Privacy Policy

Who Is Responsible for Your Data

Webcollation BV, the company behind JewelExperts.com, is the controller, within the meaning of the EU General Data Protection Regulation (GDPR), of the personal data we collect through JewelExperts.com and our own services. Our details are:

Webcollation BV
Address: Hazeschransstraat 14, 2650 Edegem, Belgium
VAT number: BE0775627737
Email: [email protected]

When a store uses one of our Shopify apps, that store is the controller of any personal data about its customers that the app processes, and we process that data on the store’s behalf. This is explained in the section on JewelExperts Shopify apps below.

Information We Collect

• Personal Information: We may collect personal information such as your name, email address, phone number, billing address, and payment details.
• Business Information: Information about your company, including company name, job title, and industry.
• Technical Information: Data such as your IP address, browser type, operating system, and access times.
• Usage Data: Information about your interactions with our website, including pages visited, time spent on the site, and other usage details.

How We Use Your Information

• Personalization
  • Content Customization: We tailor website content, recommendations, and advertisements to match your preferences and behavior.
  • User Experience: We enhance your user experience by remembering your login details, preferences, and settings.
• Advertising
  • Targeted Advertising: We display personalized ads based on your interests, browsing history, and demographics.
  • Retargeting: We show ads to users who have previously visited our site or shown interest in specific products or services.
• Analytics and Performance Monitoring
  • Traffic Analysis: We analyze how users interact with our site, identifying the most popular pages and understanding the overall user journey.
  • Performance Metrics: We measure website performance to identify bottlenecks and optimize load times and responsiveness.
• Marketing and Promotions
  • Email Campaigns: We collect email addresses for sending newsletters, promotional offers, and updates.
  • Customer Segmentation: We group users based on behavior and preferences for targeted marketing efforts.
  • Marketing: We use your information to conduct marketing efforts and promotional activities to inform you about our services and products.
• Improving Products and Services
  • Feedback Collection: We gather user feedback to improve our products, services, and overall website functionality.
  • User Testing: We conduct A/B testing and other user experience research to refine website features and design.
  • Service Improvement: We continuously work on improving our services based on the information and feedback we collect.
• Security and Fraud Prevention
  • Authentication: We verify user identities to protect accounts and prevent unauthorized access.
  • Fraud Detection: We monitor for suspicious activities and transactions to prevent fraud and enhance security measures.
• Legal and Regulatory Compliance
  • Data Retention: We keep records as required by laws and regulations, such as GDPR, CCPA, and others.
  • User Consent: We manage user consent for data collection and usage in compliance with legal requirements.
• E-commerce and Transactions
  • Order Processing: We collect information necessary for processing orders, payments, and shipping.
  • Customer Support: We provide customer support and service based on your interactions and transaction history.
• Social Integration
  • Social Media Sharing: We enable users to share content on social media platforms.
  • Social Logins: We allow users to log in using their social media accounts for convenience.

Sharing Your Information

We do not sell your personal information. However, we may share your information in the following situations:

• Service Providers: With third-party vendors who perform services on our behalf.
• Legal Obligations: To comply with legal requirements or to protect our rights and property.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new owner.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. You can control the use of cookies through your browser settings.

Data Security

We implement appropriate security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. However, no method of internet transmission or electronic storage is completely secure.

JewelExperts Shopify Apps

This section applies to every Shopify app published by Webcollation BV under the JewelExperts name. It explains how our apps handle information about the stores that install them, and applies in addition to the rest of this Privacy Policy. Where an app has details that apply to it alone, they are in its own section below.

• Who Is Responsible: Webcollation BV is the controller of the personal data described in this section.
• What We Collect: When a merchant installs one of our apps, we receive and store details of the store from Shopify, such as its shop domain; the credentials Shopify issues so that the app can act for the store; the settings and content the merchant enters in the app; the store’s plan and subscription status, as provided by Shopify; and technical logs, such as request metadata and errors, needed to run and secure the app. We do not receive card or bank details, because Shopify handles payment for app subscriptions.
• Why We Use It and on What Legal Basis: We use this information to provide the app the merchant installed and to bill for it through Shopify, which is necessary for our contract with the merchant (Article 6(1)(b) GDPR). We also use it to keep our apps secure and reliable and to understand how they are used so that we can improve them, which is our legitimate interest (Article 6(1)(f) GDPR).
• The Store’s Customers: Some of our apps process personal data about a merchant’s customers to provide the features the merchant uses. For that data, the merchant is the controller and determines the legal basis for processing it, and we process it on the merchant’s behalf, as a processor.
• How Long We Keep It: We keep a store’s data for as long as the app is installed. When Shopify asks us to erase a customer’s data, or a store’s data after the app has been uninstalled, we delete it within 30 days of that request. Deleted data may remain in backups for a limited period until it is overwritten.
• Service Providers: We use service providers that process data on our behalf, as processors under data processing agreements, for hosting, database storage, sending emails, network security and content delivery. These are currently Amazon Web Services (AWS) and Cloudflare.
• International Transfers: Where personal data is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.
• Your Rights: Merchants and their staff have the rights described below. Requests about the personal data of a merchant’s customers should be sent to that merchant, as the controller. If you contact us instead, we will forward your request to the merchant.

JewelExperts Appointments for Shopify

JewelExperts Appointments is our Shopify app that lets stores take appointment bookings on their own website. This section explains how the app handles the personal data of the people who book, and applies in addition to the rest of this Privacy Policy.

