Privacy Policy

When you sign in with Google

With your permission, Google shares your name (first and last name), your email address, whether that email address is verified, and your Google account ID. We use these only to create your account and sign you in. We do not receive your Google password, and we do not access your contacts, Gmail, Google Drive, calendar or any other Google data.

When you sign in with Facebook

With your permission, Facebook shares your first and last name, your email address and your Facebook user ID. We use these only to create your account and sign you in. We do not post to Facebook or read your friends list, messages or other Facebook data.

When you create an account with your email

Your name, email address and password (stored only in scrambled, hashed form, never readable by us), and your phone number if you add it. To confirm your email we send you a one-time code.

When you place an order

With an account or as a guest, we collect:

• your name, email address and phone number;
• your delivery and billing address;
• what you ordered, prices, currency, gift card codes used, and the order, payment and shipping status;
• for shipments outside the EU, the customs information carriers require (such as item descriptions and values).

Payments

Card payments are processed by Stripe. You enter your card details directly with Stripe; we never see or store your full card number or security code. Stripe tells us whether the payment succeeded.

Gift cards

When you buy a gift card for someone, you give us their name and email address so we can send it to them. Please only do this if you know they are happy for you to share their details. We use them only to deliver the gift card and, if it is about to expire, to remind them.

Returns

If you return an item, we keep the details of your return request, such as the items, the reason and the outcome.

Your account activity

Your wishlist, shopping bag, saved addresses and product reviews you write. Reviews are shown on the product page with your username.

When you contact us

What you send us through the contact form, by email, by phone or on WhatsApp, together with your name and contact details, so we can answer you and keep a record of your request.

How you use the website

Like most websites, our servers record technical information such as your IP address, browser type and the pages requested, to keep the site running and secure. We also use Microsoft Clarity to understand how pages are used (for example clicks and scrolling) so we can improve the site; Clarity hides form inputs and personal details, and we run it without analytics cookies.

• From you – when you create an account, place an order, write a review, buy a gift card or contact us.
• Automatically – technical and usage information from your browser while you use the website.
• From Google or Facebook – only if you choose to sign in with them, and only the details listed above.
• From our service providers – Stripe tells us whether a payment succeeded, and FedEx and DHL tell us where your parcel is.
• From someone else – if a friend buys you a gift card, they give us your name and email address.

We use your information only to:

• sign you in and run your account (authentication, profile, saved addresses, wishlist and bag);
• process and deliver your orders (payment, invoices, shipping, customs, returns and refunds);
• send you service emails such as order confirmations, shipping updates, one-time codes and password resets;
• answer your questions and handle support tickets;
• keep the website safe and prevent fraud and misuse;
• improve the website using usage information;
• meet our legal obligations, for example keeping invoices for accounting and tax.

Under the EU General Data Protection Regulation (GDPR), we must have a legal reason (a “legal basis”) for each use:

Where we rely on your consent, you can withdraw it at any time. We only use your information for a new purpose if it fits with why we collected it; otherwise we will tell you first.

If you don’t give us some information

Some details are needed to complete your order, such as your name, delivery address and email address. If you don’t provide them, we can’t process or deliver your order.

Information we receive from Google or Facebook sign-in (your name, email address and account ID) is used only to create your I Want Jewels account and sign you in. Specifically:

• we never sell this data or use it for advertising;
• we do not share it with anyone, except the service providers listed below that host our website and send our emails, or where the law requires it;
• our staff do not read it except when needed for security, to help you with a request, or to comply with the law;
• we request only the basic sign-in permissions (name, email address and account ID) and nothing more.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

You can disconnect I Want Jewels from your account at any time: for Google at myaccount.google.com/permissions, and for Facebook under Settings & privacy → Settings → Apps and websites. Disconnecting stops further sharing.

We never sell or rent your personal information. We share it only with the service providers that help us run the shop, and only what each one needs to do its job for us:

• Stripe – processes card payments;
• FedEx and DHL Express – deliver your orders (name, address, phone number and, for customs, item details);
• Google – Google Sign-In, and Google Workspace, which we use to send our emails;
• Meta (Facebook) – Facebook Login;
• Netlify – hosts the website;
• Amazon Web Services – runs our servers and stores product images;
• MongoDB Atlas – our database;
• Microsoft Clarity – website usage analytics.

Stripe processes payment information under its own privacy policy. Product reviews you write are public and show your username.

These providers may only use your information to provide their service to us. We may also disclose information when the law requires it (for example to tax authorities or a court), or to protect our rights or your safety. If our business were ever sold or merged, your information would be transferred only under this policy, and we would tell you.

We only send emails connected to your account and orders, for example:

• a welcome email and one-time codes to confirm your email, sign in safely or change your details;
• order confirmations, shipment tracking and delivery confirmations;
• gift card emails to you and to the person you send a gift card to, including an expiry reminder;
• updates on returns and answers to your messages.

We do not send marketing or newsletter emails at the moment. If we start, we will only send them if you have agreed (or, for existing customers, where the law allows it), and every message will include an unsubscribe link.

Some of our providers process data outside the European Economic Area, for example in the United States. When that happens, the transfer is protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

• all traffic to iwantjewels.com is encrypted (HTTPS);
• passwords are stored only in hashed form, and sensitive keys are stored encrypted;
• card payments are handled by Stripe, which is certified to the PCI DSS security standard;
• access to customer data is limited to staff who need it, and admin access is protected.

No system is perfectly secure, but we work to protect your information and will inform you and the authorities if a breach affects you, as the law requires.

• Account information – until you delete your account or ask us to delete it.
• Orders and invoices – as long as Belgian accounting and tax law requires; after your account is deleted we keep them only for that purpose.
• Support messages – as long as needed to resolve your request and any follow-up.
• Server logs and usage data – only for a limited period, for security and to improve the website.

Under the GDPR you have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that is wrong or incomplete;
• have your information deleted;
• restrict or object to how we use it;
• receive your information in a portable format;
• withdraw your consent at any time, where we rely on it.

Using your rights is free. To protect your account, we may ask you to confirm your identity before we act on a request. If we can’t fully meet a request, for example because the law requires us to keep invoices, we will explain why.

To use any of these rights, email info@iwantjewels.com from the email address on your account. We reply within one month. If you are not satisfied, you can complain to the Belgian Data Protection Authority (dataprotectionauthority.be) or the authority in your own country.

To delete your account and personal information, including anything we received from Google or Facebook:

1. 1Email info@iwantjewels.com with the subject “Delete my data”, from the email address you use to sign in.
2. 2We may ask you to confirm the request so that nobody else can delete your account.
3. 3We delete your account and personal information within 30 days and confirm by email. Orders and invoices we must keep by law are kept only for that purpose and then deleted.

We use a small number of cookies and browser storage items that the website needs to work:

• your sign-in session, so you stay logged in;
• your guest shopping bag, so it is still there when you return;
• your language and currency choice.

These are strictly necessary, so they don’t need your consent. If you choose to sign in with Google or Facebook, those services may set their own cookies under their own privacy policies.

We do not use advertising cookies. Microsoft Clarity runs without analytics cookies. You can clear cookies and site data in your browser settings at any time; you will then be signed out and a guest bag will be emptied.

Our website links to other services, such as our Instagram, Facebook and TikTok pages, WhatsApp, and Google or Facebook sign-in. When you use them, their own privacy policies apply, and we are not responsible for how they handle your information. We recommend reading their policies.

Our website is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us personal information, contact us and we will delete it.

We may update this policy when our services or the law change. The date at the top shows the latest version. If a change significantly affects how we use your information, we will tell you by email or on the website before it takes effect.