Privacy Policy

Last updated: September 2026

At ANDRESCO Jewelry, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains what personal data we collect when you visit andrescojewelry.net, place an order, contact us or otherwise interact with ANDRESCO, why we process it, how long we retain it, with whom it may be shared and the rights you have under applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Who We Are

The data controller responsible for processing your personal data is:

ANDREESCU BEATRICE PERSOANĂ FIZICĂ AUTORIZATĂ
Trading as: ANDRESCO Jewelry
Fiscal Identification Code (CIF): 46327370
Trade Registry No.: F40/2622/2022
Registered office: Str. Dragoș Vodă nr. 70, Sector 2, Bucharest, Romania
Email: mystory@andrescojewelry.net

For any questions concerning this Privacy Policy or the processing of your personal data, you may contact us at the email address above.

2. Personal Data We Collect

Depending on how you interact with ANDRESCO, we may collect and process the following categories of personal data:

Identification and contact information, such as your name, email address, telephone number, billing address and delivery address.

Order and transaction information, including the products you purchase, personalization choices, order history, delivery information and information necessary for invoicing.

Payment information. Payments may be processed by third-party payment providers. ANDRESCO does not necessarily receive or store your complete payment card details.

Communications with us, including emails, messages, inquiries, requests, feedback and information you choose to provide in connection with an order or bespoke jewelry consultation.

Technical and usage information, such as IP address, browser and device information, website activity, pages viewed, referral information and cookie or similar technology identifiers.

Marketing preferences, including whether you have chosen to receive marketing communications from ANDRESCO.

We do not intentionally request or collect special categories of personal data unless necessary in a particular context and permitted by applicable law.

3. Why We Process Your Personal Data

We process personal data only where we have a valid legal basis under applicable data protection law.

To process and fulfil your order

We use your information to process and confirm orders, arrange payment, create personalized or bespoke jewelry, communicate with you regarding your order, arrange delivery, issue invoices and handle returns, repairs or other after-sales services.

Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.

To comply with legal obligations

We may process and retain certain information where required for accounting, tax, consumer protection or other legal purposes.

Legal basis: compliance with a legal obligation.

To communicate with you

We may use your contact information to respond to inquiries, appointment requests, bespoke consultations, complaints or other communications initiated by you.

Depending on the context, the legal basis may be performance of a contract, steps taken at your request prior to entering into a contract, or our legitimate interests in communicating with our customers.

To operate and improve our website

We may process certain technical and usage information to maintain the security and functionality of our website, understand how it is used and improve our services.

Legal basis: our legitimate interests, where applicable, and consent where required for non-essential cookies or similar technologies.

Marketing

Where permitted by law, we may send you information about ANDRESCO collections, products, events or other news.

Where consent is required, we will send such communications only after obtaining your consent.

You may unsubscribe at any time by using the unsubscribe link included in our marketing emails or by contacting us at mystory@andrescojewelry.net.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Bespoke Jewelry and Information You Share With Us

ANDRESCO creates personalized and bespoke jewelry, and customers may choose to share personal stories, names, dates, symbols or other information as part of the creative process.

We use this information only to the extent necessary to communicate with you and design, produce or deliver the requested piece, or for another purpose clearly communicated to you.

Please avoid providing sensitive personal information unless it is genuinely necessary for your request.

5. How We Share Personal Data

We do not sell your personal data.

We may share personal data with trusted third parties where necessary to operate our business and provide our services, including payment processors, website and e-commerce providers, IT and hosting providers, courier and delivery companies, accounting or professional service providers, email and communication providers, analytics or advertising providers where permitted, and public authorities where disclosure is required by law.

These recipients receive only the information reasonably necessary for the relevant purpose and are required to process personal data in accordance with applicable data protection requirements.

6. Shopify

Our online store is powered by Shopify.

Shopify provides the e-commerce infrastructure through which our products and services are offered and may process certain customer and website visitor data in connection with providing these services.

Depending on the services and settings used, Shopify may act as a processor on our behalf and, for certain services, may process information in other capacities described in its own privacy documentation.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Some cookies are strictly necessary for the website and online store to function. Others may be used for analytics, functionality, personalization or advertising.

Where required by applicable law, non-essential cookies and tracking technologies are used only after you have provided the appropriate consent.

You can manage your cookie preferences through the cookie settings available on our website. Further information may be provided in our Cookie Policy.

8. International Transfers

Some service providers used to operate our website and business may process personal data outside Romania or outside the European Economic Area.

Where personal data is transferred outside the EEA, such transfers will be made in accordance with applicable data protection legislation and, where required, using appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or other legally recognized transfer mechanisms.

9. How Long We Keep Your Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling contractual obligations and complying with applicable accounting, tax and other legal requirements.

Different categories of personal data may therefore be retained for different periods.

When personal data is no longer required and there is no legal basis for retaining it, it will be deleted, anonymized or otherwise handled in accordance with applicable law.

10. Your Rights

Subject to the conditions provided by applicable law, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing, including direct marketing;
• receive certain personal data in a portable format;
• withdraw your consent at any time where processing is based on consent;
• lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, contact us at mystory@andrescojewelry.net.

We may request reasonable information necessary to verify your identity before acting on a request.

11. Supervisory Authority

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with:

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul General Gheorghe Magheru 28–30
Sector 1, Bucharest, Romania

This right exists without prejudice to other administrative or judicial remedies available to you.

12. Security

We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.

However, no method of transmission or electronic storage can guarantee absolute security.

13. Third-Party Websites

Our website may contain links to websites or services operated by third parties.

ANDRESCO is not responsible for the privacy practices of independent third parties. We recommend reviewing their privacy policies before providing personal information to them.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, business practices or applicable legislation.

The current version and date of the latest update will always be published on this page.

15. Contact

For questions regarding this Privacy Policy or your personal data, please contact:

ANDRESCO Jewelry
ANDREESCU BEATRICE PERSOANĂ FIZICĂ AUTORIZATĂ
CIF: 46327370
Trade Registry No.: F40/2622/2022
Str. Dragoș Vodă nr. 70, Sector 2
Bucharest, Romania
mystory@andrescojewelry.net