ZEEGRIJS — PRIVACY POLICY 

Website: www.zeegrijs.com 

Effective Date: 25th August 2025 

1. Introduction 
This Privacy Policy ("Policy") describes how ZEEGRIJS ("we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "your") of the website www.zeegrijs.com (the "Site") and in the course of providing our made-to-order jewelry products and services (collectively, the "Services"). This Policy is drafted in accordance with and intends to comply with a multitude of privacy laws, including but not limited to the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA/CPRA), and other applicable U.S. state data privacy laws. By using our Site and Services, you consent to the practices described in this Policy. 

2. Controller of Your Information 
For the purposes of applicable data protection laws, ZEEGRIJS, located in New York, NY, USA, is the data controller responsible for your personal information. Our contact information for data privacy matters is: Admin@zeegrijs.com. 

3. The Information We Collect 
We collect information that you provide directly to us and information about your interaction with our Site. 

  • Identifiers and Order Information: When you place an order, we collect your name, billing and shipping address, email address, phone number, and payment information. Payment details are processed directly by our third-party payment processors (e.g., Stripe, PayPal) and are not stored on our servers. 

  • Commercial Information: We maintain records of the Products you purchase, order history, and customer service communications. 

  • Technical and Network Information: When you browse the Site, we automatically receive your computer’s internet protocol (IP) address, browser type, operating system, and information about your interaction with the Site (e.g., pages visited, access times) through cookies and similar technologies. 

4. Our Lawful Bases for Processing (GDPR/UK GDPR) 
For individuals in the European Economic Area (EEA) and the United Kingdom (UK), we process your personal data on the following lawful bases: 

  • Performance of a Contract: To fulfill your order, process payments, and arrange shipping. 

  • Legitimate Interests: To operate and improve our Site and Services, for fraud prevention, and for direct marketing (where allowed, and you have the right to object). 

  • Consent: Where we have obtained your explicit consent, such as for certain marketing communications or the use of non-essential cookies. 

  • Legal Obligation: To comply with accounting, tax, and other legal requirements. 

5. How We Use Your Information 
We use the information we collect for the following business purposes: 

  • To process and fulfill your orders, including sending order confirmations and shipping notifications. 

  • To communicate with you about products, services, promotions, and events, where you have consented or where we have a legitimate interest to do so. 

  • To improve, monitor, and protect the security and integrity of our Site and Services. 

  • To comply with legal obligations and enforce our Terms and Conditions. 

6. How We Share Your Information 
ZEEGRIJS does not and will not sell your personal information to third parties. We are an independent brand, and the trust of our customers is paramount. We only share your information in the following limited circumstances to operate our business and fulfill our commitment to you: 

  • With Our Service Providers and Business Partners: We engage trusted third-party companies and individuals to perform services on our behalf and help us operate our business. These partners are contractually obligated to safeguard your data and are prohibited from using it for any purpose other than providing the specific services we have requested. This includes: 

  • E-commerce Platform: Our store is hosted by Squarespace, Inc. They provide us with the online e-commerce platform that allows us to sell our products to you. Your data, including order information and technical details, is stored through Squarespace’s data storage, databases, and the general Squarespace application. They act as a data processor for us, enabling the core functionality of our Site. 

  • Payment Processors: To securely process your payments, we share payment information with processors like Stripe and PayPal. We do not store or have complete access to your full credit card details on our servers. This information is provided directly to these processors, whose use of your data is governed by their own stringent privacy and security policies. 

  • Shipping and Fulfillment Partners: To deliver your made-to-order jewelry, we share your name, shipping address, and contact information with our shipping carriers (e.g., USPS, FedEx, DHL). 

  • For Legal Compliance and Protection: We may disclose your information if we believe in good faith that it is required by law, regulation, legal process (such as a subpoena or court order), or to respond to valid government requests. We may also share information if we believe it is necessary to protect the rights, property, and safety of ZEEGRIJS, our customers, or the public. 

  • In the Event of a Business Transfer: If ZEEGRIJS is involved in a merger, acquisition, sale of all or a portion of our assets, or bankruptcy proceeding, your personal information may be transferred as a business asset. In such an event, we will provide notice before your personal information is transferred and becomes subject to a different privacy policy. 

