Privacy Policy

Last updated: 19 July 2026

1. Introduction

This Privacy Policy explains how Tatiana Marques Jewelry collects, uses, stores, shares and protects personal data when an individual:

• visits or uses our website;

• purchases or enquires about a jewel;

• requests a quotation;

• books a consultation;

• commissions a bespoke jewel;

• supplies jewelry, gold, gemstones, pearls or other materials;

• requests a repair, restoration or maintenance service;

• subscribes to marketing communications;

• communicates with us by email, telephone, forms, social media or WhatsApp;

• submits a review or testimonial; or

• otherwise interacts with our business.

This Policy should be read together with our Terms of Service, Return and Refund Policy, Shipping Policy and Cookie Preferences.

Nothing in this Policy limits any mandatory privacy or data-protection rights.

2. Data Controller

The controller responsible for the processing of personal data is:

Fairies Ceremony - Unipessoal Lda.
Trading as Tatiana Marques Jewelry

Portuguese company and tax identification number: 515 901 245

Registered office:

Rua da Carreira de Tiro, Bateria 200
Caixa Postal 247
6200-349 Covilhã
Portugal

Email: geral@tatianamarquesjewelry.com

Telephone and WhatsApp: +351 966 690 768

For privacy and security reasons, the address of the private studio is not publicly disclosed.

3. Personal Data We May Collect

Depending on the nature of the interaction, we may collect the following categories of personal data.

3.1 Identification and contact information

This may include:

• full name;

• email address;

• telephone number;

• WhatsApp number;

• billing address;

• delivery address;

• country of residence;

• tax identification number, where required;

• preferred language; and

• communication preferences.

3.2 Order and transaction information

This may include:

• products purchased;

• services requested;

• order number;

• quotation and invoice information;

• payment status;

• payment method;

• delivery method;

• shipping and tracking information;

• returns;

• refunds;

• repairs;

• complaints; and

• after-sales assistance.

Tatiana Marques Jewelry does not normally receive or store complete payment-card details. Those details are processed directly by the relevant payment provider.

3.3 Bespoke jewelry and consultation information

For bespoke projects, we may collect:

• style and design preferences;

• preferred metals, colors, gemstones and pearls;

• ring size and other measurements;

• budget;

• desired delivery date;

• wedding, anniversary or other event date;

• engraving wording;

• names, initials or dates to be engraved;

• photographs and inspiration images;

• sketches and files supplied by the customer;

• personal stories or symbolism relevant to the design;

• consultation notes;

• design approvals;

• revision requests; and

• records of the final specifications.

Please avoid providing personal information that is not reasonably necessary for the project.

3.4 Customer-supplied materials

Where a customer supplies jewelry, precious metal, gemstones, pearls or other materials, we may collect and retain:

• a description of the materials;

• photographs and video;

• gross weight;

• a video recording of the weighing process;

• visible hallmark or responsibility-mark information;

• apparent condition;

• details of stones and components;

• declared ownership;

• instructions concerning reuse and leftovers; and

• records of the work authorized by the customer.

3.5 Communications

We may retain communications sent through:

• email;

• contact forms;

• WhatsApp;

• telephone follow-up notes;

• social-media messages;

• online consultation tools; and

• other agreed written channels.

3.6 Reviews, testimonials and user-provided content

Where a customer submits a review, testimonial, photograph or story, we may collect:

• the content submitted;

• the customer’s name or chosen display name;

• the relevant project or product;

• location, where voluntarily supplied;

• photographs; and

• consent or authorization records.

Identifiable customer stories, private photographs and personal information will not be published for marketing purposes without an appropriate legal basis, normally specific permission.

3.7 Website and device information

When a person uses the website, we or our service providers may collect:

• IP address;

• device type;

• browser type;

• operating system;

• approximate location derived from technical information;

• pages viewed;

• links clicked;

• date and time of visits;

• referring website;

• shopping-cart activity;

• checkout activity;

• purchase attribution;

• cookie identifiers;

• advertising identifiers; and

• interactions with emails or marketing campaigns.

