Privacy policy

1. Who we are

This Privacy Policy explains how your personal data is collected and used when you visit www.maisonnazeli.com or buy from NAZELI.

The data controller is LIVING JEWELLERY SRL, trading as NAZELI, Avenue Louise 386, 1050 Brussels, Belgium, VAT number BE 1042.325.376. You can contact us about your data at info@maisonnazeli.com.

2. What data we collect

• Order and account data: name, delivery and billing address, email address, phone number, and the items you order.

• Payment data: payments are processed by [payment provider(s)]. We do not store your full card details; we only receive confirmation of the payment and limited information such as the last four digits of the card.

• Communication data: messages you send us by email or through a contact form, and any information you give us when you request a return or make a complaint.

• Newsletter data (if applicable): your email address and your subscription preferences.

• Technical data: IP address, device and browser type, pages visited and time spent on the site, collected through cookies and similar technologies (see our [Cookie Policy, link]).

We do not knowingly collect sensitive personal data.

3. Why we use your data, and on what basis

PurposeLegal basis

Processing and delivering your order, handling returns and exchangesPerformance of a contract

Customer service and complaintsPerformance of a contract, and our legitimate interest in answering you

Invoicing, accounting and tax obligationsLegal obligation

Preventing fraud and securing the websiteLegitimate interest

Sending our newsletter and marketing emails (if applicable)Your consent

Analytics cookies and marketing cookiesYour consent

You can withdraw your consent at any time, without affecting the processing done before.

4. Who we share your data with

We share your data only with those who need it to provide our services, and they are bound by data protection obligations:

• Our website and e-commerce provider, Shopify.com

• Payment providers: [payment provider(s)]

• Carriers and delivery partners: [carrier(s)]

• Our accountant and legal advisers

• [Email or newsletter provider, if applicable]

• [Analytics or advertising providers, if applicable, such as Google or Meta]

• Public authorities, where required by law

We do not sell your personal data.

5. Transfers outside the European Economic Area

Some of our providers may process data outside the EEA. When this happens, we make sure appropriate safeguards are in place, such as the European Commission's standard contractual clauses or an adequacy decision.

6. How long we keep your data

• Order and invoice data: kept for the period required by Belgian accounting and tax law, which is currently [duration, to be confirmed with your accountant, commonly 7 years].

• Customer service messages: kept for [duration, e.g. 2 years] after our last exchange.

• Newsletter data: kept until you unsubscribe.

• Cookie data: kept for the periods set out in our Cookie Policy.

When the retention period ends, we delete or anonymise your data.

7. Your rights

Under the GDPR, you have the right to:

• access the data we hold about you;

• have inaccurate data corrected;

• have your data erased, in the cases provided by law;

• restrict or object to certain processing, including marketing;

• receive your data in a portable format;

• withdraw your consent at any time.

To exercise these rights, email us at [email address]. We may ask you to confirm your identity, and we will reply within one month.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit), [link to their website].

8. Security

We take reasonable technical and organisational measures to protect your data against loss, misuse and unauthorised access. Our website uses an encrypted connection (HTTPS) and payments are handled by secure providers.

9. Children

Our website is intended for adults. We do not knowingly collect data from children under 16 without parental consent. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. The latest version is always available on this page, with the date of the last update at the top.