Privacy policy
Last updated: August 2026
This Privacy Policy explains how Tatiana Marques Jewelry collects, uses, stores and protects personal data and how individuals may exercise their data protection rights.
Tatiana Marques Jewelry processes personal data in accordance with the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), applicable Portuguese data protection law and other relevant legislation. The GDPR requires controllers to provide clear information about identity, purposes, legal bases, recipients, retention and individual rights.
1. DATA CONTROLLER
The data controller is:
Fairies Ceremony Unipessoal Lda.
Brand: Tatiana Marques Jewelry
Tax Identification Number: 515 901 245
Country of establishment: Portugal
Email: geral@tatianamarquesjewelry.com
Telephone / WhatsApp: +351 966 690 768
Website: www.tatianamarquesjewelry.com
Registered office: Rua da Carreira de Tiro, Bateria 200, Caixa Postal 247, nº 247, 6200-349 Covilhã, Portugal
For questions concerning privacy or personal data, please contact:
geral@tatianamarquesjewelry.com
Unless legally required in the future, Tatiana Marques Jewelry does not currently designate a Data Protection Officer.
2. SCOPE OF THIS POLICY
This Privacy Policy applies to personal data processed in connection with:
the Tatiana Marques Jewelry website;
online orders;
bespoke and bridal projects;
consultations;
client forms;
Jewelry Proposals;
Bespoke Design Agreements;
Client Gold Intake and Custody Forms;
repairs, alterations and maintenance services;
customer service;
email and WhatsApp communications;
newsletter subscriptions;
marketing communications;
social media interactions where Tatiana Marques Jewelry receives personal data;
shipping and collection;
payments and invoicing;
complaints and dispute resolution;
and other interactions with Tatiana Marques Jewelry.
3. WHAT IS PERSONAL DATA?
Personal data means information relating to an identified or identifiable individual.
This may include information such as a person's name, email address, telephone number, postal address, order history, correspondence, photographs, measurements or other information capable of being associated with that individual.
4. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with Tatiana Marques Jewelry, we may process the following categories of personal data.
Identity and Contact Information
This may include:
name;
billing and delivery address;
email address;
telephone number;
WhatsApp contact details;
country;
and other contact information you choose to provide.
Order and Transaction Information
This may include:
products ordered;
project references;
order dates;
prices;
payment status;
invoice information;
delivery details;
returns;
repairs;
maintenance history;
and transaction related correspondence.
Bespoke and Bridal Project Information
For bespoke, engagement, wedding and bridal commissions, we may process information such as:
design preferences;
personal stories voluntarily shared for the creative process;
wedding or event dates;
ring sizes and other measurements;
engraving text;
reference images;
gemstone preferences;
metal preferences;
project approvals;
budget or investment range;
and correspondence relating to the commission.
Client Owned Jewelry and Material Information
Where you provide existing jewelry, gold, gemstones or other materials, we may process:
photographs of the items;
visible hallmarks;
recorded weights;
descriptions;
condition notes;
project instructions;
ownership declarations;
gemstone information;
service history;
and associated project records.
Photographs, Videos and Technical Records
Tatiana Marques Jewelry may photograph or record jewelry, materials and technical details for purposes including:
intake documentation;
condition records;
design development;
quality control;
workshop records;
repair assessment;
project evidence;
authentication records;
and aftercare history.
These records may become personal data where they are linked to an identifiable client.
Communications
We may retain communications sent through:
email;
WhatsApp;
website forms;
social media;
telephone follow up records where appropriate;
or other agreed communication channels.
This may include project instructions, approvals, questions, complaints and other correspondence.
Payment Information
Payments may be processed by banks, card providers or third party payment providers.
Tatiana Marques Jewelry may receive information such as:
payment confirmation;
transaction identifier;
amount;
payment method;
billing details;
or payment status.
Tatiana Marques Jewelry does not necessarily receive or store full card details where payment is processed directly by an authorised payment provider.
