Privacy Policy

Last updated: October 5, 2025

Welcome to Tislit Bijoux (“Tislit Bijoux”, “we”, “us” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit or make a purchase from https://tislitbijoux.com (the “Site”) or otherwise interact with us (together, the “Services”).

1) Who We Are & How to Contact Us

Controller: Tislit Bijoux (and/or the legal entity operating the brand). If you have questions or wish to exercise your privacy rights, contact us at support@tislitbijoux.com or by mail at Wilhelm-Röntgen-Straße 34, 26723 Emden, Germany. Phone: +49 491 5550149.

2) Information We Collect

a) Information you provide to us

• Identifiers & contact details: name, billing/shipping address, email address, phone number.
• Order & payment details: products purchased, delivery preferences, and payment information (processed by our payment processors; we do not store full card numbers).
• Account data: username, password, saved addresses, wishlist, order history.
• Customer support: content of messages, returns, complaints, and survey responses.

b) Information collected automatically

• Device & usage data: IP address, device identifiers, browser type, operating system, pages viewed, referring/exit pages, timestamps, and interactions with the Site.
• Cookies & similar technologies: We use cookies, pixels, and SDKs to operate the Site, remember your preferences, measure performance, prevent fraud, and—if you consent or where permitted—deliver and measure advertising. See “Cookies & Tracking” below.
• Approximate location: derived from your IP address (city/region level) for analytics, localization, fraud prevention, and tax/shipping estimates.

c) Information from third parties

• Platform & service providers (e.g., Shopify for storefront; payment processors; logistics & fulfillment partners; analytics and advertising partners).
• Social & sign-in services if you choose to connect or interact with us via those services.

3) Purposes for Using Your Information

• Provide the Services: operate the Site/storefront, process and fulfill orders, deliver products, handle payments and refunds.
• Customer care: respond to inquiries, manage returns, warranties, and after-sales service.
• Personalization: remember preferences and tailor content and product recommendations.
• Marketing: send newsletters and offers (you can opt out at any time); deliver and measure advertising (see “Your Choices”).
• Safety, security & fraud prevention: detect, prevent, and investigate fraud, abuse, or illegal activity.
• Analytics & improvement: understand usage, develop new features, and improve our products and Services.
• Compliance: comply with applicable laws, tax and accounting obligations, and respond to lawful requests.

4) Legal Bases (EU/UK GDPR)

Where GDPR applies, we process personal data under the following bases: performance of a contract (processing orders, customer service); legitimate interests (security, analytics, improvements, basic marketing); consent (non-essential cookies/marketing where required); and legal obligation (tax, accounting, compliance).

5) Cookies & Tracking

We use first-party and third-party cookies/pixels for core functionality, analytics, and advertising. You can manage preferences via our cookie banner (where available), your browser settings, or the “Your Choices” section below. Blocking some cookies may affect Site functionality.

6) How We Disclose Information

• Service providers / processors: e.g., e-commerce platform (Shopify), payment processors, fraud tools, logistics/fulfillment, cloud hosting, email and marketing providers, analytics and advertising partners. These parties are contractually bound to use data only on our instructions.
• Business transfers: in the event of a merger, acquisition, financing, or sale of assets, your information may be transferred to a successor entity subject to this Policy or one that is materially similar. We will provide notice where required.
• Legal & compliance: to comply with applicable law, lawful requests, or to protect rights, safety, and property.

We do not sell your personal information for money. We may “share” personal information for cross-context behavioral advertising as defined under some U.S. state laws; see Section 12 for opt-out options.

7) International Transfers

We operate using global service providers. Your information may be transferred to and processed in countries other than your own (including the United States). Where GDPR applies, we rely on appropriate safeguards such as Standard Contractual Clauses and supplementary measures as necessary.

8) Retention

We keep personal information only as long as necessary for the purposes described above, including to comply with legal, accounting, or reporting requirements. Typical periods include: orders and tax records (up to 7–10 years, depending on jurisdiction); account data (for the life of the account plus a reasonable period); marketing data (until you opt out or after a set inactivity period). When no longer needed, we will securely delete, de-identify, or anonymize the data.

9) Your Choices & Rights

• Marketing: you can unsubscribe from email marketing via the link in our emails or by contacting us.
• Cookies/Tracking: manage through the cookie banner (where available) and your browser settings. To opt out of cross-context behavioral advertising where state law grants that right, see Section 12.
• Access, deletion, correction: depending on your location, you may have rights to request access to, deletion of, or correction of your personal information, and to receive a portable copy. Submit requests at support@tislitbijoux.com.
• Verification: we may need to verify your identity before fulfilling a request. Authorized agents may submit requests with appropriate authorization.
• Do Not Track: we currently do not respond to browser “Do Not Track” signals.

10) Security

We implement administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is perfectly secure; we cannot guarantee absolute security. If we learn of a data incident impacting your information, we will notify you and regulators as required by law and take appropriate remediation steps.

11) Children’s Privacy

Our Services are not directed to children under 13 (or under 16 where GDPR applies), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, please contact us so we can delete it.

12) California & Other U.S. State Disclosures

Under the California Consumer Privacy Act (as amended by the CPRA) and similar state laws, California residents (and, where applicable, residents of other states with similar laws) have rights to know/access, delete, correct, opt out of “sale”/“sharing”/targeted advertising, and limit use of sensitive personal information.

Categories Collected (Last 12 Months)

Sale/Sharing. We do not sell personal information for money. We may “share” personal information with advertising partners for cross-context behavioral advertising as defined by the CPRA. You can opt out of “sharing”/targeted advertising by contacting us at support@tislitbijoux.com and by adjusting cookie preferences in our banner (where available).

Sensitive information. We do not use or disclose sensitive personal information for purposes requiring a right to limit under the CPRA.

Non-discrimination. We will not discriminate against you for exercising your privacy rights.

Minors. We do not knowingly sell or share personal information of consumers under 16.

13) GDPR Notices for EEA/UK Residents

• Controller: Tislit Bijoux (see contact details above).
• Legal bases: see Section 4.
• Transfers: see Section 7 (Standard Contractual Clauses and safeguards).
• Rights: access, rectification, erasure, restriction, portability, and objection. You may also withdraw consent at any time (without affecting prior processing). Contact us to exercise these rights.
• Complaints: you may lodge a complaint with your local supervisory authority.

14) Aggregated & De-identified Information

We may use and share aggregated or de-identified information for research, analytics, and business purposes. We do not attempt to re-identify such information.

15) Third-Party Links & Services

The Site may contain links to third-party websites and services. Their privacy practices are governed by their own policies. We encourage you to review them.

16) Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take appropriate steps to notify you, such as posting the updated policy on this page and updating the “Last updated” date.

17) How to Contact Us

18) Additional Shopify & Payments Notes

Our store is hosted on Shopify, which provides the online e-commerce platform that allows us to sell our products and Services to you. Your data may be stored through Shopify’s data storage, databases, and the general Shopify application. We also use third-party payment processors to handle payments; their use of your personal information is governed by their own privacy policies. We recommend you review Shopify’s and the relevant payment processor’s privacy policies for more information.

Note: This template is provided for general informational purposes only and does not constitute legal advice. Laws change and vary by jurisdiction. Please consult counsel to tailor this policy to your specific operations (including your company name, address, data flows, cookies, advertising stack, disclosures, and state/country-specific requirements).