The collection of non-essential analytics and advertising data is subject to applicable consent requirements.

3.8 Fraud-prevention and security information

We may process information required to:

• verify a high-value transaction;

• prevent fraud;

• investigate suspicious activity;

• protect customer accounts;

• prevent unauthorized access; and

• protect the safety and property of the business and its customers.

We will not request more information than is reasonably necessary for these purposes.

4. How We Collect Personal Data

Personal data may be collected:

• directly from the customer;

• through the website or checkout;

• through contact and bespoke-jewelry forms;

• during consultations;

• through email, SMS or WhatsApp;

• through payment providers;

• through delivery and logistics providers;

• from a person placing an order on behalf of another person;

• from fraud-prevention and security services;

• from social-media interactions;

• through cookies and similar technologies; and

• from professional partners involved in a service requested by the customer.

Where another person provides personal data about an intended recipient, family member or event participant, the person providing the data confirms that they are entitled to do so.

5. Purposes and Legal Bases for Processing

We process personal data only where there is an appropriate legal basis.

5.1 Steps before entering into a contract

We may process personal data to:

• respond to an enquiry;

• understand a jewelry request;

• schedule a consultation;

• prepare a quotation;

• evaluate the technical feasibility of a project;

• recommend materials or services; and

• prepare a bespoke proposal.

5.2 Performance of a contract

We may process personal data to:

• confirm and manage an order;

• develop a bespoke design;

• record design approval;

• purchase materials;

• manufacture a jewel;

• process or verify payment;

• perform a repair or restoration;

• manage customer-supplied materials;

• arrange hallmarking or specialist services;

• organize delivery or collection;

• provide order updates;

• manage returns and refunds;

• provide after-sales assistance; and

• comply with the agreed guarantee or conformity procedures.

5.3 Compliance with legal obligations

We may process and retain data where necessary for:

• invoicing;

• accounting;

• tax compliance;

• consumer-protection obligations;

• legal guarantee obligations;

• precious-metals and hallmarking requirements;

• prevention and reporting of unlawful activity;

• regulatory requests;

• complaints;

• legal proceedings; and

• compliance with court or authority orders.

5.4 Legitimate interests

Where our interests do not override the individual’s rights, we may process data for legitimate interests including:

• protecting the website and business;

• preventing fraud and abuse;

• maintaining records of approvals and instructions;

• documenting unique jewelry and repairs;

• maintaining product traceability;

• protecting intellectual property;

• improving services and customer experience;

• measuring non-intrusive business performance;

• managing professional relationships;

• recovering unpaid amounts;

• establishing, exercising or defending legal claims; and

• maintaining appropriate security records.

5.5 Consent

Where required, we rely on consent for activities including:

• email marketing;

• promotional SMS;

• non-essential analytics cookies;

• personalized advertising;

• certain marketing profiling;

• publication of testimonials;

• publication of identifiable customer stories;

• use of private customer photographs in marketing; and

• any other activity for which consent is the appropriate legal basis.

Consent may be withdrawn at any time without affecting processing already carried out lawfully before withdrawal.

6. Marketing Communications

Providing an email address or telephone number for an order, quotation or consultation does not automatically constitute consent to receive promotional marketing.

Where a person has subscribed or another lawful basis applies, we may send:

• newsletters;

• new collection announcements;

• invitations;

• educational jewelry content;

• product recommendations;

• abandoned-cart reminders;

• browse reminders;

• post-purchase communications;

• review requests; and

• information about services or events.

Every promotional email will contain an unsubscribe method.

SMS marketing will be sent only where the necessary permission or other valid legal basis exists.

A person may also contact us at geral@tatianamarquesjewelry.com to change their marketing preferences.

Unsubscribing from marketing does not prevent necessary transactional communications concerning an order, payment, delivery, repair or active project.

7. Shopify

Our online store is hosted by Shopify.

Shopify provides services including:

• website hosting;

• checkout;

• order management;

• customer accounts;

• store security;

• fraud prevention;

• analytics;

• privacy controls; and

• related ecommerce functionality.