Website and Device Information
Depending on your consent choices and the technologies used on the website, information may include:
IP address;
browser type;
device type;
operating system;
website activity;
referral source;
approximate location derived from technical data;
cookie identifiers;
and analytics or advertising information.
The use of cookies and similar technologies is explained separately in the Cookie Policy.
Newsletter and Marketing Information
Where you subscribe to marketing communications, we may process:
name;
email address;
subscription status;
marketing preferences;
engagement with communications where the relevant technology is lawfully used;
and consent records.
5. HOW WE COLLECT PERSONAL DATA
Personal data may be collected:
directly from you;
through the website;
when you place an order;
when you submit a form;
during a consultation;
through email or WhatsApp;
when you provide jewelry or materials;
through payment or delivery providers;
when you subscribe to communications;
through website technologies where permitted;
or from another person acting on your behalf.
We may also receive limited information from service providers where necessary to complete a transaction, payment, delivery or other requested service.
6. INFORMATION PROVIDED BY THIRD PARTIES
If another person places an order, arranges a gift, communicates on your behalf or provides your personal information to Tatiana Marques Jewelry, we may receive information indirectly.
Where required by the GDPR, information about the processing will be provided within the applicable legal timeframe.
The GDPR requires transparency not only when information is collected directly from the individual but also, subject to legal exceptions, when data is obtained from another source.
7. WHY WE PROCESS PERSONAL DATA
Tatiana Marques Jewelry processes personal data only where there is an appropriate legal basis.
The main purposes and legal bases are described below.
8. PERFORMANCE OF A CONTRACT OR STEPS BEFORE A CONTRACT
We may process personal data where necessary to:
respond to an enquiry about a potential project;
prepare a proposal;
arrange a consultation;
process an order;
develop a bespoke design;
source materials;
communicate project approvals;
manufacture jewelry;
perform a repair or alteration;
process payment;
arrange delivery;
provide certificates;
manage aftercare;
or otherwise perform a contract with you.
The legal basis is generally Article 6(1)(b) GDPR: processing necessary for performance of a contract or to take steps at your request before entering into a contract.
9. LEGAL OBLIGATIONS
Personal data may be processed where necessary to comply with legal obligations applicable to Tatiana Marques Jewelry.
This may include obligations relating to:
tax and accounting;
invoicing;
consumer protection;
product or transaction records;
anti fraud measures where legally required;
legal claims;
regulatory authorities;
or other statutory obligations.
The legal basis is Article 6(1)(c) GDPR.
10. LEGITIMATE INTERESTS
Where appropriate, Tatiana Marques Jewelry may process personal data on the basis of legitimate interests.
These interests may include:
protecting and documenting bespoke projects;
maintaining accurate project and service records;
preventing fraud;
protecting the business and clients;
responding to disputes;
establishing, exercising or defending legal claims;
maintaining website and information security;
improving internal processes;
and managing professional relationships.
Where legitimate interests are relied upon, Tatiana Marques Jewelry will consider whether those interests are overridden by the individual's rights and freedoms.
Article 13 GDPR requires the controller to identify the legitimate interests relied upon where processing is based on Article 6(1)(f).
11. CONSENT
Consent may be used where legally appropriate, including for certain:
marketing communications;
non essential cookies;
advertising technologies;
or other optional processing activities.
Where processing is based on consent, you may withdraw consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
12. MARKETING COMMUNICATIONS
Tatiana Marques Jewelry may send newsletters, brand communications, product launches, atelier stories, invitations or other marketing communications where there is a lawful basis to do so.
Where consent is required, marketing will only be sent after the necessary consent has been obtained.
You may unsubscribe at any time using the unsubscribe mechanism provided or by contacting:
geral@tatianamarquesjewelry.com
Transactional and service communications relating to an enquiry, appointment, existing order or project are not marketing communications and may continue where necessary to respond to your request, perform the contract or comply with legal obligations.
13. NEWSLETTER SUBSCRIPTIONS
Where you voluntarily subscribe to the Tatiana Marques Jewelry newsletter, we may process your email address and, where provided, your name and communication preferences.
