Privacy & Data Protection

Effective date: September 20, 2026

This page provides the full privacy and data-protection information for Gleam & Form Jewelry. The storefront footer links here. Shopify checkout may also display a platform-generated privacy-policy link as part of the checkout experience.

Who is responsible for your personal data

Gleam & Form Jewelry is an online jewelry store operated by Nils Felix Maximilian Mayer in Sweden. For the personal data described here, the store operator is the data controller unless another party is independently responsible for a specific service.

Contact: support@gleamformjewelry.com
Address: Tjädervägen 8, 983 36 Malmberget, Sweden
Phone: +46 72 443 29 17

Personal data we may collect

• Identity and contact information: name, email address, telephone number, billing address and delivery address.
• Order and transaction information: products ordered, prices, discounts, shipping method, payment status, order history and refund information. Full payment-card details are generally handled by the payment provider rather than stored by us directly.
• Personalization information: names, initials, dates, coordinates, short messages or other text you choose to submit for a personalized product.
• Customer-support information: messages, order numbers, photographs or other information you provide when contacting us.
• Device and usage information: IP address, browser and device information, pages and products viewed, interactions with the website, cart and checkout activity, referral information and similar technical data.
• Marketing and privacy preferences: newsletter choices, cookie preferences and advertising-consent choices where applicable.

Please do not submit passwords, payment-card details, government identification numbers, health information or other sensitive personal data through personalization fields or ordinary support email unless we specifically request information that is necessary for a lawful purpose.

Why we use personal data and our legal bases

We process personal data only when we have a lawful basis. Depending on the activity, the basis may be performance of a contract, steps requested before entering into a contract, compliance with a legal obligation, our legitimate interests, or your consent.

• Orders and fulfillment: payment confirmation, personalization, production, shipping, delivery, returns, refunds and order support. The legal basis is generally performance of a contract or steps requested by you before entering into a contract.
• Customer support: responding to questions, resolving delivery or product issues and handling complaints. The basis may be performance of a contract, legal obligations or our legitimate interest in providing customer service.
• Legal and accounting obligations: record keeping, tax, fraud prevention, consumer-rights obligations and responding to lawful requests.
• Security and fraud prevention: protecting the store, preventing misuse, troubleshooting and maintaining reliable services, generally based on legitimate interests.
• Analytics and store improvement: understanding aggregate website use and performance. Where consent is legally required for cookies or tracking technologies, we rely on consent.
• Marketing and advertising: newsletters, campaign measurement, audience matching and relevant advertising. We rely on consent where required and otherwise use another lawful basis only where permitted by applicable law.

How personalization data is used

Personalization content is used to prepare and fulfill the product you request. It may be shared with the production and fulfillment provider responsible for making the item. Please submit only information that you are entitled to provide and that is necessary for the design.

The individual product page and personalization interface are the source of truth for the current options and production method for that item.

Service providers and other recipients

We may share personal data with service providers and other recipients when necessary for the purposes described above. These may include:

• Shopify, which provides the ecommerce platform and related store services;
• Printify and participating production or fulfillment providers used to produce and fulfill orders;
• payment providers that authorize or process payments;
• shipping carriers and logistics providers that deliver orders;
• email, customer-support, security and technical providers that help us operate the store;
• analytics, advertising and social-media providers, such as Google, Meta, Pinterest, TikTok or other services we enable, subject to privacy choices and consent requirements;
• professional advisers, authorities or other parties where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims, protect rights, prevent fraud or comply with lawful requests.

Some recipients act as processors on our behalf. Others may act as independent controllers for parts of their services and process information under their own privacy notices.

International transfers

Some service providers, production partners, carriers or technology providers may process personal data outside Sweden or the European Economic Area. Where data-protection law requires safeguards for an international transfer, the transfer will be based on an approved mechanism such as an adequacy decision, standard contractual clauses, or another legally recognized safeguard.

Cookies, analytics and advertising technologies

We may use cookies, pixels, server-side APIs, advertising identifiers and similar technologies to operate the store, remember preferences, measure performance, understand website use, prevent fraud and support advertising.

Depending on your location and the services enabled, these technologies may be provided by Shopify, Google, Meta (Facebook and Instagram), Pinterest, TikTok and other analytics or advertising providers.

Where applicable law requires consent, optional analytics or advertising technologies are used only after the required consent has been provided. You can manage available cookie and privacy choices through the controls presented on the website and, where applicable, through the relevant platform's own settings.

How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including to fulfill orders, provide support, maintain security, resolve disputes, enforce agreements and comply with legal, tax, accounting or regulatory obligations.

Retention periods differ by data category. Where a fixed legal retention period applies, we retain the required information for that period. Otherwise, we consider whether an order relationship remains active, whether the information is still needed for support or fraud prevention, and whether legal claims could reasonably arise.

When personal data is no longer required, we delete it, anonymize it, or otherwise handle it in accordance with applicable law and our technical retention processes.

Your data-protection rights

Depending on the law that applies to you, you may have rights including:

• information about how your personal data is used;
• access to your personal data;
• correction of inaccurate or incomplete data;
• deletion in certain circumstances;
• restriction of processing in certain circumstances;
• objection to certain processing, including direct marketing;
• data portability where the legal conditions are met;
• withdrawal of consent at any time where processing is based on consent, without affecting processing that was lawful before withdrawal; and
• the right to lodge a complaint with a competent data-protection authority.

If you are in Sweden, the supervisory authority is Integritetsskyddsmyndigheten (IMY). Information is available at imy.se.

To exercise a right, email support@gleamformjewelry.com. We may need to verify your identity before fulfilling a request. Some rights are subject to legal exceptions, including obligations to retain certain records.

Direct marketing

You can unsubscribe from marketing email by using the unsubscribe option provided in the message or by contacting us. If you object to direct marketing, we will stop using your personal data for that purpose as required by applicable law.

Security

We use reasonable administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

Children

The store is not intended for children to place orders on their own. Our Terms of Service require customers placing an order to meet the applicable age requirement. If you believe a child has provided personal data to us improperly, contact us so that we can review the situation.

Automated tools and fraud prevention

Our ecommerce, payment and security providers may use automated signals to identify fraud, abuse or security risks. If a solely automated decision with legal or similarly significant effects is used in a way that gives you additional rights under applicable law, the required information and safeguards will apply.

Changes to this information

We may update this page when our services, providers, legal obligations or data practices change. The current version and effective date will be published here.

Privacy contact

Gleam & Form Jewelry
Operated by Nils Felix Maximilian Mayer
Tjädervägen 8
983 36 Malmberget
Sweden
Email: support@gleamformjewelry.com
Phone: +46 72 443 29 17