Shopify may process customer and visitor data on our behalf and, for certain services, may act under its own responsibilities as described in its consumer privacy information.

More information is available through the Shopify Consumer Privacy Policy.

After pasting this Policy, hyperlink the words “Shopify Consumer Privacy Policy” to Shopify’s official consumer privacy page.

8. Shopify Network Intelligence and Data Sharing Choices

Where Shopify Network Intelligence or related enhanced Shopify services are enabled, Shopify may process certain customer interactions together with information from other Shopify merchants to provide enhanced services such as fraud prevention, analytics, personalization or advertising-related functionality.

Where applicable, consent and opt-out choices submitted through our cookie banner, Global Privacy Control or Shopify data-sharing opt-out tools will be respected in accordance with the relevant settings and legal requirements.

Customers in eligible regions may use the Your Privacy Choices or data-sharing opt-out link displayed in the website footer.

This section applies only to the extent that the relevant Shopify functionality is enabled.

9. Klaviyo

We may use Klaviyo for:

• email marketing;

• SMS marketing;

• signup forms;

• customer segmentation;

• email and website interaction analysis;

• abandoned-cart or browse reminders;

• post-purchase communications;

• review requests; and

• collection and display of customer reviews.

Klaviyo may process contact, order, behavioral and consent information as necessary to provide these services.

Marketing activities conducted through Klaviyo remain subject to the customer’s consent and communication preferences where required.

10. Payment and Financing Providers

Payments may be processed through providers including:

• Viva.com;

• PayPal;

• Klarna;

• Cofidis, when available;

• banks;

• card networks; and

• other payment methods shown at checkout.

These providers may independently process personal data to:

• authorize payments;

• prevent fraud;

• verify identity;

• comply with financial regulations;

• manage installments;

• assess creditworthiness; and

• recover amounts due.

A payment or financing provider may carry out automated checks or credit decisions under its own privacy policy.

Tatiana Marques Jewelry does not control or guarantee the outcome of a financing decision.

11. Transport, Logistics and Insurance

We may share the minimum information necessary with:

• carriers;

• pickup-point providers;

• customs agents;

• logistics companies;

• shipment-security providers; and

• transport insurers or coverage providers.

This information may include:

• recipient name;

• delivery address;

• telephone number;

• email address;

• parcel information;

• declared value where required;

• customs documentation; and

• delivery instructions.

For security reasons, the external packaging will not unnecessarily identify the contents as jewelry.

12. Specialist Partners and the Portuguese Assay Office

Where necessary for a requested project or service, data and relevant project information may be shared with:

• stone setters;

• engravers;

• lapidaries;

• gemological laboratories;

• commercial valuers;

• refiners;

• precious-metal laboratories;

• technical consultants;

• the Portuguese Assay Office; and

• other specialist professionals.

Only the information reasonably necessary for the service will be shared.

Where a partner is intended to provide an independent valuation, certificate or professional service directly, the customer will be informed where appropriate.

13. Accounting, Legal and Professional Advisers

Personal data may be shared where necessary with:

• accountants;

• auditors;

• lawyers;

• insurance advisers;

• information-technology providers;

• cybersecurity providers; and

• other professional advisers.

These recipients are required to process the information lawfully and appropriately.

14. Analytics and Advertising Technologies

Subject to activation and the required consent, we may use:

• Meta Pixel and related Meta business tools;

• Google Analytics;

• Google Ads;

• Pinterest Tag;

• TikTok Pixel;

• Klaviyo tracking;

• Shopify pixels; and

• similar analytics or advertising technologies.

These tools may help us:

• understand how the website is used;

• measure campaign performance;

• attribute sales;

• create advertising audiences;

• limit repetitive advertising;

• personalize marketing; and

• improve website performance.

In regions where consent is required, these non-essential technologies should not operate for the relevant purposes until valid consent has been provided.

The tools listed above may not all be active at the same time. This Policy describes the tools that may be used as the store’s marketing and analytics systems are configured.

15. YouTube and Embedded Content

The website may include videos or content embedded from YouTube or another third-party platform.

The provider may collect data when embedded content is loaded, viewed or played.