Subscription information will normally be retained while the subscription remains active or until it is no longer reasonably necessary for the relevant purpose.
The CNPD uses the same general GDPR principle in its own privacy policy: newsletter data is retained while the subscription continues or until cancellation.
14. BESPOKE STORIES AND PERSONAL INFORMATION
Bespoke jewelry may be inspired by personal experiences, relationships, family history or meaningful events.
Clients may voluntarily disclose information of a personal nature during the creative process.
Tatiana Marques Jewelry will only use such information to the extent reasonably necessary for the project, communication or another purpose explained at the time.
Clients are not required to provide intimate or sensitive personal information unless it is genuinely relevant and they choose to do so.
Tatiana Marques Jewelry will not intentionally request special category personal data unless necessary and legally justified.
15. WEDDING AND BRIDAL INFORMATION
For bridal projects, we may process event dates, names, sizing information, relationship or ceremony information, delivery deadlines and other project specific details.
This information is used to manage the commission and ensure that the agreed project can be developed and delivered appropriately.
16. MEASUREMENTS AND SIZING DATA
Ring sizes, bracelet measurements and other physical measurements may be recorded where necessary for jewelry design, manufacture, alteration or aftercare.
These measurements are used only for relevant professional purposes and associated project records.
They are not processed for medical purposes.
17. CLIENT GOLD, JEWELRY AND GEMSTONE RECORDS
Where client owned materials are accepted, Tatiana Marques Jewelry may maintain detailed documentation linking those materials to the relevant client.
This may include:
intake photographs;
gross weight;
visible hallmark;
material description;
item condition;
instructions;
gemstone information;
technical notes;
and return or transformation records.
These records serve contractual, operational, security and evidentiary purposes.
18. PHOTOGRAPHY OF JEWELRY
Tatiana Marques Jewelry may photograph jewelry during design, manufacture, intake, repair, alteration and completion.
Photographs may be retained in the technical and creative archive.
Where photographs cannot reasonably identify a client, they may no longer constitute personal data.
Where they remain linked to identifiable client information, they will be processed in accordance with this Privacy Policy.
19. PUBLICATION OF COMPLETED JEWELRY
Tatiana Marques Jewelry may wish to photograph and showcase completed work through its website, portfolio, social media, editorial materials or other brand communications.
Where publication would reveal personal information, identify a client, reveal confidential project details or otherwise involve processing requiring consent or another legal basis, the appropriate permission or lawful basis will be obtained.
Unless confidentiality has been expressly agreed, Tatiana Marques Jewelry may retain non identifying images of its own creative work as part of its professional archive and portfolio, subject to applicable data protection and intellectual property law.
Specific confidentiality arrangements agreed for an individual project will be respected.
20. CUSTOMER SERVICE AND COMPLAINT RECORDS
Where you contact Tatiana Marques Jewelry regarding a problem, return, complaint or dispute, we may retain relevant correspondence, photographs, inspection records and supporting documents.
This information may be necessary to:
investigate the issue;
provide customer support;
comply with consumer law;
document the resolution;
or establish, exercise or defend legal claims.
21. LEGAL CLAIMS AND DISPUTES
Personal data may be retained and processed where reasonably necessary to establish, exercise or defend legal rights.
This may include records connected with:
unpaid invoices;
contract disputes;
consumer complaints;
insurance claims;
Alternative Dispute Resolution;
court or tribunal proceedings;
or other legal processes.
Information that would otherwise have been deleted may need to be retained for longer where it is relevant to an existing or reasonably anticipated legal claim.
22. PAYMENT PROVIDERS
Tatiana Marques Jewelry may use third party payment services.
Depending on the options made available, these may include banking services, card payment providers, PayPal, Klarna or other authorised payment or financing providers.
Those providers may process personal data as independent controllers or processors under their own privacy policies and legal obligations.
The exact providers available may change over time.
Where a payment provider acts independently, its own privacy notice will govern its separate processing activities.
