SYLVIE GIANELLA JEWELLERY
Privacy Policy
Last updated: July 2025
This Privacy Policy explains how Sylvie Gianella Jewellery (“we”, “us”, “our”), based in Ibiza, Spain, collects, uses, and protects your personal data when you visit sylviegianella.com or make a purchase from us. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
Please read this policy carefully. By using our website or purchasing from us, you agree to the practices described here.
1. Who We Are
Data Controller: Sylvie Gianella Jewellery
Address: Ibiza, Spain
Email: hello@sylviegianella.com
Website: sylviegianella.com
If you have any questions about how we use your personal data, please contact us at the email address above.
2. What Data We Collect
When you make a purchase
— Your name and billing address
— Delivery address
— Email address
— Phone number (if provided)
— Payment details — processed securely via Squarespace Payments or Stripe. We do not store your full card details.
When you sign up to our mailing list
— Your email address
— Your name (if provided)
When you browse our website
— IP address and browser type
— Pages visited and time spent on the site
— Referring website or search terms
— This data is collected via cookies and analytics tools (see Section 7).
When you contact us
— Your name, email address, and any information you choose to include in your message
3. How We Use Your Data
We use your personal data for the following purposes:
— To process and fulfil your order, including shipping and handling returns
— To communicate with you about your order status
— To send you marketing emails if you have opted in (you can unsubscribe at any time)
— To improve our website and customer experience
— To comply with our legal and tax obligations
— To prevent fraud and ensure the security of our platform
4. Legal Basis for Processing
Under GDPR, we process your data on the following legal grounds:
— Contract: to fulfil your order and provide our services
— Legitimate interests: to improve our website, prevent fraud, and run our business
— Consent: for marketing emails — you can withdraw this at any time
— Legal obligation: where we are required to retain data by law (e.g. tax records)
5. Who We Share Your Data With
We do not sell your personal data. We may share it with trusted third parties only as necessary to run our business:
Squarespace
Our website is hosted on Squarespace, which processes data on our behalf. Squarespace is GDPR-compliant. For details, see: squarespace.com/privacy
Klaviyo
We use Klaviyo to manage our email marketing. Your email address and name are stored in Klaviyo when you subscribe to our list. Klaviyo is GDPR-compliant. For details, see: klaviyo.com/legal/privacy
Shipping providers
We share your name and delivery address with our shipping carriers (including Correos España and international courier partners) to fulfil your order.
Payment processors
Payments are handled securely by Squarespace Payments or Stripe. We do not have access to your full card details.
Legal authorities
We may disclose your data if required to do so by law or in response to a valid legal request.
6. International Data Transfers
Some of our third-party providers (including Klaviyo and Squarespace) are based in the United States. Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
7. Cookies
Our website uses cookies — small text files stored on your device — to improve your experience and help us understand how the site is used.
Types of cookies we use
— Essential cookies: required for the website and checkout to function correctly
— Analytics cookies: used to understand how visitors interact with the site
— Marketing cookies: used to track the effectiveness of any advertising we run
You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how the website functions. A cookie consent banner will appear on your first visit to the site.
8. How Long We Keep Your Data
— Order data: retained for 7 years to comply with Spanish and EU tax law
— Email marketing data: retained until you unsubscribe or request deletion
— Contact enquiries: retained for up to 2 years
— Website analytics data: typically retained for 26 months
9. Your Rights
Under GDPR, you have the following rights regarding your personal data:
— Right to access: you can request a copy of the data we hold about you
— Right to rectification: you can ask us to correct inaccurate or incomplete data
— Right to erasure: you can ask us to delete your data, subject to our legal obligations
— Right to restrict processing: you can ask us to limit how we use your data
— Right to data portability: you can request your data in a machine-readable format
— Right to object: you can object to us processing your data for marketing purposes
— Right to withdraw consent: where we process data based on your consent, you can withdraw it at any time
To exercise any of these rights, please contact us at hello@sylviegianella.com. We will respond within 30 days. You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos — aepd.es).
10. Marketing Emails
We only send marketing emails to people who have actively opted in. Every marketing email we send includes an unsubscribe link. You can also unsubscribe at any time by emailing hello@sylviegianella.com.
We do not send marketing emails to customers who have not opted in, even if they have previously made a purchase.
11. Children’s Privacy
Our website and products are not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
12. Security
We take the security of your personal data seriously. Our website uses SSL encryption, and our payment processing is handled by PCI-DSS compliant providers. Access to personal data within our business is restricted to those who need it to perform their role.
While we take all reasonable steps to protect your data, no transmission over the internet is completely secure. We cannot guarantee the absolute security of data you transmit to us.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website. The date at the top of this page indicates when it was last updated. We will notify you of any significant changes by email where we hold your contact details.
14. Contact Us
If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please get in touch:
Sylvie Gianella Jewellery
Ibiza, Spain
Email: hello@sylviegianella.com
Website: sylviegianella.com
Thank you for trusting us with your data.