Last updated: 4 November 2026
1. Introduction
ECLIPSA (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share personal information when you visit eclipsajewelry.com, purchase our products, contact us or otherwise interact with our online store.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.
2. Data Controller
The data controller responsible for your personal information is:
Business name: ECLIPSA Jewelry
Business ID (Y-tunnus): 3661545-3
Country: Finland
Email: eclipsa.jwlr@gmail.com
Postal address: Huutoniementie 6 B 21, 65320, Vaasa
For questions concerning your personal data or this Privacy Policy, please contact us using the email address above.
3. Personal Data We Collect
Depending on how you interact with our website, we may collect the following information.
Contact and identification information
Name
Email address
Telephone number
Billing and shipping addresses
Order and transaction information
Products purchased
Order history and order numbers
Payment status and transaction details
Shipping and delivery information
Returns, refunds and customer service requests
Payments are processed through third-party payment providers. We do not receive or store your complete payment card details.
Technical and website usage information
When you visit our website, certain technical information may be collected, including your IP address, browser type, device information, cookie identifiers and information about how you interact with our store.
Communications
If you contact us, we may process the information you provide, including messages, enquiries and correspondence relating to your orders.
Marketing preferences
If you subscribe to our newsletter or agree to receive marketing communications, we may process your contact information and subscription preferences.
4. How and Why We Use Your Data
We process personal data for the following purposes and on the following legal bases:
Processing and fulfilling orders
We use your information to confirm purchases, receive payments, prepare jewellery, arrange delivery and provide order-related communications.
Legal basis: performance of a contract.
Customer support
We use your information to answer questions, manage returns, resolve complaints and provide assistance with purchases.
Legal basis: performance of a contract, compliance with legal obligations or our legitimate interests, depending on the circumstances.
Accounting and legal compliance
We retain information required for bookkeeping, taxation and compliance with applicable laws.
Legal basis: compliance with legal obligations.
Website security and operation
We process certain technical information to maintain website functionality, prevent fraud and protect our store.
Legal basis: our legitimate interests or compliance with legal obligations, as applicable.
Marketing communications
We may send newsletters, product updates and promotional communications where permitted by applicable law.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing emails at any time using the unsubscribe link or by contacting us.
Analytics and optional cookies
Where required by law, we use analytics, advertising and other non-essential cookies only after obtaining your consent.
5. Sharing Personal Data
We share personal information only when necessary to operate our business, provide services or comply with legal requirements.
Depending on the services used, recipients may include:
Shopify, which provides our online store and related technical services.
Payment service providers, which securely process payments and refunds.
Posti and other delivery providers, which transport and deliver orders.
Accounting and professional service providers, where necessary for business administration.
Technical, analytics and marketing service providers, where applicable and subject to appropriate legal safeguards.
Public authorities, where disclosure is required by law.
Some service providers act as data processors on our behalf, while others may process certain information as independent data controllers.
We do not sell personal data.
6. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (EEA).
Where such transfers occur, we take steps to ensure that appropriate safeguards are in place in accordance with GDPR requirements.
These safeguards may include European Commission adequacy decisions, Standard Contractual Clauses or other legally recognised transfer mechanisms.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support essential website functions, such as shopping cart functionality, checkout and security.
We may also use optional cookies for analytics, personalisation or marketing.
Where consent is legally required, optional cookies will only be used after you have given your consent.
You can manage or withdraw your cookie preferences through the cookie settings available on our website.
Further information about the cookies used by our store is available through our cookie preferences interface.
8. How Long We Keep Your Data
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.
Order and transaction information may be retained for the periods required under Finnish accounting, taxation and consumer protection legislation.
Customer service correspondence is retained only for as long as reasonably necessary to resolve enquiries, manage potential claims or meet legal obligations.
Marketing information is retained until you withdraw your consent, unsubscribe or another applicable retention limit is reached.
Technical information is retained according to the relevant purpose and the retention settings of the services used.
When personal data is no longer required, it is deleted or anonymised where appropriate.
9. Your Rights
Under GDPR, you may have the right to:
Access the personal data we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal data.
Request restriction of certain processing activities.
Object to processing based on legitimate interests.
Receive certain personal data in a portable format.
Withdraw consent at any time where processing is based on consent.