23. SHOPIFY AND E COMMERCE TECHNOLOGY
The Tatiana Marques Jewelry website may use Shopify or related e commerce infrastructure to operate the online store, process orders, manage customer accounts and provide website functionality.
Where Shopify or another technology provider processes personal data on behalf of Tatiana Marques Jewelry, appropriate data protection arrangements will apply.
Where a provider independently determines purposes or means of processing, its own privacy documentation may also apply.
Because the exact applications and services installed on the website may change, this Privacy Policy should be reviewed whenever the website technology stack materially changes.
24. SHIPPING AND LOGISTICS PROVIDERS
Personal data may be shared with delivery, courier, postal, insurance or logistics providers where necessary to deliver or collect an order.
Information may include:
recipient name;
delivery address;
telephone number;
email;
parcel information;
declared value where required;
and customs documentation.
Only information reasonably necessary for the relevant delivery or logistics purpose will be shared.
25. SPECIALIST JEWELRY SERVICE PROVIDERS
Tatiana Marques Jewelry may work with selected specialist professionals or businesses for services such as:
gemstone sourcing;
gemological laboratories;
laser welding;
plating;
refining;
stone cutting;
stone setting;
engraving;
hallmarking;
or other specialist jewelry services.
Where necessary, limited project information may be shared with these providers.
Where possible, unnecessary identifying client information will not be shared.
26. PORTUGUESE ASSAY OFFICE AND AUTHORITIES
Where hallmarking or another legally required process applies, information may be provided to the Portuguese Assay Office, INCM or another competent authority to the extent required by law or operational procedure.
Personal data may also be disclosed to tax authorities, courts, regulators, law enforcement bodies or other public authorities where legally required.
27. PROFESSIONAL ADVISERS
Personal data may be shared where necessary with professional advisers such as:
accountants;
lawyers;
insurance providers;
auditors;
IT professionals;
or other advisers subject to appropriate confidentiality or professional obligations.
28. SERVICE PROVIDERS ACTING ON OUR BEHALF
Tatiana Marques Jewelry may use trusted providers for services including:
website hosting;
e commerce;
email;
newsletter distribution;
CRM or customer management;
cloud storage;
accounting;
IT support;
analytics;
security;
customer communications;
or business administration.
Where such providers process personal data on behalf of Tatiana Marques Jewelry, they are required to process it under appropriate contractual and data protection arrangements where required by the GDPR.
29. WE DO NOT SELL PERSONAL DATA
Tatiana Marques Jewelry does not sell personal data to third parties.
Personal data is disclosed only where there is an appropriate purpose and legal basis, such as performance of a service, legal obligation, legitimate business need or valid consent.
30. INTERNATIONAL DATA TRANSFERS
Some technology, payment, analytics, marketing, cloud or other service providers may process personal data outside Portugal or outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, Tatiana Marques Jewelry will rely on an appropriate legal mechanism where required, such as:
an adequacy decision;
Standard Contractual Clauses;
another safeguard recognised under the GDPR;
or another lawful transfer mechanism.
The GDPR requires information about international transfers and the safeguards used, and the CNPD specifically identifies adequacy decisions and appropriate safeguards as central mechanisms for international transfers.
31. DATA RETENTION
Tatiana Marques Jewelry does not retain personal data indefinitely simply because it has been collected.
Personal data is retained for as long as reasonably necessary for the purposes for which it was collected and for any additional period required by law.
The GDPR principle of storage limitation requires identifiable personal data to be kept no longer than necessary for the relevant purpose, subject to lawful exceptions.
Retention periods may vary according to the type of information.
32. ORDER, INVOICE AND ACCOUNTING RECORDS
Order, invoice, accounting and transaction records may need to be retained for the periods required by Portuguese tax, accounting or commercial law.
Where legal retention is mandatory, a request for deletion cannot require Tatiana Marques Jewelry to unlawfully destroy those records.
