Privacy policy

Last updated: October 29, 2026

UpperEast Jewels runs this shop and website, including all the related information, content, features, tools, products and services, to give you, the customer, a good shopping experience (the “Services”). UpperEast Jewels is powered by Shopify, which allows us to provide the Services to you. This Privacy Policy explains how we collect, use and share your personal information when you visit or use the Services, buy something or make any other transaction through them, or otherwise contact us. This English version is for customers in the United Kingdom and Australia: it explains your rights under the UK GDPR and the Data Protection Act 2018 if you live in the UK, and under the Privacy Act 1988 and the Australian Privacy Principles if you live in Australia. Because we run the shop from Italy, in the European Union, the EU General Data Protection Regulation (GDPR) also applies to how we handle your personal information. The company responsible for your personal information (the data controller) is [COMPANY NAME], [REGISTERED ADDRESS]: our contact details are at the end of this policy. If our Terms of Service and this Privacy Policy conflict, this Privacy Policy applies to how we collect, process and share your personal information.

Please read this Privacy Policy carefully. It tells you what we do with your personal information and why. Where the law requires your consent (for example for marketing emails or for cookies that aren’t strictly necessary), we ask for it separately, and you can say no.

Personal information we collect or process

When we say “personal information”, we mean information that identifies you or can reasonably be linked to you or to another person. It doesn’t include information collected anonymously, or de-identified so that it can’t identify you or be linked to you. Depending on how you use the Services, where you live and what the law allows or requires, we may collect or process the following categories of personal information, including inferences drawn from it:

• Contact details including your name, address, billing address, delivery address, phone number and email address.
• Financial information including credit card, debit card and financial account numbers, payment card details, financial account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, add to your bag, add to your wishlist, buy, return, exchange or cancel, and your past transactions.
• Communications with us including the information you include in your messages to us, for example when you send a complaint to customer service.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information about how and when you interact with or browse the Services.

Where we get personal information

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, contact us or otherwise give us your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through cookies and similar technologies. If you’re in the UK, we only use cookies and similar technologies that aren’t strictly necessary (for example for analytics and advertising) if you accept them in our cookie banner, and you can change your choice at any time;
• From our service providers including when we ask them to provide certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How we use your personal information

Depending on how you interact with us or which Services you use, we may use your personal information for the purposes below. If you live in the UK, the law requires us to tell you our lawful basis for each use: we use your information to perform our contract with you (for example to process your order, deliver it and handle returns); for our legitimate interests (for example to keep the Services secure, prevent fraud, improve the Services and send marketing to existing customers, which you can opt out of at any time); with your consent (for example for marketing emails where consent is needed, and for cookies that aren’t strictly necessary), which you can withdraw at any time; and to comply with our legal obligations (for example under tax, accounting and consumer law). If you live in Australia, we only collect personal information that’s reasonably necessary for these purposes, and we only use it for them or for related purposes you’d reasonably expect. You don’t have to give us your personal information, but without your name, contact details, delivery address and payment details we can’t process your order.

• Providing, tailoring and improving the Services. We use your personal information to provide the Services to you, including to perform our contract with you; process your payments; fulfil your orders; remember your preferences and the items you’re interested in; send you notifications about your account; process purchases, returns, exchanges and other transactions; create, maintain and manage your account; arrange delivery; help with returns and exchanges; let you post reviews; and create a shopping experience tailored to you, for example by recommending products related to your purchases. This may include using your personal information to tailor and improve the Services.
• Marketing and advertising. We use your personal information for marketing and advertising, for example to send you marketing, advertising and promotional messages by email, text message or post, and to show you online ads for products and services on the Services or on other websites, including based on items you’ve bought or added to your bag before and on other activity on the Services.
• Security and fraud prevention. We use your personal information to authenticate your account; provide a secure payment and shopping experience; detect, investigate or take action against any fraudulent, illegal, unsafe or harmful activity; and protect public safety and our services. If you choose to use the Services and register an account, you’re responsible for keeping your login details safe. We strongly recommend that you don’t share your username, password or other login details with anyone.
• Communicating with you. We use your personal information to give you customer support, reply to you, provide effective services to you and maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with the law or to respond to valid legal processes, including requests from law enforcement or government agencies; to investigate or take part in inquiries, potential or actual legal disputes, or other legal proceedings; and to enforce our terms or policies or investigate possible breaches of them.

How we share personal information

In certain circumstances, we may share your personal information with third parties for legitimate purposes, in line with this Privacy Policy. These circumstances may include:

• With Shopify, suppliers and other third parties who provide services on our behalf (for example IT management, payment processing, data analytics, customer support, email services, cloud storage, order fulfilment and delivery).
• With business and marketing partners, to provide services and show you ads (for example Meta, for Facebook and Instagram ads, and Google). For example, we use Shopify to show you personalised ads through third-party services, based on your online activity with different merchants and websites. Our business and marketing partners will use your information in line with their own privacy notices. Depending on where you live, you may have the right to tell us not to share your information to show you personalised ads and marketing based on your online activity with different merchants and websites.
• When you ask us to, or allow us to, share certain information with third parties, for example to deliver your products, or when you use social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or insolvency; to comply with any applicable legal obligations (including responding to court orders, search warrants and similar requests); to enforce any applicable terms of service or policies; and to protect or defend the Services, our rights and the rights of our users or others.

Our relationship with Shopify

The Services are powered by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. To provide and improve the Services, information you submit to the Services will be sent to and shared with Shopify and with third parties that may be located in countries other than the one where you live. In addition, to help protect, grow and improve our business, we use certain advanced Shopify features that use data and information from your interactions with our shop, with other merchants and with Shopify. To provide these advanced features, Shopify may use personal information collected from your interactions with our shop, with other merchants and with Shopify. In these cases, Shopify is responsible for processing your personal information, including for responding to your requests to exercise your rights over the use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can read the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights over your personal information through the Shopify Privacy Portal.