Where required, embedded content will be blocked until the visitor accepts the relevant cookie category.

A private YouTube Premium subscription used by Tatiana Marques Jewelry is not, by itself, a website-tracking technology.

16. WhatsApp

Customers may choose to communicate with us through WhatsApp.

Messages and contact information sent through WhatsApp are also processed under the provider’s own terms and privacy practices.

Customers should not send through WhatsApp:

• complete payment-card details;

• unnecessary identity documents;

• medical information;

• passwords; or

• other sensitive information not required for the project.

Where appropriate, we may ask the customer to provide documents through a more suitable channel.

17. Social Media

When a person interacts with Tatiana Marques Jewelry through Instagram, Facebook, Pinterest, TikTok, LinkedIn or another platform, the platform may independently process information under its own privacy policy.

We may process:

• public profile information;

• messages;

• comments;

• reactions;

• tagged content; and

• information voluntarily provided through the platform.

Private messages relevant to a quotation, order or dispute may be retained as part of the business record.

18. Cookies and Similar Technologies

The website uses cookies and similar technologies.

These may be categorized as:

Strictly necessary

Required for functions such as:

• navigation;

• shopping cart;

• checkout;

• security;

• fraud prevention;

• session management; and

• storage of privacy choices.

Preferences

Used to remember choices such as:

• language;

• country;

• currency; and

• display settings.

Analytics

Used to understand website performance, traffic and visitor interactions.

Marketing

Used to measure advertising, create audiences and personalize campaigns.

Where required by applicable law, non-essential cookies and technologies are activated only after consent.

Visitors can accept, reject or manage categories through the cookie banner and can later reopen Cookie Preferences through the website footer.

19. International Data Transfers

Some service providers may process personal data outside Portugal or the European Economic Area.

Where required, international transfers will rely on an appropriate legal mechanism, which may include:

• a European Commission adequacy decision;

• standard contractual clauses;

• binding corporate rules;

• an approved certification or contractual safeguard; or

• another lawful transfer mechanism.

Where a provider acts as an independent controller, its own privacy policy will describe the transfer arrangements it uses.

20. Retention of Personal Data

Personal data is retained only for as long as reasonably necessary for the relevant purpose, taking into account:

• the duration of the customer relationship;

• contractual requirements;

• accounting and tax obligations;

• legal guarantee periods;

• limitation periods;

• traceability of precious-metal articles;

• the need to retain design approvals;

• after-sales assistance;

• prevention of fraud;

• security;

• consent status; and

• the establishment or defence of legal claims.

Examples include:

Enquiries that do not result in a contract

These may normally be retained for up to 24 months after the last meaningful interaction, unless a shorter or longer period is justified.

Orders, invoices and contractual records

These are retained for the period required by applicable accounting, tax and commercial law.

Bespoke design and production records

Design approvals, specifications, measurements, materials records, photographs and production information may be retained for as long as reasonably necessary to:

• provide traceability;

• verify authenticity;

• provide after-sales assistance;

• manage legal guarantee matters;

• protect intellectual property; and

• defend legal rights.

Repairs and customer-supplied materials

Intake forms, photographs, weighing records, approvals and service records may be retained for the duration of the service and for a reasonable period afterwards for traceability, legal obligations and potential claims.

Marketing information

Marketing information is retained until:

• consent is withdrawn;

• the person objects;

• the information is no longer required; or

• it is removed under our retention process.

A minimal suppression record may be kept to ensure that an unsubscribe request continues to be respected.

Testimonials and published content

Testimonials and authorized customer content may be retained until:

• the authorization ends;

• consent is withdrawn where consent is the legal basis;

• the content is no longer relevant; or

• another lawful retention basis applies.

21. Security

We use technical and organizational measures considered appropriate to the nature, value and sensitivity of the information processed.

Measures may include:

• controlled access;

• account authentication;

• secure service providers;

• restricted studio information;

• data minimization;

• backups;

• fraud-prevention measures;

• staff or contractor confidentiality;

• secure transport procedures; and

• review of access to customer records.

No electronic transmission or storage system can guarantee absolute security.