33. BESPOKE AND TECHNICAL PROJECT RECORDS
Bespoke project documentation may be retained for a reasonable period after completion because it may remain relevant to:
future maintenance;
repair history;
authentication;
Certificate of Authenticity records;
material specifications;
design history;
statutory conformity claims;
legal claims;
and provenance of a Tatiana Marques Jewelry creation.
Where records no longer need to remain linked to an identifiable individual, Tatiana Marques Jewelry may anonymise them while retaining non personal creative or technical information.
34. CLIENT MATERIAL CUSTODY RECORDS
Records relating to client owned gold, gemstones and jewelry may be retained for as long as reasonably necessary to document:
receipt;
custody;
transformation;
return;
technical losses;
service history;
ownership claims;
and related contractual or legal issues.
35. MARKETING DATA RETENTION
Marketing information will generally be retained while the marketing relationship remains active or until you unsubscribe, object or withdraw consent where consent is the applicable legal basis.
Limited information may be retained after an unsubscribe request to ensure that the opt out is respected.
36. COOKIE AND ANALYTICS DATA RETENTION
Retention periods for cookies, analytics and related technologies depend on the specific technology used.
Detailed cookie durations and providers will be identified in the separate Cookie Policy and consent management system where required.
37. SECURITY
Tatiana Marques Jewelry takes reasonable technical and organisational measures intended to protect personal data from:
unauthorised access;
unlawful processing;
accidental loss;
destruction;
alteration;
or inappropriate disclosure.
The GDPR expressly requires personal data to be processed with appropriate security and places accountability on the controller for demonstrating compliance.
Security measures may include access controls, trusted service providers, authentication, backup processes, secure devices and other measures appropriate to the nature of the information and business.
No electronic system can be guaranteed to be entirely risk free.
38. DATA BREACHES
Where a personal data breach occurs, Tatiana Marques Jewelry will assess the incident and comply with applicable GDPR notification and documentation requirements.
Where the law requires notification to the supervisory authority or affected individuals, the appropriate steps will be taken.
39. YOUR DATA PROTECTION RIGHTS
Subject to the conditions and limitations established by law, individuals may have rights including:
- access to personal data;
- rectification of inaccurate or incomplete data;
- erasure in certain circumstances;
- restriction of processing;
- data portability where applicable;
- objection to certain processing;
- withdrawal of consent where processing is based on consent;
- and the right to lodge a complaint with a supervisory authority.
The CNPD identifies these as core GDPR rights and explains that controllers are responsible for facilitating their exercise.
40. RIGHT OF ACCESS
You may ask whether Tatiana Marques Jewelry processes personal data concerning you and, where applicable, request access to that data and associated information.
The right of access includes information concerning purposes, categories of data, recipients, retention and international transfers, among other matters.
41. RIGHT TO RECTIFICATION
You may request correction of inaccurate personal data or completion of incomplete personal data.
The GDPR requires inaccurate information to be corrected without undue delay where the legal conditions are satisfied.
42. RIGHT TO ERASURE
You may request deletion of personal data where the legal conditions for erasure are met.
The right to erasure is not absolute.
Information may continue to be retained where processing remains necessary, for example, to comply with a legal obligation or establish, exercise or defend legal claims.
43. RIGHT TO RESTRICTION
In circumstances established by the GDPR, you may request that processing be restricted.
Restriction may apply, for example, while the accuracy of personal data or a relevant objection is being assessed.
The CNPD describes restriction as temporarily limiting the use of personal data in the circumstances established by Article 18 GDPR.
44. RIGHT TO DATA PORTABILITY
Where processing is based on consent or a contract and is carried out by automated means, you may have the right to receive qualifying personal data you provided in a structured, commonly used and machine readable format.
Where technically feasible, you may also request direct transfer to another controller.
The CNPD confirms that portability applies in these circumstances and principally covers data provided by the individual.
45. RIGHT TO OBJECT
You may have the right to object to processing based on legitimate interests.
Tatiana Marques Jewelry will then assess whether there are compelling legitimate grounds to continue processing or whether continued processing is necessary for legal claims or another lawful reason.
You may object to direct marketing at any time.