Third-party websites and links

The Services may contain links to websites or other online platforms run by third parties. If you follow links to sites we don’t own or control, you should read their privacy and security policies and other terms and conditions. We don’t guarantee, and aren’t responsible for, the privacy or security of those sites, or the accuracy, completeness or reliability of the information on them. Information you share in public or semi-public places, including on third-party social networks, may also be seen by other users of the Services and/or of those third-party platforms, with no limits on how they or others may use it. Including a link doesn’t mean we endorse the content of that platform or its owners or operators, except where we say so in the Services.

Children’s data

The Services aren’t intended for children, and we don’t knowingly collect personal information from children under the age of majority where you live. If you’re the parent or guardian of a child who has given us their personal information, you can contact us using the details below to ask us to delete it. As of the effective date of this Privacy Policy, we have no actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) the personal information of anyone under 16.

Security and how long we keep your information

Please be aware that no security measures are perfect or impenetrable, and we can’t guarantee “perfect security”. Information you send to us may also not be secure while it’s on its way to us. We recommend that you only use secure channels to send us sensitive or confidential information. If there’s a data breach that could seriously affect you, we’ll tell you, and the regulator, as the law requires (the ICO in the UK, the OAIC in Australia).

How long we keep your personal information depends on different factors, such as whether we need it to maintain your account, provide the Services, comply with legal obligations (for example, we keep order and invoice records for as long as tax and accounting laws require), resolve disputes or enforce other applicable contracts and policies. When we no longer need your personal information, we delete it or make it anonymous.

Your rights and choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights aren’t absolute: they may apply only in certain circumstances, and in some cases we may refuse your request as the law allows.

• Right to access / know. You may have the right to ask for access to the personal information we hold about you.
• Right to delete. You may have the right to ask us to delete the personal information we hold about you.
• Right to correct. You may have the right to ask us to correct inaccurate personal information we hold about you.
• Right of portability. You may have the right to receive a copy of the personal information we hold about you and to ask us to transfer it to a third party, in certain circumstances and with certain exceptions.
• Managing your communication preferences. We may send you promotional emails, and you can opt out of receiving them at any time using the unsubscribe link in our emails. In the UK, we only send you marketing emails or texts if you’ve agreed to receive them or, if you’ve already bought from us, about similar products, with the option to say no when you give us your details and in every message (Privacy and Electronic Communications Regulations, PECR). In Australia, we only send you marketing emails or texts if you’ve agreed to receive them or where the Spam Act 2003 lets us infer your consent (for example, because you’re an existing customer); every message identifies us and includes a working unsubscribe link, and we act on your request within 5 working days. If you opt out, we may still send you non-promotional emails, such as those about your account or your orders.

You can exercise any of these rights where indicated in the Services or by contacting us using the details below. If you live in Australia, you can ask to access, and to correct, the personal information we hold about you (Australian Privacy Principles 12 and 13), and you can deal with us without giving your name, or using a pseudonym, where that’s practical (for example, if you only have a question): to deliver an order, though, we need your real name and address. To learn more about how Shopify uses your personal information and any rights you may have, including in relation to data processed by Shopify, visit https://privacy.shopify.com/en.

You won’t be treated any differently for exercising any of these rights. We may need to verify your identity before we can process your request, as the law allows. Where the law allows, you can appoint an authorised agent to make requests on your behalf: before accepting a request from an agent, we’ll ask them for proof that you’ve authorised them, and we may ask you to verify your identity directly with us. We don’t charge you for making a request. We’ll reply within the time the law requires: in the UK, within one month (we can extend this by up to two more months for complex requests, and we’ll tell you if we do); in Australia, within a reasonable time, usually within 30 days.

Complaints

If you have a complaint about how we handle your personal information, please contact us using the details below. We’ll acknowledge your complaint within 30 days and reply without undue delay. Depending on where you live, you may have the right to appeal our decision by contacting us using the details below, or to report your complaint to your local data protection authority. If you live in the UK, you can complain to the Information Commissioner’s Office (ICO): ico.org.uk. If you live in Australia and you’re not happy with our reply, or we haven’t replied within 30 days, you can complain to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au. For the EEA, you can find a list of the competent data protection supervisory authorities here.

International transfers

Please note that we may transfer, store and process your personal information outside the country where you live.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we rely on recognised transfer mechanisms, such as the European Commission’s Standard Contractual Clauses or the equivalent contracts issued by the relevant UK authority (the International Data Transfer Agreement or the UK Addendum), unless the transfer is to a country that’s considered to provide an adequate level of protection. You can ask us for a copy of these safeguards using the contact details below. If you live in Australia, please note that we’re based outside Australia, so your personal information will be disclosed to recipients overseas: mainly in Italy and other countries of the European Union, in Canada and in the United States, where we, Shopify and our service providers process data [OTHER COUNTRIES, if any: for example where our suppliers send orders from]. We take reasonable steps to make sure these recipients protect it in line with the Australian Privacy Principles.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We’ll post the updated Privacy Policy on this website, update the “Last updated” date and give you notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you want to exercise any of your rights, please call us on +1 307-337-0781 or email us at andrea.zini@rocketmail.com, or write to us at 30 N Gould St, Ste 9557, Sheridan WY 82801, United States. For the purposes of applicable data protection laws, we are the data controller of your personal information. The data controller is [COMPANY NAME], [REGISTERED ADDRESS]. Our representative in the UK under Article 27 of the UK GDPR is [UK REPRESENTATIVE: name and address].