Privacy policy
At Gió VELORI, we craft personalised, luxury jewellery with the utmost care and precision. We apply that same level of care to the protection of your personal data. This Privacy Policy describes how Gió VELORI (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from gio-velori.com (collectively, the "Services").
1. The Data Controller
For the purposes of the General Data Protection Regulation (EU GDPR and UK GDPR) and the Italian Privacy Code, the Data Controller responsible for your personal data is:
Company Name: Velori di Arioli Elena
Registered Address: Via XX Settembre 5/2 - 16121 Genova (GE) - Italy
VAT Number (Partita IVA): 03010620999
Certified Email (PEC): veloridiariolielena@legalmail.it
2. What Personal Data We Collect
The information we collect depends on how you interact with our Site. We collect data directly from you, automatically through your usage, and from trusted third parties.
Identity & Contact Data: Name, billing address, shipping address, phone number, and email.
Bespoke Commission & Order Data: Details provided during the design process (ring sizes, personal engravings, aesthetic preferences), email approvals for Bespoke Commission Sheets, and purchase history.
Shopping & Support Information: Items you view, put in your cart, or save to your account, as well as information you choose to include in communications with our concierge team.
Financial Data: Payment details. (Note: We do not process or store full credit card numbers on our servers. All transactions are securely processed via Shopify Payments or authorized payment gateways).
Usage Data (Cookies & Tracking): Information about how you access our Site, including device information, browser type, IP address, and network connection, collected via cookies and pixels.
3. How and Why We Use Your Data (Legal Basis)
Under the GDPR, we process your data based on the following legal grounds:
To Fulfill Our Contract: Processing your payments, fulfilling your orders, generating Draft Order invoices, and arranging Delivery Duty Paid (DDP) shipping.
To Comply with Legal Obligations: Maintaining financial records and invoices as required by Italian tax law (which mandates holding financial records for 10 years).
For Our Legitimate Interests (Art. 6(1)(f) GDPR): To detect and investigate fraudulent activity, to maintain the security of our Site, to improve our Services, and to enable Shopify to match your account with other Shopify services you may use to enhance your checkout experience.
With Your Consent: Sending marketing, advertising, and promotional communications. You may withdraw this consent at any time.
4. Who We Share Your Data With
We treat your personal data with strict confidentiality and only share it with trusted third parties necessary to operate our business:
E-commerce & IT Partners: Shopify Inc. powers our online store. Shopify processes your data to facilitate your transactions and host our website securely. We also share data with data analytics and cloud storage providers.
Master Artisans (Valenza): Our manufacturing partners receive only the data required to craft your piece (e.g., ring size, metal choice, engraving text). They do not receive your full identity or financial details.
Logistics Partners: We share your name, shipping address, and phone number with our DDP couriers strictly to ensure the safe, insured delivery of your jewelry.
5. Cookies and Tracking Technologies
Like many websites, we use Cookies to power and improve our Site, remember your preferences, and run analytics. For specific information about the technical Cookies we use related to powering our store with Shopify, please visit https://www.shopify.com/legal/cookies. Most browsers automatically accept Cookies, but you can set your browser to remove or reject them. Please note that blocking Cookies may negatively impact your user experience or cause certain features of the Site to function incorrectly.
6. International Data Transfers
Because our store is hosted on Shopify, your data may be transferred to and processed in servers located outside of the European Economic Area (EEA), such as in the United States and Canada. When we transfer your personal information out of Europe, we rely on recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent adequacy decisions, ensuring your data remains protected to European standards.
7. Security and Retention
While we implement robust measures to protect your data, no security system is completely impenetrable, and information sent over the internet may not be perfectly secure in transit. We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, such as maintaining your account, providing the Services, and complying with our 10-year legal and tax obligations in Italy.
8. Children's Data
Our Services are not intended for use by children. We do not knowingly collect personal information from individuals under 16 years of age. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at the PEC email provided above to request its deletion.
9. Your Data Rights
Depending on where you live, you possess comprehensive rights regarding your data:
Right to Access/Know: Request details about the personal data we hold about you.
Right to Correct/Delete: Request the correction of inaccurate data or the deletion of your data (subject to our legal retention obligations).
Right of Portability: Receive a copy of your data in a structured format to transfer to a third party.
Restriction/Withdrawal: Ask us to restrict processing or withdraw your consent for marketing communications at any time.
To exercise these rights, or if you have a complaint regarding how we handle your data, please contact us at veloridiariolielena@legalmail.it. If you are an EEA resident and remain unsatisfied with our response, you have the right to lodge a complaint with your local Data Protection Authority (in Italy, the Garante per la Protezione dei Dati Personali).