Privacy Policy

1. Who We Are

Rashi Jewels ("we", "our", "us") is a fine jewelry retailer based in Göteborg, Sweden. This privacy policy explains how we collect and use personal data when you visit rashijewels.com or place an order with us.

2. Data We Collect

• Account data: name, email address, phone number when you register or check out.
• Order data: shipping address, items purchased, payment reference (we never store full card numbers — payments are processed by Stripe).
• Usage data: pages visited, products viewed, browser type, and device — collected via Google Analytics and Vercel Analytics (only with your consent).
• Marketing data: ad interactions, if you consent to marketing cookies (via Meta Pixel / GTM).

3. How We Use Your Data

• To process and fulfill your orders and send order confirmations.
• To send shipping updates and respond to customer service enquiries.
• To improve our website and understand which products are popular (analytics).
• To show you relevant ads on third-party platforms (only with consent).

4. Legal Basis (GDPR)

• Contract — processing your order and delivering your purchase.
• Legitimate interest — fraud prevention and website security.
• Consent — analytics and marketing cookies (you can withdraw at any time).

5. Cookies

We use cookies to improve your browsing experience. Analytics and marketing cookies are only set after you give consent via the cookie banner. You can withdraw consent at any time by clearing your browser cookies or using your browser's cookie settings.

Cookies we use:

• Essential: cart state, authentication session (always active).
• Analytics: Google Analytics 4 via GTM (consent required).
• Marketing: Meta Pixel via GTM (consent required).

6. Third-Party Services

• Stripe — payment processing (PCI DSS compliant).
• Supabase — database hosting (EU region).
• Resend — transactional email delivery.
• Vercel — website hosting and analytics.
• Google Tag Manager / GA4 — analytics (consent required).
• Meta Pixel — ad performance (consent required).

7. Data Retention

Order records are retained for 7 years to comply with Swedish accounting law. Account data is retained until you request deletion. Analytics data is retained per each provider's default settings.

8. Your Rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict certain processing.
• Data portability.
• Withdraw consent for cookies at any time.

To exercise any of these rights, email us at privacy@rashijewels.com.

9. Contact

Rashi Jewels · Göteborg, Sweden
Email: privacy@rashijewels.com