Privacy Policy
Last updated: September 2026
This privacy policy explains which personal data is collected through izao-jewelry.com and in the atelier, why it is collected, how long it is kept and what rights you have. Personal data is always handled with care and in accordance with the General Data Protection Regulation (GDPR).
1. Who is responsible for your data?
The controller for the processing of your personal data is:
IZAO
Waterloostraat 176a
3062 TX Rotterdam, the Netherlands
Email: info@izao-jewelry.com
Chamber of Commerce (KvK): 80040470
2. Which personal data is processed?
Depending on how you use the website or the services of the atelier, the following data may be processed:
- When you place an order: name, billing and shipping address, email address, phone number, the order details and payment information (such as the payment method used and, for bank payments, the bank account number).
- When you order a gift card: the name and email address of the recipient and the personal message you add.
- When you check a gift card balance: the email address and gift card code you enter.
- When you use the contact form or send an email or WhatsApp message: your name, email address, phone number and the content of your message.
- For bespoke jewelry: the information you share about your wishes, including photos or details of your own jewelry or materials.
- When you sign up for the newsletter: your email address.
- When you visit the website: technical data such as IP address, browser type and pages visited, collected through cookies (see section 8).
3. Why is this data processed?
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, including payment and shipping | Performance of the agreement |
| Designing and making a bespoke piece | Performance of the agreement |
| Answering questions and handling returns, repairs and complaints | Performance of the agreement / legitimate interest |
| Issuing gift cards and checking their balance | Performance of the agreement |
| Keeping financial records for the tax authorities | Legal obligation |
| Sending the newsletter | Consent (you can unsubscribe at any time) |
| Analysing website use to improve the website | Consent, given through the cookie banner |
| Showing relevant advertisements on Facebook and Instagram | Consent, given through the cookie banner |
Personal data is never sold and is only used for the purposes listed above.
4. Who has access to your data?
Personal data is only shared with third parties when this is necessary for the purposes above or required by law. The following types of parties are used:
- Payment providers to process payments: Mollie (for iDEAL | Wero, Bancontact and PayPal payments) and PayPal
- Carriers to deliver your order: a postal service for standard shipments, and FedEx or DHL for express shipments on request
- Website hosting: TransIP
- Newsletter service: Klaviyo
- Website analytics and advertising: Google (Google Tag Manager and Google Analytics) and Meta (Meta Pixel, for Facebook and Instagram)
These parties only process your data on instruction and are required to protect it properly. Some of these parties, such as PayPal, Klaviyo, Google and Meta, may process data outside the European Economic Area. In that case, appropriate safeguards are in place, such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
5. How long is your data kept?
- Order and invoice data: 7 years, as required by Dutch tax law.
- Messages and contact form submissions: for as long as needed to handle your question, and no longer than 2 years after the last contact.
- Newsletter: until you unsubscribe.
- Analytics data: no longer than 14 months.
6. How is your data protected?
Appropriate technical and organisational measures are taken to protect your personal data against loss and unauthorised access. The website uses a secure connection (SSL), and payments are processed in the secure environment of the payment provider, so bank and card details are never stored on the website.
7. Your rights
You have the right to:
- access the personal data that is kept about you;
- have incorrect data corrected;
- have your data deleted, unless it must be kept by law;
- restrict the processing of your data;
- object to the processing of your data;
- receive your data in a structured, commonly used format (data portability);
- withdraw your consent at any time, for example for the newsletter.
To exercise any of these rights, send an email to info@izao-jewelry.com. You will receive a response within one month. If you are not satisfied with how your data is handled, you have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
8. Cookies
The website uses cookies: small files that are stored on your device when you visit the website.
- Functional cookies are needed for the website to work, for example to remember the contents of your shopping cart. These cookies do not require consent.
- Analytics cookies help to understand how the website is used, so it can be improved. These cookies are only placed after you have given consent through the cookie banner.
- Marketing cookies are used to show relevant advertisements on other platforms, such as Instagram or Facebook. These cookies are only placed after you have given consent.
You can change or withdraw your consent at any time through the cookie settings on the website, and you can delete cookies through your browser settings.
9. Changes to this privacy policy
This privacy policy may be updated, for example when the website changes. The most recent version is always available on this page.
