Privacy policy
Last updated: 18 May 2026
Cieyu respects your privacy. This Privacy Policy explains how we collect, use, store, and share personal data when you visit our website, browse our collections, contact us, or place an order.
This Privacy Policy applies to all visitors, customers, and users of our website and should be read together with our Terms of Service, Shipping Policy, and Returns & Exchanges Policy.
Cieyu
Zira Group B.V.
Amsterdam, The Netherlands
1. Who We Are
This website is operated by Zira Group B.V., trading under the brand name Cieyu, a jewelry brand based in the Netherlands.
Zira Group B.V.
Cieyu
Barbara Strozzilaan 201
1083 HN Amsterdam
The Netherlands
KvK: 98612395
VAT: NL868568600B01
2. Information We Collect
We may collect the following categories of personal data when you use our website, place an order, create an account, contact us, or interact with our services:
✧Contact details, such as your name, email address, phone number, billing address, and shipping address
✧Order details, such as products purchased, order value, delivery information, returns, refunds, and customer service history
✧Payment-related information, such as payment status and transaction references. Full payment details are handled by secure payment providers
✧Account details, such as login information, saved preferences, and order history, where applicable
✧Technical and browsing information, such as IP address, browser type, device information, pages visited, referring pages, and cookie identifiers
✧Communications, such as emails, support requests, reviews, feedback, or other messages you send to us
3. How We Use Your Information
We use your personal data for the following purposes:
✧To process, confirm, fulfill, and deliver your orders
✧To provide customer support and respond to your questions
✧To manage returns, exchanges, refunds, complaints, or warranty-related requests
✧To improve our website, products, services, and customer experience
✧To send marketing emails or updates where you have given consent or where permitted by law
✧To detect, prevent, and investigate fraud, abuse, security incidents, or unauthorized activity
✧To comply with legal, tax, accounting, and regulatory obligations
4. Legal Bases for Processing
Where the GDPR applies, we process personal data using one or more of the following legal bases:
✧Contractual necessity: to process your order, provide customer support, deliver products, and manage returns or refunds
✧Legal obligation: to comply with tax, accounting, consumer protection, and regulatory requirements
✧Consent: for certain marketing communications, non-essential cookies, and tracking technologies where required
✧Legitimate interests: to improve our website, prevent fraud, secure our services, respond to inquiries, and understand how customers use our store, provided your rights do not override those interests
5. Cookies & Tracking Technologies
We use cookies and similar technologies to operate our website, remember preferences, understand website performance, personalize your experience, and support marketing or advertising activities where applicable.
Cookies may include essential cookies, functional cookies, analytics cookies, and marketing or advertising cookies. Essential cookies are necessary for the website to function. Non-essential cookies, including tracking or marketing cookies, may require your consent.
You can manage or withdraw cookie consent through our cookie banner, where available, or through your browser settings.
If you use analytics, advertising pixels, or email marketing tracking tools, ensure your cookie banner and consent settings reflect those tools accurately.
6. Email Marketing
If you subscribe to our newsletter or agree to receive marketing communications, we may use your email address to send updates, offers, product launches, and brand news.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at [email protected].
7. Sharing Your Information
We may share personal data with trusted service providers where necessary to operate our business and provide our services. These may include:
✧Ecommerce platform providers, such as Shopify
✧Payment providers and fraud-prevention services
✧Shipping carriers, fulfillment partners, and delivery service providers
✧Email, customer support, and communication tools
✧Analytics, advertising, and marketing partners, where applicable and where permitted
✧Professional advisors, authorities, regulators, or legal parties where required by law or necessary to protect our rights
We do not sell your personal data. Service providers are expected to process personal data only as necessary to provide their services and in accordance with applicable data protection laws.
8. Shopify & Payment Providers
Our store is hosted on Shopify. Shopify helps us operate our online store, process orders, manage checkout, and provide ecommerce functionality.
Payments are processed by secure third-party payment providers. We do not store full payment card details on our own systems.
9. International Transfers
Some of our service providers may process personal data outside the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, or other legally recognized transfer mechanisms.
By using our website and services, your personal data may be processed in countries where privacy laws may differ from those in your country of residence.
10. How Long We Keep Your Data
We keep personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
✧Orders, invoices, and accounting records: generally retained for 7 years where required for Dutch tax and accounting purposes
✧Customer service communications: retained as long as needed to handle your request and maintain business records
✧Marketing preferences: retained until you unsubscribe or withdraw consent
✧Analytics and cookie data: retained according to the settings of the relevant tools and your consent preferences
11. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
✧Request access to the personal data we hold about you
✧Request correction of inaccurate or incomplete personal data
✧Request deletion of your personal data in certain circumstances
✧Object to certain processing activities
✧Request restriction of processing in certain circumstances
✧Request data portability where applicable
✧Withdraw consent where processing is based on consent, such as marketing or certain cookies
To exercise your rights, please contact us at [email protected]. We may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or with your local supervisory authority.
12. Data Security
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.
However, no website, online service, or transmission method is completely secure. We encourage you to use strong passwords and take care when sharing information online.
13. Children’s Privacy
Our website and services are not intended for children under the age of majority. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate action.
14. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices, content, or security of third-party websites. Please review their privacy policies before using their services.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our business, services, technologies, or legal requirements. The latest version will always be available on our website, with the “Last updated” date shown at the top.
16. Contact Us
If you have any questions about this Privacy Policy or how we handle personal data, please contact us:
Cieyu / Zira Group B.V.
Barbara Strozzilaan 201
1083 HN Amsterdam
The Netherlands
KvK: 98612395
VAT: NL868568600B01
Thank you for trusting Cieyu. We handle your personal data with care, transparency, and respect.