Privacy Policy – Deheb Jewellery

Last updated: 01.09.2025

Deheb (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website [www.deheb.com] (the “Site”).

We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable EU data protection laws.


1. Data We Collect

When you use our Site, we may collect the following personal data:

  • Identity Data – name, title.

  • Contact Data – billing address, delivery address, email address, phone number.

  • Transaction Data – purchase history, payment details (processed securely by our payment provider).

  • Technical Data – IP address, browser type, device information, cookies.

  • Marketing & Communications Data – your preferences for receiving newsletters and offers.


2. How We Use Your Data

We process your personal data to:

  • Fulfil and deliver your jewellery orders.

  • Communicate with you about your purchases or enquiries.

  • Send marketing emails or newsletters (if you have opted in).

  • Improve our website, products, and customer experience.

  • Comply with legal obligations (e.g., tax and accounting requirements).

We will only process your data where we have a lawful basis, such as:

  • Contractual necessity (to fulfil an order).

  • Consent (for marketing communications).

  • Legal obligation (e.g., maintaining invoices).

  • Legitimate interest (to improve our services).


3. Sharing Your Data

We do not sell your personal data. We may share it with:

  • Service providers – e.g., website hosting, payment processors, couriers.

  • Professional advisers – e.g., accountants, legal advisors.

  • Regulators or authorities – where required by law.

All third parties are required to respect the security of your personal data and comply with GDPR.


4. International Transfers

If we transfer your data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.


5. Data Retention

We keep personal data only for as long as necessary:

  • For purchases: up to 7 years (to comply with tax obligations).

  • For marketing (with consent): until you withdraw consent.

  • For website analytics: typically 26 months.


6. Your Rights

Under GDPR, you have the right to:

  • Access your personal data.

  • Correct inaccurate data.

  • Request deletion (“right to be forgotten”).

  • Restrict processing.

  • Object to processing (including direct marketing).

  • Data portability (receive your data in a machine-readable format).

To exercise these rights, contact us at: team@dehebjewellery.com


7. Cookies

We use cookies to improve your browsing experience, analyse traffic, and personalise content. You can manage or disable cookies via your browser settings. For more information, see our Cookie Policy.


8. Security

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, or unauthorised access.


9. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Deheb Jewellery
Email: team@dehebjewellery.com
Address: 94 Triq Il-Pelegrinagg Cospicua Malta

If you believe your data protection rights have been violated, you also have the right to lodge a complaint with your local Data Protection Authority.