7. International Data Transfers 
Your personal information is processed in the United States, where our company is based. The U.S. may not have data protection laws deemed equivalent to those in your home country (e.g., the EEA or UK). When we transfer your data to the U.S., we rely on mechanisms such as the European Commission's Standard Contractual Clauses to ensure adequate protection. You may contact us for a copy of the safeguards we use to protect your data during international transfers. 

8. Data Retention 
We will retain your personal information only for as long as is necessary for the purposes set out in this Policy, including to fulfill your orders, comply with our legal obligations (such as tax and accounting requirements), resolve disputes, and enforce our agreements. Order information is typically retained for a minimum of seven (7) years for legal and accounting purposes. 

9. Your Data Protection Rights 
Depending on your location, you may have the following rights regarding your personal information: 

  • Right of Access & Data Portability: The right to request access to and a copy of the personal information we hold about you. 

  • Right to Rectification: The right to request that we correct any inaccurate or incomplete information. 

  • Right to Erasure ("Right to be Forgotten"): The right to request the deletion of your personal information, subject to certain legal exceptions. 

  • Right to Restriction of Processing: The right to request that we suspend the processing of your personal information. 

  • Right to Object to Processing: The right to object to our processing of your personal information, particularly for direct marketing purposes. 

  • Right to Opt-Out of Sale/Sharing/Targeted Advertising (U.S. States): The right to direct us not to "sell" or "share" your personal information or use it for "targeted advertising," as those terms are defined under various U.S. state laws. We do not engage in these activities. 

  • Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights. 

To exercise any of these rights, please contact us using the details provided in Section 2. We will respond to your request within the timeframe required by applicable law and may need to verify your identity before processing your request. 

10. Cookies and Similar Tracking Technologies 
We use cookies and similar technologies to analyze trends, administer the website, track users' movements around the site, and gather demographic information. You can control the use of cookies at the individual browser level. For more detailed information, please see our separate Cookie Policy. 

11. "Do Not Track" Signals 
Our Site does not currently respond to Do Not Track (DNT) browser signals or mechanisms. For information about DNT, visit www.allaboutdnt.org. 

12. Children's Privacy 
Our Site and Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us. If we become aware that we have collected personal information from a child without verification of parental consent, we will take steps to remove that information. 

13. Data Security 
We implement appropriate technical and organizational measures designed to protect the security of your personal information. These measures include encryption of data in transit, secure server infrastructure, and limited access controls. However, no method of transmission over the Internet or electronic storage is 100% secure; therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security 5. 

14. Links to Other Websites 
Our Site may contain links to other websites, applications, or services that are not owned, operated, or controlled by ZEEGRIJS. Please be aware that this Privacy Policy applies only to the information collected on our Site (www.zeegrijs.com). 

If you click on a third-party link, you will be directed to that third party's site. We have no control over and assume no responsibility for the content, privacy policies, security, or practices of any third-party sites or services. These other websites may place their own cookies or other files on your computer, collect data, or solicit personal information from you. 

We strongly advise you to read the privacy policy of every website you visit to understand how they collect, use, and share your information. 

15. Changes to This Privacy Policy 
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page. 

16. California Privacy Rights (CCPA/CPRA) 
Under the CCPA/CPRA, California residents have specific rights regarding their personal information, as detailed in Section 9. Over the preceding 12 months, we have collected the categories of personal information described in Section 3. We collect this information for the business purposes described in Section 5. We disclose these categories of information to the third parties described in Section 6. We have not sold or shared personal information in the last 12 months 8. 

17. UK & EU Specific Provisions 
For our customers in the UK and EU, you have the right to lodge a complaint with a supervisory authority in your country of residence. Furthermore, our processing of personal data related to "recognized legitimate interests" as outlined in the UK Data (Access and Use) Act 2025 (e.g., fraud prevention) will be conducted in accordance with that legislation 9. 

18. Nevada Residents 
While we do not sell data, Nevada residents have the right to opt-out of the sale of their covered personal information. You may submit such a request by contacting us at the details provided in Section 2. 

19. Contact Us 
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:  Admin@zeegrijs.com. 

20. Entire Agreement 
This Privacy Policy, together with our Terms and Conditions, Cookie Policy, and Shipping & Refunds Policy, constitutes the entire agreement between you and ZEEGRIJS regarding the use of your personal information.