Privacy policy

Privacy Policy
Last updated: January 2, 2026

Gemza Iringó operates this store and website, including all related information, content, features, tools, products, and services (the “Services”), to provide you with a curated shopping experience. Gemza Iringó is powered by Shopify, which enables us to provide the Services.

This Privacy Policy explains how we collect, use, and disclose your personal data when you visit, use, or make a purchase via the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs the collection, processing, and disclosure of your personal data.

By using the Services, you acknowledge that you have read this Privacy Policy and understand how we collect, use, and disclose your data.

1. Personal Data We Collect or Process

When we say “personal data,” we mean any information that identifies or can reasonably be linked to you. Personal data does not include anonymized or de-identified information. Depending on your interactions with the Services, where you reside, and applicable law, we may collect the following categories of personal data:

  • Contact information: Name, billing/shipping address, phone number, email address.

  • Financial information: Credit/debit card details, payment information, transaction history.

  • Account information: Username, password, preferences, and settings.

  • Transaction information: Items viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled.

  • Communications: Customer support inquiries or other communications with us.

  • Device information: IP address, browser, network, and other device identifiers.

  • Usage information: How and when you interact with the Services.

2. Sources of Personal Data

We may collect personal data from:

  1. Directly from you: When you create an account, communicate with us, or provide information through the Services.

  2. Automatically: Through cookies, analytics, and similar technologies while using the Services.

  3. From service providers: Third-party vendors processing data on our behalf.

  4. From partners or other third parties: When necessary for services or marketing purposes.

3. How We Use Your Personal Data

We may use your personal data for the following purposes:

  • Providing and improving Services: Process orders, manage accounts, facilitate shipping and returns, personalize recommendations, and improve the Services.

  • Marketing and advertising: Send promotional communications (email, SMS, or post) and show relevant online ads. Consent is obtained where required.

  • Security and fraud prevention: Authenticate accounts, detect fraudulent activity, protect public safety, and secure our Services.

  • Communication: Respond to inquiries, provide customer support, and maintain our business relationship with you.

  • Legal obligations: Comply with laws, respond to legal requests, or enforce policies.

4. Disclosure of Personal Data

We may share your personal data in the following situations:

  • With Shopify and service providers (payment processors, IT services, fulfillment, analytics, etc.)

  • With business and marketing partners for promotional purposes, subject to applicable law and your consent

  • When you request or consent to share your data (e.g., for social media logins or shipping)

  • With affiliates or within our corporate group

  • For business transactions (merger, acquisition, bankruptcy) or legal compliance

5. Relationship with Shopify

Our Services are hosted on Shopify. Shopify processes personal data to provide and improve the Services. Data may be transferred to countries outside the EU/EEA, subject to safeguards like the Standard Contractual Clauses. For more information, see the Shopify Privacy Policy.

6. Third-Party Websites and Links

The Services may include links to third-party websites. We are not responsible for their privacy practices. Information you provide on third-party sites may be visible to others and subject to their policies.

7. Children’s Data

The Services are not intended for children under 15 years old. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data, contact us to request deletion.

8. Security and Data Retention

We implement appropriate measures to protect your data, but no system is completely secure. Retention periods depend on business needs, legal obligations, and dispute resolution.

9. Your Rights under GDPR

If you reside in France or the EU, you may have the following rights, subject to limitations:

  • Right of access: Request a copy of your personal data

  • Right to rectification: Correct inaccurate or incomplete data

  • Right to erasure: Request deletion of your data

  • Right to restriction of processing: Limit processing in certain circumstances

  • Right to object: Object to certain processing, including marketing

  • Right to data portability: Receive a copy of your data in a machine-readable format

  • Withdrawal of consent: Withdraw previously given consent

To exercise your rights, contact us using the details below. We may require verification of your identity before processing requests.

10. Complaints

You have the right to lodge a complaint with the CNIL (French data protection authority) if you believe your rights are violated: https://www.cnil.fr.

11. International Data Transfers

Your data may be transferred, stored, and processed outside France or the EU/EEA. Transfers are based on recognized safeguards like Standard Contractual Clauses or equivalent mechanisms.

12. Changes to This Policy

We may update this Privacy Policy to reflect operational, legal, or regulatory changes. Updates will be posted on this website with a revised “Last Updated” date.

13. Contact

For questions or to exercise your rights, contact:

Gemza Iringó
Email: gemzairingo@gmail.com
Address: 6 Boulevard Loubet, Fuveau, 13710, France

We are the data controller of your personal data under applicable data protection laws.