Privacy and Data Protection Policy

1. Data Controller
Della Semijoias is the entity responsible for the processing of your personal data.

• Data Protection Contact: della.semijoiasdella@gmail.com

2. Personal Data We Collect
We collect and process the following personal data, depending on your interaction with our website:

• Account Creation and Purchases: Full name, billing address, delivery address, phone number, email, and Tax Identification Number (NIF).
• Contact Forms: Name, email, and the content of your message.
• Newsletter and Marketing: Email address.
• Browsing (Cookies): IP address, browser type, pages visited, and traffic data.

3. Purpose and Legal Basis for Processing
We process your data for the following purposes and legal bases (Article 6 of the GDPR):

1. Performance of Contract: Order processing and delivery, invoicing, returns management, and customer support.
2. Consent: Sending of newsletters, marketing communications, and promotional campaigns from Della Semijoias (you may withdraw this consent at any time).
3. Compliance with Legal Obligations: Issuance of invoices reported to the Tax and Customs Authority.
4. Legitimate Interest: Security of our website and prevention of cyber fraud.

4. Sharing Data with Third Parties
Della Semijoias does not sell or rent your data to third parties. To operate and provide our service, your data is shared strictly with the following partners:

• Shipping companies: To deliver your semi-fine jewellery to your address.
• Financial Institutions / Payment Gateways: For the secure processing of your purchases.
• Technology Service Providers: Companies that host our website and provide email marketing tools.
• Tax Authority: For compliance with current invoicing regulations.

5. Data Retention
Your personal data will be retained only for the period strictly necessary to fulfill the purposes for which they were collected:

• Customer and Billing Data: Retained for the mandatory legal period of 10 years (a tax requirement in Portugal).
• Marketing Data (Newsletters): Retained until you decide to unsubscribe via the opt-out link included in every email.

6. Data Subject Rights
The GDPR grants you a set of rights regarding your personal data, which you can exercise at any time by sending an email to: della.semijoiasdella@gmail.com
7. Data Security
Della Semijoias implements appropriate technical, organizational, and IT security measures to protect your personal data against unauthorized access, loss, alteration, or destruction. Our website uses encrypted connections (HTTPS/SSL protocol) to ensure security during data transmission.
8. Right to Lodge a Complaint
If you consider that the processing of your data violates the GDPR, you have the right to lodge a formal complaint directly with the national supervisory authority, the National Data Protection Commission (CNPD) , via the official website www.cnpd.pt.
9. Updates to this Policy
Della Semijoias reserves the right to update this Privacy Policy whenever necessary. We recommend checking this page regularly.

• Last update: 17 June 2026.

---