Customers are responsible for protecting their own account credentials and notifying us of suspected unauthorized use.

22. Data Breaches

Where a personal-data breach occurs, we will assess the risk and take the actions required by applicable law.

Where legally required, the competent supervisory authority and affected individuals will be notified.

23. Data-Subject Rights

Subject to applicable legal conditions, individuals may have the right to:

• obtain confirmation that their data is being processed;

• access their personal data;

• correct inaccurate or incomplete data;

• request erasure;

• request restriction of processing;

• object to processing based on legitimate interests;

• object to direct marketing;

• request data portability;

• withdraw consent;

• request information about international-transfer safeguards; and

• lodge a complaint with a supervisory authority.

A request can be sent to:

geral@tatianamarquesjewelry.com

We may request reasonable information to verify the identity of the person making the request.

We will not normally charge for exercising a right, although a reasonable fee or refusal may be permitted where a request is manifestly unfounded or excessive.

24. Direct-Marketing Objection

An individual has the right to object at any time to the processing of personal data for direct-marketing purposes.

After an objection or unsubscribe request, promotional communications will stop within the time reasonably necessary to process the request.

Necessary service and transactional communications may continue.

25. Portuguese Supervisory Authority

A person may submit a complaint to the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados — CNPD

The individual may also contact the data-protection authority competent in their country of residence or workplace where applicable.

26. Additional Rights for Certain United States Residents

Depending on the person’s state of residence and whether the relevant law applies to Tatiana Marques Jewelry, certain United States residents may have rights including:

• the right to know or access certain personal information;

• the right to correction;

• the right to deletion;

• the right to portability;

• the right to opt out of certain targeted advertising;

• the right to opt out of the sale or sharing of personal data;

• the right to limit certain uses of sensitive data; and

• the right not to be discriminated against for exercising a privacy right.

Tatiana Marques Jewelry does not knowingly sell personal data in exchange for money.

Certain advertising or analytics activities may nevertheless be legally defined as “sharing”, “targeted advertising” or another regulated disclosure in some jurisdictions.

Where available, eligible users may exercise an opt-out through the Your Privacy Choices or data-sharing opt-out link in the website footer or by contacting us.

We may need to verify the request and may accept requests through an authorized agent where required by law.

27. Other International Rights

Customers in the United Arab Emirates or another country may have additional rights under mandatory local law.

Where such rights apply, this Policy will be interpreted and applied consistently with those requirements.

28. Automated Decision-Making

Tatiana Marques Jewelry does not itself normally make decisions based solely on automated processing that produce legal or similarly significant effects concerning a customer.

Payment, anti-fraud or financing providers may use automated systems under their own policies and legal responsibilities.

29. Children

The website is not intended for independent use or contracting by children.

Orders relating to children’s jewelry must be placed by an adult with legal capacity.

We do not knowingly collect personal data directly from a child for marketing purposes.

30. Third-Party Links

The website may link to third-party websites.

Tatiana Marques Jewelry is not responsible for the privacy practices of an external website. Users should review the relevant third-party privacy information before providing personal data.

31. Changes to this Privacy Policy

We may update this Policy when:

• our services change;

• a new provider or technology is introduced;

• legal requirements change;

• Shopify settings change;

• new markets are activated; or

• our processing purposes change.

The updated version will display a new “Last updated” date.

Where a material change requires additional notice or consent, we will take the appropriate steps.

32. Original Language

This Privacy Policy was originally drafted in English.

Portuguese and Spanish translations may be provided for customers in the relevant markets.

In the event of ambiguity or inconsistency, the English version will serve as the original drafting reference, without limiting mandatory data-protection or consumer rights applicable to the individual.

33. Contact

Questions, requests or concerns relating to personal data may be sent to:

Tatiana Marques Jewelry
Operated by Fairies Ceremony - Unipessoal Lda.

Email: geral@tatianamarquesjewelry.com

Telephone and WhatsApp: +351 966 690 768

Registered office:

Rua da Carreira de Tiro, Bateria 200
Caixa Postal 247
6200-349 Covilhã
Portugal