6 Moments
Privacy policy
This privacy policy explains how 6 Moments collects and uses personal data when you browse the store, contact the atelier, create an account, subscribe to the newsletter or place an order.
Last updated: 31 July 2026
1. Data controller
- Controller
- To be completed: Legal company name
- Address
- To be completed: Registered office address
- Privacy contact
- 6moments.jewelry@gmail.com
2. Personal data we process
- Account and contact data: name, email address, telephone number, password in encrypted form, saved addresses and account preferences.
- Order and delivery data: products, size and personalisation choices, billing and shipping addresses, order history, returns and correspondence.
- Payment data: payment status and transaction identifiers. Card details are entered directly on Stripe's secure checkout and are not stored by 6 Moments.
- Atelier, newsletter and gift-hint data: messages, consent records, email address and, when you use “Send a hint”, the sender's and recipient's details supplied by you.
- Technical data: IP address, device and browser information, timestamps, security and server logs, session identifiers, language and currency preferences.
3. Purposes and legal bases
If information required at checkout is not provided, we may be unable to conclude or fulfil your order. Newsletter subscription is optional.
4. Recipients
We disclose only the data necessary for the relevant service to trusted processors and recipients, which may include:
- Stripe and the financial institutions involved in payment processing;
- selected delivery carriers, including DHL or DPD, and fulfilment partners;
- hosting, database, security, email and customer-support providers;
- professional advisers, courts, regulators or public authorities where legally required.
We do not sell personal data.
5. International transfers
Some service providers may process data outside the European Economic Area. Where this occurs, we rely on a valid transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required. You may contact us for information about the applicable safeguards.
6. Retention
We keep personal data only for as long as necessary for the purpose for which it was collected and to meet tax, accounting, consumer-protection and legal-claims obligations. Newsletter data is kept until you unsubscribe or withdraw consent, subject to a minimal suppression record needed to respect that choice.
To be completed: Applicable order, account, enquiry and technical-log retention periods
7. Cookies and local storage
Strictly necessary technologies maintain the shopping session, cart, checkout, account security and your language or currency choice. Non-essential analytics or marketing technologies, if introduced, may be activated only after consent. You can delete cookies in your browser; blocking necessary cookies may prevent the cart or checkout from working.
8. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or object to processing. You may withdraw consent at any time without affecting earlier lawful processing. You may also object at any time to direct marketing.
Send requests to 6moments.jewelry@gmail.com. We may need to verify your identity before acting on a request.
9. Complaints
You have the right to lodge a complaint with the data protection authority in the country where you live, work or where the alleged infringement occurred. Our lead authority is: To be completed: Name and website of the competent data protection authority. A list of EEA authorities is available from the European Data Protection Board.
10. Automated decisions
We do not use personal data for solely automated decisions that produce legal or similarly significant effects. Any product quiz or recommendation is optional and does not affect your ability to shop.
11. Security and policy changes
We use appropriate technical and organisational measures designed to protect personal data. We may update this policy when our services, providers or legal duties change; the date above shows the latest revision.
Merchant notice: Entries highlighted as “to be completed” must be configured before launch. The retention schedule and processor list must reflect actual operations and local law, and this policy should be reviewed for every sales market.