Privacy Policy

The data controller is GIB Jewels, Betlémské náměstí 259/11, 110 00 Prague 1, Czech Republic. Data protection contact: help@gibjewels.com, +420 608 860 860.

Identification and contact data (name, e-mail, phone, delivery and billing address), order and payment data, customer support communication, website usage data (cookies, IP address, device type), and account data including your wishlist.

We do not process or store payment card details — payments are handled directly by the payment gateway.

Contract performance (order fulfilment, shipping, complaints) — Art. 6(1)(b) GDPR. Legal obligations (accounting, taxes) — (c). Legitimate interest (store security, fraud prevention, direct marketing to existing customers) — (f). Consent (newsletter, marketing and analytics cookies) — (a).

We share data only with processors necessary to run the store: Shopify (store and checkout), Packeta (shipping), payment providers, hosting and database services, e-mail communication and analytics tools.

Some processors may process data outside the EEA; such transfers are safeguarded by the European Commission's Standard Contractual Clauses or an adequacy decision.

Order data is retained for the duration of the contract and then for the period required by law (tax documents for 10 years). Account data is kept until the account is deleted. Marketing data is processed until consent is withdrawn, at most 3 years after the last interaction.

You have the right to access, rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. Simply write to help@gibjewels.com.

You also have the right to lodge a complaint with the Czech Data Protection Authority, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.

We use encrypted transport (HTTPS), controlled database access and regular updates. Access to personal data is limited to people who need it for their tasks.