Privacy Policy

Last updated: September 1, 2025

At Glintweave, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your data when you subscribe to our newsletter.

1. What Information We Collect

We only collect your email address when you voluntarily subscribe to our newsletter through our website.

You may also choose to provide your first name (if requested), which helps us personalize our emails, but it is not required.

2. Why We Collect It

Your email address is used solely to:

• Send you updates about new jewelry collections
• Share exclusive offers, promotions, and styling tips
• Keep you informed about our brand and events

We do not sell, trade, or rent your information to third parties.

3. Legal Basis for Processing (GDPR)

We process your email address based on your consent, which you give when you subscribe. You can withdraw your consent at any time by clicking the "Unsubscribe" link in any email you receive.

4. How We Protect Your Data

Your information is securely stored through our email marketing provider, MailerLite, which is GDPR-compliant and uses industry-standard security measures.

We do not store your data on our own servers beyond what is necessary for order or support inquiries.

5. Third Parties

We use MailerLite to manage our email subscriptions and send communications. MailerLite processes your data only on our behalf and under strict data protection agreements.

Learn more about MailerLite's privacy practices: https://www.mailerlite.com/legal/privacy-policy

6. Your Rights

You have the right to:

• Unsubscribe at any time (via the link in every email)
• Request access to your data
• Request deletion of your data
• Withdraw consent at any time

To exercise any of these rights, please contact us at: hi@glintweave.com

7. Cookie Usage and Consent

Our website uses cookies to enhance your browsing experience:

• Language Preference Cookie (NEXT_LOCALE): Stores your selected language (e.g., "en" or "nl")
• Essential Cookies: Required for basic website functionality

Your Cookie Choices:

• You can accept or decline non-essential cookies through our cookie banner
• Essential cookies cannot be disabled as they're necessary for the website to function
• You can manage cookie preferences in your browser settings
• Withdrawing consent won't affect the lawfulness of processing before withdrawal

8. Data Retention

We retain your data for the following periods:

• Newsletter subscriptions: Until you unsubscribe or request deletion
• Order information: 7 years for tax and accounting purposes
• Support inquiries: 3 years or until resolved
• Website cookies: As specified in our cookie settings (typically 1 year)

9. Data Breach Notification

In the unlikely event of a data breach affecting your personal information:

• We will notify relevant supervisory authorities within 72 hours
• You will be informed directly if the breach poses a high risk to your rights
• We will provide details about the breach, potential consequences, and measures taken

10. International Data Transfers

Your data may be transferred outside the EU to:

• MailerLite (Lithuania): EU-based, GDPR-compliant email service
• Other service providers: Only those with adequate data protection safeguards

All transfers are protected by appropriate safeguards including Standard Contractual Clauses or adequacy decisions.

11. Your Data Subject Rights (Detailed)

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw consent: For consent-based processing

How to exercise your rights: Email us at hi@glintweave.com. We'll respond within 30 days.

12. Third-Party Data Processors

We ensure all third-party processors meet GDPR requirements:

• MailerLite: Email marketing (Data Processing Agreement in place)
• Web hosting providers: GDPR-compliant hosting services
• Analytics providers: Privacy-focused analytics tools

All processors are contractually bound to protect your data and process it only on our instructions.

13. Policy Updates and Notifications

When we update this Privacy Policy:

• Minor changes: Updated "Last updated" date on this page
• Significant changes: Email notification to newsletter subscribers
• Material changes affecting your rights: Explicit consent may be required

We recommend reviewing this policy periodically for any updates.

14. Contact Us

If you have any questions about this Privacy Policy or your data, please reach out:

Email: hi@glintweave.com
Brand: Glintweave
Website: https://glintweave.com