Privacy Policy

Last updated: October 15, 2026

1. Introduction

At ELARYA JEWELRY, we value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, retain and protect personal data when you visit our online store, purchase our products or contact our customer support team.

We process personal data in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), applicable Cyprus legislation and other relevant privacy laws.

2. Who We Are

Trading name: ELARYA JEWELRY

Business address provided: Spyrou Kyprianou Avenue 14, Office 1, Lemesos (Limassol), 3070, Cyprus

Email: support@elaryajewelry.com

Legal entity responsible for data processing: [INSERT LEGAL ENTITY NAME]

For questions regarding personal data, please contact us using the email address above.

3. Personal Information We Collect

Depending on how you interact with our store, we may collect the following categories of personal information:

• Full name and contact details.
• Email address and telephone number.
• Billing and shipping addresses.
• Order details, purchase history and transaction information.
• Payment confirmation and limited payment-related information supplied by payment processors.
• Device information, IP address, browser type and website usage data.
• Customer support communications and product reviews.
• Personalisation details, such as names, initials or messages requested for personalised jewellery.

Complete payment card details are generally processed by authorised payment service providers rather than stored directly by our store.

4. How We Use Personal Information

We may use your personal information to:

• Process, fulfil and deliver orders.
• Confirm payments and provide transaction updates.
• Respond to customer enquiries and support requests.
• Handle returns, refunds and legal warranty claims.
• Prevent fraud and protect our website.
• Comply with legal, tax and accounting obligations.
• Improve our services and shopping experience.
• Send promotional communications where legally permitted.

5. Legal Bases for Processing

Where the GDPR applies, we process personal data on one or more lawful bases, including contractual necessity, legal obligations, legitimate interests and consent.

When we rely on legitimate interests, we consider the impact on your rights and freedoms. Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Personal Information

We may share necessary personal data with trusted service providers, including:

• Shopify and ecommerce infrastructure providers.
• Payment processors and financial institutions.
• Shipping companies and logistics providers.
• Product suppliers and personalisation partners.
• Customer service and fraud prevention providers.
• Analytics and advertising partners, where applicable and permitted.
• Public authorities when legally required.

We require appropriate safeguards when personal information is processed by service providers. We do not disclose personal information for purposes incompatible with this policy.

7. Shopify

Our online store is powered by Shopify. Shopify may process personal information as a service provider or, for certain operations, as an independent controller in accordance with its applicable privacy terms.

Learn more at Shopify Consumer Privacy Policy.

8. Cookies and Tracking Technologies

Our website may use essential cookies, preference cookies, analytics cookies and advertising technologies.

Where required by law, non-essential cookies and similar technologies will only be activated after valid consent has been obtained. You may manage or withdraw your preferences through the privacy controls available on our website.

Essential cookies may be used without consent where legally permitted because they are necessary for the operation and security of the store.

9. International Data Transfers

Because we operate internationally, your personal information may be processed in countries outside your country of residence.

Where required under the GDPR, transfers outside the European Economic Area will rely on legally recognised safeguards, such as adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.

10. Data Retention

We retain personal information only for as long as necessary for legitimate business purposes, contractual requirements, legal obligations, dispute resolution and applicable record-keeping requirements.

When personal information is no longer required, we will delete or anonymise it as appropriate.

11. Data Security

We use appropriate technical and organisational measures designed to protect personal information against unauthorised access, loss, alteration and disclosure.

However, no electronic system can guarantee absolute security. Where required by law, we will notify the relevant authorities and affected individuals of qualifying personal data breaches.

12. Your Privacy Rights

Depending on applicable law, you may have the right to:

• Access your personal information.
• Request correction of inaccurate information.
• Request deletion of personal information.
• Restrict or object to certain processing activities.
• Request data portability.
• Withdraw consent where processing is based on consent.
• Object to direct marketing.
• Exercise applicable rights concerning automated decision-making.

To exercise your rights, contact support@elaryajewelry.com.

We will respond within the time limits required by applicable law. Under the GDPR, this is generally within one month, subject to lawful extensions.

13. Marketing Communications

We may send promotional communications where we have a valid legal basis. You can unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting customer support.

Transactional and essential order-related messages may still be sent when necessary.

14. Children's Privacy

Our store is intended for individuals legally permitted to make purchases or those acting with valid parental or guardian authorisation.

We do not intentionally collect children's information for targeted marketing. If we become aware of unlawful collection of a child's personal data, we will take appropriate action.

15. External Websites

Our website may contain links to third-party services. We encourage you to review their privacy policies, as we do not control the privacy practices of independent third parties.

16. International Privacy Rights

We respect applicable privacy rights in the European Economic Area, United Kingdom, Switzerland, Brazil and other markets where relevant laws apply to our activities.

Nothing in this policy limits any mandatory rights granted by applicable data protection legislation.

17. Complaints

If you have privacy concerns, please contact us first so we can investigate your request.

Where applicable, you may also lodge a complaint with a competent supervisory authority. In Cyprus, the relevant authority is the Office of the Commissioner for Personal Data Protection.

18. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical or operational changes. Updates will be published on this page with the relevant revision date.

19. Contact Us

ELARYA JEWELRY
Spyrou Kyprianou Avenue 14, Office 1
Lemesos (Limassol), 3070
Cyprus
Email: support@elaryajewelry.com