— Legal
Privacy Policy
Last updated: May 2026
Your data is never sold
Transparent data practices
Encrypted & secure
Opt-out at any time
Who We Are
Celeste Jewels is a fine jewelry brand based at 32 Galle Face Terrace, Colombo 00300, Sri Lanka. We operate the website at celestejewels.flisoft.agency and any associated digital services. When this policy says "Celeste", "we", "us", or "our", it refers to Celeste Jewels.
Questions about this policy can be directed to hello@celeste.jewels.
Information We Collect
We collect information you give us directly and information generated automatically when you use our services.
Information You Provide
Name, email address, postal address, phone number, and payment details when you place an order, create an account, or contact us. For bespoke commissions, we may collect additional design preferences and measurements.
Order & Transaction Data
Details of purchases including items ordered, order value, delivery address, and order history. Payment processing is handled securely by Shopify Payments and Stripe — we do not store your full card details.
Usage & Technical Data
IP address, browser type, device identifiers, pages visited, time on site, referral URLs, and interaction events. This data is collected automatically via cookies and analytics tools.
Communications
Records of emails, messages, and any correspondence you send to us, including customer service enquiries.
How We Use Your Information
We use your data only for legitimate business purposes:
- —Fulfilling and shipping your orders
- —Processing payments and preventing fraud
- —Sending order confirmations and shipping notifications
- —Providing customer support and responding to enquiries
- —Personalising your shopping experience and product recommendations
- —Sending marketing emails and new collection announcements (where you have opted in)
- —Improving our website, products, and services through analytics
- —Complying with legal obligations under Sri Lankan and applicable international law
Cookies
We use cookies and similar tracking technologies to operate our website and improve your experience. Cookies are small text files stored on your device.
Essential Cookies
Required for the website to function — session management, shopping cart, and security. Cannot be disabled.
Analytics Cookies
Help us understand how visitors use our site (e.g. pages visited, time on site). We use anonymised analytics only.
Marketing Cookies
Used to deliver relevant advertisements and measure campaign effectiveness. You can opt out at any time.
You can control or delete cookies through your browser settings at any time. Note that disabling non-essential cookies may affect some site functionality.
Sharing Your Information
We do not sell, rent, or trade your personal information. We share data only with trusted third parties required to operate our services:
- —Shopify — our e-commerce and payment platform
- —Shipping and logistics partners for order fulfilment
- —Email service providers for transactional and marketing communications
- —Analytics providers (data is anonymised or pseudonymised where possible)
- —Legal or regulatory authorities when required by law
All third-party partners are bound by data processing agreements and are prohibited from using your data for their own purposes.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by law. Order records are retained for a minimum of seven years for accounting and legal compliance. Marketing preferences are retained until you opt out. You may request deletion of your account data at any time — see Your Rights below.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete data.
Deletion
Request deletion of your data, subject to legal retention requirements.
Portability
Receive your data in a machine-readable format.
Opt-Out
Unsubscribe from marketing communications at any time via the link in our emails or by contacting us.
Objection
Object to certain processing activities, including profiling.
To exercise any of these rights, please contact us at hello@celeste.jewels. We will respond within 30 days.
Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Payment data is handled exclusively by PCI-DSS compliant processors. Despite these measures, no internet transmission is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our services after any changes constitutes acceptance of the revised policy.
Questions?
If you have any questions about how we handle your data, we are happy to help.
Write to us →