Privacy policy

Privacy Policy

Last updated: March 2026

iGi Jewelry is operated by Maria Inês Girão de Azeredo Jácome de Vasconcelos, VAT No. 227 066 316, based at Rua do Cerro, No. 40, 4400-410 Canidelo, Vila Nova de Gaia, Portugal. iGi Jewelry is the data controller and is committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Portuguese law.

1. What data we collect and why

a) Data for contract performance (order processing):

  • Full name, shipping and billing address, email, phone number — to process and deliver your order.
  • Payment data — securely processed by our payment partners (we do not store card details). Legal basis: contract performance (Art. 6(1)(b) GDPR).

b) Data for legal obligations:

  • Billing data and transaction records — retained to comply with tax and accounting obligations. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

c) Data for marketing (with your consent only):

  • Email — to send newsletters, news and promotions. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.

d) Browsing data:

  • Cookies and site usage data — to improve your browsing experience and analyse site performance. Legal basis: consent for non-essential cookies; legitimate interest for cookies essential to site functionality.

2. Who we share your data with

We share your data only where necessary to provide our service, with the following categories of recipients:

  • Payment processors: Shopify Payments, PayPal, Ifthenpay (MB WAY, Multibanco) — to process order payments.
  • Couriers: to deliver your orders.
  • E-commerce platform: Shopify — which hosts our online store.
  • Email marketing service: Klaviyo — to send newsletters (only if you have consented).
  • Reviews service: Judge.me — to collect and publish product reviews.
  • Google Analytics — for traffic and performance analysis.

We do not sell, rent or share your personal data with third parties for marketing purposes without your express consent.

3. How long we retain your data

  • Order and billing data: 10 years (tax obligation under Portuguese law).
  • Customer account data: while your account remains active, or until you request deletion.
  • Marketing data (newsletter): until you withdraw consent.
  • Cookies: as indicated in our cookie policy; session cookies expire when you close your browser.

4. Your rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: request a copy of your personal data.
  • Right to rectification: correct inaccurate or incomplete data.
  • Right to erasure ("right to be forgotten"): request deletion of your data, except where legal retention obligations apply.
  • Right to data portability: receive your data in a structured, commonly used format.
  • Right to object: object to the processing of your data for certain purposes.
  • Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, contact us at info@igijewelry.com. We will respond within 30 days.

If you believe your data is being processed in violation of the GDPR, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt.

5. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction. Our store uses SSL encryption to ensure transaction security.

6. Changes to this policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with the updated date.

7. Contact

For questions about this Privacy Policy or your personal data: Email: info@igijewelry.com Address: Rua do Cerro, No. 40, 4400-410 Canidelo, Vila Nova de Gaia, Portugal