from you
-
Disclosure: shared with my processor, Shopify
Customer Support Information
-
Examples: same as above when you reach out for assistance
-
Purpose: to respond to your queries and provide support
-
Source: collected from you
-
Disclosure: shared with Shopify as necessary
Sharing Personal Information
I share your Personal Information with service providers to help deliver my services and fulfill contracts with you. For example:
-
Shopify powers my online store. You can read more about how Shopify uses your data here: https://www.shopify.com/legal/privacy
-
I may share your data to comply with legal obligations (e.g. court orders, subpoenas) or to protect my rights
Behavioural Advertising
I use your Personal Information to deliver relevant ads or marketing communications I believe may interest you. For example:
-
I use Google Analytics to understand how visitors use the Site. Learn more at: Google Privacy Policy
Opt-out here: Google Analytics Opt-out -
I may share info about your activity on the Site, purchases, and ad interactions with advertising partners. Some of this is done via cookies or similar technologies, which may depend on your location and consent.
For more on how targeted ads work, visit:
Network Advertising Initiative – Educational Page
You can opt out of targeted advertising via:
Or use the Digital Advertising Alliance opt-out portal:
http://optout.aboutads.info
Using Personal Information
I use your Personal Information to provide and improve my services, including:
-
Offering products for sale
-
Processing payments
-
Shipping and order fulfillment
-
Communicating about new products, services, and offers
Lawful Basis (GDPR)
If you are a resident of the European Economic Area (EEA), I process your Personal Information under the following lawful bases:
-
Your consent
-
The performance of a contract between you and the Site
-
Compliance with legal obligations
-
To protect your vital interests
-
My legitimate interests, provided they do not override your fundamental rights and freedoms
Retention
When you place an order, I retain your Personal Information for my records unless and until you request its deletion.
To exercise your right of erasure, see the “Your Rights” section below.
Automated Decision-Making
If you reside in the EEA, you have the right to object to processing based solely on automated decision-making (including profiling) where such processing has a legal or significant effect.
I do not engage in fully automated decision-making with customer data.
Shopify, my processor, uses limited automated systems to detect fraud. These do not produce legal or significant effects. Examples include:
-
Temporary denylist of IP addresses after repeated failed transactions
-
Temporary denylist of credit cards associated with flagged IPs
Your Rights (GDPR)
If you live in the EEA, you have the right to:
-
Access your Personal Information
-
Correct, update, or delete it
-
Port it to another service
To exercise these rights, please contact me at: henriquettajewelry@gmail.com
Your information is initially processed in Ireland and may be transferred to Canada and the United States. Learn more here:
Shopify’s GDPR Compliance
Currency and IP Detection
By using the Site, you agree to allow third parties to process your IP address to determine your location for currency conversion.
Your selected currency is stored in a session cookie, which disappears when you close your browser. This allows local pricing to remain consistent throughout your visit.
Cookies
A cookie is a small file stored on your device to help the Site remember preferences and improve your experience. I use cookies for:
-
Basic functionality (cart, login)
-
Performance and analytics
-
Advertising and social media
Cookies Used on the Site
Necessary for Store Functionality:
-
_ab
,_secure_session_id
,cart
,cart_sig
,checkout_token
,storefront_digest
, etc.
Reporting and Analytics:
-
_tracking_consent
,_landing_page
,_orig_referrer
,_shopify_y
,_shopify_s
,_shopify_sa_p
, etc.
Cookie duration varies. Most are persistent and expire between 30 minutes and 2 years.
You can control cookie settings in your browser. Blocking cookies may affect site functionality. Learn more: www.allaboutcookies.org
Blocking cookies won’t necessarily stop all data sharing with advertising partners. To opt out, refer to the Behavioural Advertising section above.
Do Not Track
There is currently no consistent industry standard for “Do Not Track” signals. Therefore, I do not alter my data collection in response to such signals.
Changes
I may update this Privacy Policy to reflect changes in practices or for legal reasons. Check this page periodically for updates.
Contact
For questions or to submit a complaint, email me at:
henriquettajewelry@gmail.com
Last updated: 01/01/2024
If you're not satisfied with my response, you have the right to lodge a complaint with your local data protection authority or with CNPD in Portugal:
https://www.cnpd.pt/home/notifica_rgpd/data_breach.htm