Privacy Policy

1. Data Controller

The controller of your personal data is Gemzara, 48 Rue Blondel, 51100 Reims, France, contactable at contact@gemzara.com.

2. Data We Collect

We collect the data needed for your order (name), delivery (postal address, phone), payment (handled by our provider, with no storage of your bank details on our side) and browsing (IP address, cookies, pages visited).

3. Purposes and Legal Basis (Art. 6 UK GDPR)

• Fulfilling your order and delivery — performance of a contract (Art. 6(1)(b)).
• Invoicing and accounting obligations — legal obligation (Art. 6(1)(c)).
• Fraud prevention and site security — legitimate interest (Art. 6(1)(f)).
• Non-essential cookies and analytics — consent (Art. 6(1)(a)).

4. Recipients

Your data is shared with our logistics providers, our payment provider (Stripe) and our hosting provider Cloudflare. We do not sell your data to third parties.

5. Retention Period

Order and invoicing data: kept for 10 years (accounting obligation). Account and browsing data: 3 years from last contact. Cookies: 13 months maximum.

6. Your Rights

You have the right of access, rectification, erasure, restriction, portability and objection. To exercise them, email contact@gemzara.com.

7. Complaints

You have the right to lodge a complaint with the national supervisory authority: ICO (Information Commissioner's Office) — www.ico.org.uk.

8. Cookies

Non-essential cookies (analytics, marketing) are only set after your prior consent, collected via our cookie banner. You may withdraw your consent at any time.

← Back to home