Effective date: January 4, 2026

Gemma Jewelry (“Gemma”, “we”, “our” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, who we share it with, your rights, and how to contact us. By using our website or buying our products you agree to the collection and use of information in accordance with this policy.

Company contact details
Gemma Jewelry
Toval 21, Ramat Gan – Diamond Tower
Phone: +972 (54) 717-272
Email: info@gemma-jewelry.com

1. What information we collect

We collect personal information you provide directly and information collected automatically when you use our website and services.

A. Information you provide directly

  • Contact and identity data: name, billing/shipping address, telephone number, email.
  • Account data: username and password (stored securely).
  • Order details: items purchased, sizes, customizations, preferences.
  • Customer service communications and support requests.
  • Marketing preferences and consents.

B. Payment information

  • We do not store full credit card numbers on our servers. Payment is processed by third-party payment providers (e.g., card processors). We may retain transaction IDs and payment confirmations for bookkeeping and customer support.

C. Technical and usage information (collected automatically)

  • IP address, device and browser type, operating system, pages visited, referral URLs, and other analytics data.
  • Cookies and similar technologies (see section 7).

D. Third-party information

  • Information from social login providers (if you use them), analytics providers, advertising partners and other third parties, subject to your consents and their privacy settings.

2. How we use your information

We use personal data for the following purposes and based on the legal bases set out below:

  • To perform and manage orders and deliver products (Performance of a contract).
  • To process payments and prevent fraud (Performance of a contract / Legitimate interest).
  • To provide customer service and support (Performance of a contract / Legitimate interest).
  • To send transactional messages such as order confirmations, shipping notifications, and account notices (Performance of a contract).
  • To send marketing communications and promotions if you have opted-in (Consent). You may opt out at any time.
  • To improve our website, products and services using analytics and testing (Legitimate interest).
  • To comply with legal and regulatory obligations (Legal obligation).
  • To detect, prevent and respond to security incidents and abuse (Legitimate interest).

3. Sharing and disclosure

We may share personal information with:

  • Service providers and processors (payment processors, shipping carriers, hosting providers, email/digital marketing platforms, analytics providers).
  • Subcontractors involved in order fulfillment (logistics, warehousing).
  • Professional advisors and legal counsel when necessary.
  • Law enforcement, regulators or other authorities where required by law or to protect our rights.
  • Affiliates or business partners in the event of a business transfer, merger or sale (with appropriate safeguards).

We require third parties to protect personal data and to use it only as instructed.

4. International transfers

Your personal data may be transferred to, and processed in, countries other than your own (including countries outside the EEA). When we transfer personal data internationally we use appropriate safeguards such as standard contractual clauses or other legal mechanisms required by applicable law.

5. Data retention

We retain personal data only as long as necessary for the purposes described in this policy, and in accordance with legal and business requirements:

  • Order and accounting data: typically retained for 7 years (for tax and accounting obligations).
  • Marketing data: retained until you withdraw consent or opt out.
  • Analytics and technical logs: retained for up to 24 months unless anonymized sooner.
  • Support records: retained as necessary to resolve issues and improve service.

If you request deletion, we will delete data unless retention is required by law or for legitimate business reasons.

6. Security

We implement industry-standard technical and organizational measures to protect personal data (HTTPS/TLS, access controls, secure backups, policy controls). No method of transmission or storage is completely secure, so while we strive to protect your information, we cannot guarantee absolute security. In case of a personal data breach that creates a risk to your rights, we will notify you and any applicable supervisory authority as required by law.

7. Cookies and tracking technologies

We use cookies and similar technologies to operate the website and improve your experience:

  • Strictly necessary cookies: required for core functionality (e.g., shopping cart, login).
  • Functional cookies: remember preferences and settings.
  • Performance/analytics cookies: collect anonymized usage statistics (e.g., Google Analytics).
  • Advertising/targeting cookies: used for advertising, retargeting and measurement.

You can manage cookie preferences via our cookie banner and by changing your browser settings. Disabling some cookies may affect site functionality.

8. Your rights

Depending on applicable law you may have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Request deletion of your personal data (“right to be forgotten”) (subject to legal exceptions).
  • Restrict or object to certain processing (e.g., direct marketing).
  • Request portability of your data in a common, machine-readable format.
  • Withdraw consent where processing is based on consent.

To exercise your rights, contact us at info@gemma-jewelry.com or +972 (54) 717-272. We may request additional information to verify your identity. We will respond within the timeframe required by law.

If you are not satisfied with our response, you may lodge a complaint with your local data protection authority.

9. Children

Our website and services are not intended for children under 16. We do not knowingly collect personal data from children under this age. If we become aware that we have collected such information without parental consent, we will delete it promptly.

10. Third-party links and services

Our website may contain links to third-party websites and services. This Privacy Policy does not apply to those third parties. We encourage you to read their privacy notices.

11. Changes to this policy

We may update this policy from time to time. Material changes will be posted on the website with a revised “Effective date”. We recommend that you review the policy periodically.

12. Contact us

If you have any questions, requests or complaints about this Privacy Policy or our practices:

Gemma Jewelry
Toval 21, Ramat Gan – Diamond Tower
Phone: +972 (54) 717-272
Email: info@gemma-jewelry.com