This policy explains what personal data Eternal City Jewelry collects when you visit www.eternalcity.jewelry or place an order, why we need it, and who we share it with. We collect only what is needed to sell and deliver your jewelry. We do not sell your data, we do not build profiles, and we do not use advertising or tracking cookies.
Who is responsible
The data controller is Eternal City Jewelry, Rome, Italy. For any question about your data, write to us through the contact page.
What we collect
When you place an order: your name, email address, billing address, shipping address and phone number.
When you write to us: your name, email address and the content of your message.
Payment details: card payments are handled entirely by Stripe. Your card number never passes through our site and we never see or store it.
When you browse: we use an anonymous analytics service to count page visits. It is not Google Analytics, uses no cookies and does not identify you; visits are counted in aggregate only.
Why we use it
- To process your payment, ship your order and send you the order confirmation and tracking number (performance of a contract).
- To issue the invoice and keep accounting records (legal obligation).
- To answer your messages (your request).
- To prevent fraud and keep the site secure (legitimate interest).
We do not send newsletters or marketing emails.
Who we share it with
Only with the services needed to run the shop, each bound by its own data protection terms:
- Stripe: card payments. stripe.com/privacy
- Resend: sending order confirmations and replies by email.
- Vercel: hosting of the website.
- Shipping carriers: your name, address and phone number, to deliver the parcel. For orders outside the European Union, the carrier and the customs authorities of the destination country also receive the contents and value of the parcel.
- Our accountant and the Italian tax authorities: invoice data, as required by law.
Some of these providers are based in the United States. Transfers take place under the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
Cookies and local storage
Our site sets no advertising, profiling or analytics cookies. We save two small items in your browser’s local storage: the summary of your last order, so the thank-you page can show it, and a note that you closed the privacy notice. Neither is sent to us or to anyone else. Stripe sets its own technical cookies on its payment page to process the payment securely and prevent fraud.
How long we keep it
Order and invoice data are kept for 10 years, as required by Italian tax law. Messages sent through the contact form are kept for as long as needed to answer you, and no longer than 24 months.
Your rights
Under the GDPR you can ask us at any time to access, correct or delete your data, to limit its use, to object to it, or to receive it in a portable format. Data we must keep by law, such as invoices, cannot be deleted before the legal period ends. To exercise these rights, write to us through the contact page; we reply within 30 days.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Changes
If we change how we handle your data, we will update this page. Last updated: October 2026.