Privacy policy

Last updated: August 28, 2026

This Privacy Policy describes how SIA Aneli, reg. No. 40203635712, Rūpniecības iela 5–14A, Riga, LV-1010, Latvia ("ANELI Antwerp", "we", "us" or "our") collects, uses and discloses your personal information when you visit aneli.eu, use our services or make a purchase (collectively, the "Services"). For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), we are the data controller of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal or regulatory reasons. The revised version will be posted on the Site with an updated "Last updated" date.

Personal information we collect

Information you provide directly:

  • Contact details: name, address, phone number, email
  • Order information: billing and shipping address, payment confirmation, contact details
  • Account information: username, password and security details
  • Consultation and appointment requests: information you provide when booking a private viewing or contacting our gemologist
  • Customer support communications
  • Verification data: where required for high-value orders or by anti-money-laundering and sanctions rules, identity documents and confirmation of the source of funds

Information collected automatically ("Usage Data"): device and browser information, IP address, network details and interaction with the Services, collected via cookies, pixels and similar technologies.

Information from third parties: service providers such as Shopify (our e-commerce platform), payment processors and delivery partners may collect information on our behalf.

How we use your personal information

  • Providing products and services — processing payments, fulfilling orders, arranging insured delivery, managing returns, and maintaining your account (performance of a contract, Art. 6(1)(b) GDPR)
  • Personal consultations — responding to viewing requests and gemologist consultations (contract / legitimate interest)
  • Marketing — sending marketing communications where you have subscribed; you can withdraw consent at any time via the unsubscribe link (consent, Art. 6(1)(a); legitimate interest, Art. 6(1)(f) GDPR)
  • Security and fraud prevention (legitimate interest, Art. 6(1)(f) GDPR)
  • Compliance with legal obligations, including accounting and tax law and, where applicable, customs, export control, sanctions and anti-money-laundering requirements (Art. 6(1)(c) GDPR)

  • Establishing, exercising or defending legal claims, including in relation to returns, defects and payment disputes (legitimate interest, Art. 6(1)(f) GDPR)

Cookies

We use cookies to power and improve the Site, run analytics and, with your consent, personalise content and marketing. On your first visit you can accept, decline or manage cookie categories via our cookie banner; you can change your preferences at any time. For details of cookies used by our platform provider, see https://www.shopify.com/legal/cookies.

How we disclose personal information

We may disclose personal information to:

  • Service providers acting on our behalf: Shopify (hosting and e-commerce), payment processors, insured delivery and logistics partners, IT and analytics providers
  • Customs authorities and customs brokers, where necessary to export and import your order
  • Providers of instalment or split payment services, where you choose that payment method; they act as separate controllers under their own privacy notices
  • Professional advisers and public authorities where required by law
  • Marketing partners, only with your consent

We do not sell your personal information and we do not use or disclose sensitive personal information for the purpose of inferring characteristics about you.

Payments

Payments are processed by our payment service providers. We do not store full card details; payment data is collected and processed by the payment provider in accordance with its own privacy policy and PCI DSS requirements.

International transfers

Where personal information is transferred outside the European Economic Area, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses, unless the destination country ensures an adequate level of protection. Where you order from outside the EEA, your delivery and contact details are transferred to the carrier and to the customs authorities of the destination country in order to perform the contract (Art. 49(1)(b) GDPR).


Retention

We retain personal information for as long as necessary to provide the Services, comply with legal obligations (including accounting requirements), resolve disputes and enforce agreements.

Your rights

Under the GDPR you have the right to access, correct, delete and receive a copy of your personal information, to restrict or object to processing, to withdraw consent at any time, and to lodge a complaint with a supervisory authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv). To exercise your rights, contact us using the details below; we may need to verify your identity before responding.

Children’s data

The Services are not intended for children, and we do not knowingly collect personal information about children. If you believe a child has provided us with personal information, please contact us and we will delete it.

Contact

SIA Aneli · Reg. No. 40203635712 · VAT No. LV40203635712 · Rūpniecības iela 5–14A, Riga, LV-1010, Latvia · info@aneli.eu · +371 29228821.