Terms & Conditions
This Privacy Policy explains how Caressimi Jewelry (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website [https://caressimi.mystudioportfolio.com] (the “Website”) and our invitation-only online store.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national data protection laws.
1) Controller (Who is responsible for processing your data)
Controller: [Company Legal Name]
Address: [Full Address]
Email: [privacy@domain.com]
Phone: [optional]
Company registration number / VAT ID: [optional]
If you have questions about this Privacy Policy or want to exercise your rights, please contact us at the email above.
2) Categories of personal data we collect
Depending on how you use the Website, we may collect the following:
A) Website usage data (technical data)
- IP address (may be stored in logs)
- Device and browser information
- Date/time of access
- Referrer URL
- Pages visited and actions taken on the Website
B) Access request / waiting list data
If you request access or join a waiting list, we may collect:
- First name, last name (if requested)
- Email address
- Any additional fields you submit in the form
- Metadata relating to your submission (time, IP address)
C) Account registration and invitation-only access data
If you register for an account (invitation-only), we may collect:
- Name
- Email address
- Password (stored in encrypted/hashed form; we cannot read it)
- Invitation code and information on who invited you (if applicable)
- Account status and approval history (e.g., “pending approval”, “approved”)
D) Order and checkout data
When you place an order, we may collect:
- Billing and shipping address
- Phone number (if required for delivery)
- Email address
- Ordered items and order history
- Payment status and transaction references (we do not store full credit card details)
E) Customer support communications
If you contact us, we may collect:
- Your contact details
- The content of your message and our correspondence
3) Purposes and legal bases for processing (GDPR Article 6)
We process personal data only when we have a lawful basis.
A) Providing the Website and ensuring security
Purpose: website operation, performance, troubleshooting, security monitoring, fraud prevention
Legal basis: legitimate interests (Art. 6(1)(f)) and, where applicable, legal obligations (Art. 6(1)(c))
B) Managing access requests / invitation-only membership
Purpose: process your request, manage curated access, communicate your status (e.g., waitlisted/approved), prevent unauthorized access
Legal basis: consent (Art. 6(1)(a)) for waitlist/access request forms and legitimate interests (Art. 6(1)(f)) for maintaining a curated private store and preventing abuse
C) Creating and administering user accounts
Purpose: allow login, manage approvals, allow members to access the private store
Legal basis: contract / pre-contract steps (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f))
D) Processing orders and delivering products
Purpose: accept payments, fulfill orders, handle shipping, provide customer service
Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation for invoices/accounting (Art. 6(1)(c))
E) Transactional communications
Purpose: accept payments, fulfill orders, handle shipping, provide customer service
Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation for invoices/accounting (Art. 6(1)(c))