46. WITHDRAWAL OF CONSENT
Where processing relies on consent, consent may be withdrawn at any time.
Withdrawal does not affect processing lawfully carried out before withdrawal.
Where no other legal basis exists after withdrawal, the relevant processing will cease.
47. AUTOMATED DECISION MAKING AND PROFILING
Tatiana Marques Jewelry does not intend to make decisions producing legal or similarly significant effects solely through automated processing unless this is specifically disclosed and lawfully implemented.
Certain website, marketing or fraud prevention technologies may involve limited profiling or segmentation.
Where the GDPR requires specific information or rights concerning such processing, those requirements will be respected.
48. HOW TO EXERCISE YOUR RIGHTS
To exercise a data protection right, contact:
geral@tatianamarquesjewelry.com
Please explain which right you wish to exercise and provide sufficient information for Tatiana Marques Jewelry to identify the relevant records.
Where necessary to protect personal data, reasonable proof of identity may be requested.
Requests will be handled within the period required by the GDPR.
The CNPD notes that individuals may complain where a controller fails to respond within the applicable legal period or improperly refuses a request.
49. RIGHTS OF OTHER PEOPLE
A data protection request must not adversely affect the rights and freedoms of other individuals.
Where a record includes information concerning multiple people, Tatiana Marques Jewelry may need to redact or restrict certain information before responding.
This reflects the GDPR rule that the right to receive a copy of personal data must not adversely affect the rights and freedoms of others.
50. COMPLAINTS TO THE SUPERVISORY AUTHORITY
If you believe that your personal data has been processed unlawfully or that your data protection rights have not been respected, you may lodge a complaint with the competent supervisory authority.
In Portugal, the supervisory authority is:
Comissão Nacional de Proteção de Dados — CNPD
The availability of a complaint to the CNPD does not prevent you from contacting Tatiana Marques Jewelry first so that the concern can be addressed directly.
51. CHILDREN'S DATA
Tatiana Marques Jewelry products and bespoke services are primarily intended for adults.
Tatiana Marques Jewelry does not knowingly seek to collect personal data from children for marketing purposes.
Where jewelry is commissioned for a child, the contract and related communications should normally be managed by the parent, guardian or another legally authorised adult.
52. SOCIAL MEDIA
Tatiana Marques Jewelry maintains accounts on third party social media platforms.
Where you interact with those platforms, the platform provider may independently process personal data under its own privacy terms.
Tatiana Marques Jewelry may receive information that you choose to share publicly or directly with the brand.
The privacy practices of independent social media platforms are outside the direct control of Tatiana Marques Jewelry.
53. THIRD PARTY LINKS
The website may contain links to independent websites, payment providers, social networks, laboratories, carriers or other third party services.
This Privacy Policy does not govern the independent processing carried out by those third parties.
You should review their privacy information where appropriate.
54. COOKIES AND SIMILAR TECHNOLOGIES
Tatiana Marques Jewelry may use cookies and similar technologies for:
essential website functionality;
security;
shopping cart and checkout functions;
preferences;
analytics;
marketing;
and other website functions.
Non essential technologies will be used in accordance with applicable consent requirements.
Full details will be provided in the separate Cookie Policy.
55. CHANGES TO THIS PRIVACY POLICY
Tatiana Marques Jewelry may update this Privacy Policy where necessary to reflect changes in:
law;
technology;
service providers;
website functionality;
business operations;
or personal data processing practices.
The current version will be published on the website with its latest update date.
Where a change materially affects an existing processing activity and additional notification or consent is legally required, the appropriate steps will be taken.
56. CONTACT
For questions concerning this Privacy Policy or the processing of personal data, please contact:
Tatiana Marques Jewelry
Fairies Ceremony Unipessoal Lda.
Email: geral@tatianamarquesjewelry.com
Telephone / WhatsApp: +351 966 690 768
Website: www.tatianamarquesjewelry.com
Registered Office: Rua da Carreira de Tiro, Bateria 200, Caixa Postal 247, nº 247, 6200-349 Covilhã, Portugal