• What We Collect: For each booking, the customer’s first and last name, email address, telephone number (if given), the service, meeting type, date and time chosen, the language of the booking, and any note the customer writes.
• Why We Use It and on What Legal Basis: The data is used to create and manage the appointment and to send the related emails: confirmations, changes, cancellations and, where the merchant has switched them on, reminders. The merchant, as controller, determines the legal basis for this processing. For a booking this is normally the performance of a contract (Article 6(1)(b) GDPR), and for reminders the merchant’s legitimate interest (Article 6(1)(f) GDPR).
• Connected Calendar and Video-Meeting Accounts: Only if the merchant connects their own calendar or video-meeting account. The app then sends the booking details, namely the service, meeting type, date and time, and the customer’s name, email address, telephone number (if given) and note, to one or more of the merchant’s connected accounts to create, update or cancel the calendar event or video meeting. The customer is added as a guest, so the provider concerned may also email the customer the invitation and any changes to it. These providers process the booking details under the merchant’s own agreement with them. For each connected account, the app stores the connection credentials and account details, such as the email address. It also stores the identifier and link of each event or meeting it creates.
• Google User Data: Information received from Google APIs is used only to provide the calendar features described above. The use and transfer of information received from Google APIs by JewelExperts Appointments will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• How Long We Keep It: Booking data is kept for as long as the merchant uses the app, unless the merchant deletes it sooner. Calendar events and meetings already created on the merchant’s connected accounts remain there, under the merchant’s control.

Your Rights Over Your Personal Data

Under the GDPR you have the following rights over the personal data we hold about you. Each right is explained below, together with how to use it.

• Right of Access (Article 15 GDPR): You can ask whether we hold personal data about you and, if we do, receive a copy of it together with information about what we use it for, where it came from, who we share it with and how long we keep it. To use this right, ask us for a copy of your data.
• Right to Rectification (Article 16 GDPR): You can ask us to correct personal data that is inaccurate and to complete data that is incomplete. To use this right, tell us what is wrong and what it should say.
• Right to Erasure (Article 17 GDPR): You can ask us to delete your personal data where one of the grounds in Article 17 GDPR applies, for example when we no longer need it for the purpose we collected it for, or when you withdraw the consent it was based on. We may retain data where we are legally required to keep it or need it to establish, exercise or defend legal claims. For example, Belgian VAT law (Article 60 of the VAT Code) requires us to keep invoices and related accounting records for 10 years. To use this right, ask us to delete your data.
• Right to Restriction of Processing (Article 18 GDPR): You can ask us to pause the use of your personal data, so that we keep it stored but do not otherwise use it. This applies, for example, while we check a correction you asked for or consider an objection you raised, or when you need the data kept for a legal claim. To use this right, tell us which data it concerns and why.
• Right to Data Portability (Article 20 GDPR): Where we process data you gave us by automated means, based on your consent or on a contract with you, you can receive that data in a structured, commonly used and machine-readable format, and ask us to send it directly to another organisation where this is technically possible. To use this right, ask us for an export of your data.
• Right to Object (Article 21 GDPR): Where we process your personal data based on our legitimate interests, you can object for reasons relating to your particular situation, and we will stop unless we have compelling legitimate grounds that override your interests, or need the data for a legal claim. You can object to the use of your data for direct marketing at any time, without giving a reason, and we will then stop using it for that purpose. To use this right, tell us what you object to.
• Right to Withdraw Consent (Article 7(3) GDPR): Where we process your personal data based on your consent, you can withdraw that consent at any time, and it will be as easy as giving it. Withdrawing consent does not affect the lawfulness of any processing we carried out before you withdrew it. To use this right, contact us, or change your choice where you made it, such as in the cookie settings on this website.
• Right to Lodge a Complaint (Article 77 GDPR): If you believe we have not handled your personal data lawfully, you can complain to a data protection supervisory authority. In Belgium, where we are established, this is the Belgian Data Protection Authority:
  Gegevensbeschermingsautoriteit / Autorité de protection des données, Drukpersstraat 35, 1000 Brussels, Belgium, www.dataprotectionauthority.be
  You can also complain to the supervisory authority in the EU country where you live or work, or where the issue took place. We would welcome the chance to resolve your concern first, so please feel free to contact us before you do.

• How to Exercise Your Rights: To exercise these rights, please contact us at [email protected] or [email protected]. You can also write to us at Webcollation BV, Hazeschransstraat 14, 2650 Edegem, Belgium. Please tell us which right you want to use and, where possible, which data or service your request concerns.
• Response Time: We respond without undue delay and in any event within one month of receiving your request. If a request is complex, or we receive many requests, we can extend this by up to two further months. If we need to, we will tell you within the first month and explain why.
• Cost: Exercising your rights is free of charge. We may charge a reasonable fee based on our administrative costs only for further copies beyond the first, or where a request is manifestly unfounded or excessive, for example because it is repeated without reason, in which case we may also refuse it. If that applies, we will explain why.
• Confirming Your Identity: Before we act on a request, we may need to confirm your identity, so that we do not disclose or change someone else’s data. Where we have reasonable doubts about your identity, we may ask for additional information necessary to confirm it.

International Transfers

Your information may be transferred to and processed in countries other than your own. We will ensure that appropriate safeguards are in place to protect your personal data.

Children’s Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Contact us

If you have any questions or concerns about this Privacy Policy, please contact us at:

Webcollation BV
VAT number: BE0775627737
Email: [email protected]
Address: Hazeschransstraat 14, 2650 Edegem, Belgium

For terms and conditions or any other legal inquiries, please contact:
Email: [email protected]

For billing inquiries, please contact:
Email: [email protected]

For general support, please contact:
Email: [email protected]