Privacy Policy

This Privacy Policy explains how Aurum Rossi Cañete uses personal data when you visit our website, subscribe to our launch updates, contact us or purchase finished jewelry from us. Sections concerning purchases and customer accounts apply when those services are available.

1. Who is responsible for your data

Aurum Rossi Cañete, trading as Aurum Rossi, is registered in Switzerland.

Business identification number: CHE-285.767.826
Contact: https://aurumrossi.ch/contact/
Website: https://aurumrossi.ch

You can contact us using these details for questions about privacy or to exercise your data protection rights.

We apply Swiss data protection law. The EU General Data Protection Regulation, UK data protection law and other mandatory local requirements also apply where their conditions are met.

2. Personal data we collect

Depending on how you interact with us, we process the following information:

Website visits: technical information such as your IP address, browser and device information, requested pages, access times and security or error logs.

Enquiries: your name, contact details, messages and information needed to answer your request.

Launch updates and newsletters: your email address, any name or language preference you provide, and subscription, consent and unsubscribe records.

Orders: your name, billing and delivery addresses, contact details, products purchased, order value, payment status and delivery information.

Jewelry specifications: ring size, selected materials and personalisation instructions, including engraving where offered.

Customer accounts, where available: your login details in protected form, saved addresses, preferences and order history.

After-sales service: information relating to returns, warranties, complaints and other order-related correspondence.

Please provide only information relevant to your request. Avoid including unnecessary sensitive information in messages, photographs or personalisation instructions.

3. Where information comes from

We receive most information directly from you.

We may also receive payment confirmations from banks or payment providers, delivery updates from carriers, and information needed to fulfil an order from our suppliers.

If someone orders a gift for you, we may receive your name, delivery address and contact details from that person. We use those details for delivery and related customer service. We do not automatically subscribe gift recipients to marketing.

Where required, we provide privacy information to people whose details we receive from another person.

4. Why we use personal data

We use personal data to:

• Operate and secure our website.

• Answer enquiries and prepare quotations.

• Process purchases and payments.

• Arrange order fulfilment and delivery.

• Handle returns, warranties and complaints.

• Maintain necessary accounting and transaction records.

• Prevent fraud and resolve disputes.

• Send launch updates and newsletters when you subscribe.

• Record and respect your privacy choices.

Where the GDPR applies, we rely on contract necessity for requested quotations and purchases, consent for subscription marketing and relevant optional tracking, and legitimate interests for proportionate security, fraud prevention and claims handling.

We also process information to meet applicable legal obligations. Where a requirement arises solely under Swiss law, we assess the appropriate GDPR basis separately where the GDPR also applies.

Required fields are identified on the relevant form. Without information necessary for a request or order, we may be unable to provide the service. Marketing consent is not required to make a purchase.

5. Payments and verification

The available payment methods are shown at checkout.

For bank transfers, we receive information accompanying the payment, such as the payer’s name, payment reference, amount and account details visible on the transaction.

Please do not send full payment-card details or security codes by email.

Where reasonably necessary to investigate suspected fraud or verify a privacy request, we may ask for limited additional information. We explain the purpose and use a proportionate verification method.

6. Who receives personal data

We disclose information where necessary to provide our services, operate our business or meet applicable requirements.

Recipients may include:

• Website hosting, email and technical support providers.

• Payment providers and banks.

• Finished jewelry suppliers and fulfilment partners.

• Delivery companies and customs agents.

• Accounting and professional advisers.

• Authorities where disclosure is legally required or otherwise lawful.

A supplier normally needs product specifications and an order reference. We provide identifiable customer information only where needed for the particular service, such as personalisation or direct delivery.

Providers processing information on our instructions are subject to appropriate contractual arrangements. Some recipients, including banks and payment providers, may act as independent controllers for their own activities.

7. Cookies and similar technologies

Cookies and similar technologies can support functions such as remembering your shopping basket, maintaining a login, protecting the website and storing your preferences.

You can also manage cookies through your browser. Blocking cookies required for a service may prevent that service from working correctly.

8. Launch updates and newsletters

When you subscribe to our launch list or newsletter, we use your details to send the updates you requested.

You can unsubscribe at any time through the link in our marketing emails or by contacting us. Unsubscribing from marketing does not stop necessary communications about an order or service request.

A purchase does not automatically subscribe you to our newsletter.

9. How long we keep information

We retain personal data for as long as necessary for the purposes described in this policy, taking account of applicable retention requirements.

Accounting records and supporting transaction evidence subject to Swiss statutory retention are kept for ten years from the end of the relevant financial year.

Other information is retained according to its purpose:

• Enquiries: until resolved and for any justified follow-up or claims period.

• Order correspondence: for the relevant fulfilment, warranty, recordkeeping or claims period.

• Account information: while the account is maintained, subject to separate retention requirements for transactions.

• Newsletter information: until you unsubscribe or the mailing list is discontinued, with limited consent evidence and suppression records retained where necessary.

• Technical logs: for the period needed for operation, security and investigation.

• Backups: until they expire under the applicable backup cycle.

We may retain relevant information longer where needed for an actual dispute or binding legal requirement. Information is otherwise deleted or anonymised when no longer needed.

10. Security and automated decisions

We apply security measures appropriate to the information and risks, including controls on access to customer information.

No website or communication system can guarantee absolute security. Please protect your account credentials and contact us if you suspect unauthorised use.

Payment providers may operate their own automated security checks. Contact us if you need assistance with a payment issue.

11. Your rights

Depending on applicable law and the circumstances, you may request:

• Information about whether and how we process your personal data.

• Access to your personal data.

• Correction of inaccurate information.

• Deletion of information.

• Restriction of processing.

• A portable copy of eligible information.

You can withdraw consent at any time without affecting processing already lawfully carried out. You may object to direct marketing at any time. Where the GDPR applies, you may also object on grounds relating to your situation to processing based on legitimate interests.

Some rights are subject to conditions. For example, we may need to retain transaction records even if you request account deletion.

Send your request via the contact form. We may need proportionate information to verify your identity.

Requests are normally free. Swiss access requests are generally answered within 30 days; GDPR requests within one month. We explain any applicable exception or permitted extension within the relevant deadline.

You may raise concerns with the Swiss Federal Data Protection and Information Commissioner, Feldeggweg 1, 3003 Berne, Switzerland: https://www.edoeb.admin.ch/en.

Where the GDPR applies, you may complain to the competent EU/EEA supervisory authority, including in your habitual residence or place of work. Where UK law applies, you may contact the Information Commissioner’s Office: https://ico.org.uk.

You do not have to contact us before approaching a competent authority.

12. External websites and social platforms

If you follow a link to another website or interact with us through a social platform, that service also processes information under its own privacy notice.

We remain responsible for our own use of information received through those channels and for any third-party technologies we integrate into our website.

13. Changes to this policy

We update this policy when our practices or applicable requirements change.

We provide additional information and obtain new consent where required before relevant changes take effect.