Privacy statement

Forever Locked respects your privacy and takes the protection of your personal data seriously. This privacy statement explains which personal data we collect, why we collect it, how we use it, and what rights you have. We recommend reading this statement carefully.

In our processing, we comply with applicable privacy legislation, including the General Data Protection Regulation (GDPR). This means, among other things, that:

• we clearly specify the purposes for which we process personal data in this privacy statement;
• we limit our collection of personal data to only the data necessary for legitimate purposes;
• we first obtain your explicit consent to process your personal data in cases where your consent is required;
• we take appropriate security measures to protect your personal data;
• we respect your right to access, correct, or have your personal data deleted.

If you have any questions or want to know which data we hold about you, you can contact us using the contact details at the bottom of this statement.

2. Who are we?

C'est Moi Jewels BV, handelend onder de naam Forever Locked Jewels
Keurenplein 41 (C4889) 1069CD Amsterdam
CoC: 772817682
VAT NL859247673B01

Website: https://foreverlockedjewels.com
Email: [email protected]

Forever Locked designs jewellery that is available through selected stockists and online stores.

2. Which data do we collect and for what purpose?

2.1 General contact form

When you contact us via the contact form or by email, we collect the following information:

Collected data:

• First and last name
• Email address
• Phone number (optional)
• Content of your message/question

Purpose: To respond to your inquiries and get in touch with you.

Legal basis: Your consent given by submitting the form.

Retention period:

• Submitted contact forms are deleted from the website after 7 days.
• Server backups are retained for a maximum of 180 days.
• We retain email correspondence for a maximum of 1 year after the last contact.

2.2 Reseller Application Form

When you, as a retailer/reseller, submit an application to include Forever Locked jewellery in your collection, we collect the following information:

Collected data:

• Company name
• Contact person name
• Email address
• Phone number (optional)
• Website/webshop URL (optional)
• Business type
• Location
• Product interest
• Content of general question/comment

Purpose: To process your application and forward it to our wholesale partner Aumentum BV, who handles the supply of our jewellery to resellers.

Legal basis: Your consent given by submitting the form and the performance of pre-contractual measures.

Retention period:

• Submitted application forms are deleted from the website after 7 days
• Server backups are retained for a maximum of 180 days.
• Data held by Aumentum BV is retained in accordance with their privacy policy

Note: Your data will be shared with Aumentum BV. Additionally, a copy will be sent to [email protected]. For questions about how Aumentum BV processes your data, please refer to their privacy policy.

3. Cookies, Analytics and Security

3.1 Cookies

Our website does not use cookies. We do not place tracking cookies, analytical cookies, or marketing cookies on your device.

3.2 Website analytics

We use Independent Analytics to understand how visitors use our website. This helps us improve the site.

Important information:

• All analytics data is fully anonymised
• No cookies are placed
• Data remains on our own server and is not shared with third parties
• Analytics data is retained for a maximum of 2 years
• Your IP address is not stored

Purpose: Insight into website usage and improvement of the user experience.

Legal basis: Legitimate interest (no personal data is collected, fully anonymised).

This method of analytics is privacy-friendly and does not require consent because no personal data is collected.

3.3 Spam Protection with Cloudflare Turnstile

To protect our contact forms from spam and automated abuse, we use Cloudflare Turnstile. This service helps us distinguish between real visitors and automated bots.

How it works:

• Turnstile analyses your browser behaviour in the background
• In most cases, this works completely invisibly
• Occasionally, you may see a short verification if the system detects suspicious behaviour
• No cookies are placed

Data processed by Cloudflare:

• IP address
• Browser information (User-Agent)
• Technical characteristics of your internet connection (TLS fingerprint)
• Interaction patterns with the website

Purpose: Protection of our website and forms against spam, bots, and abuse.

Legal basis: Legitimate interest (security of our website and systems).

Retention period: Cloudflare retains this data temporarily for the duration of the verification. For more information on how Cloudflare handles your data, see the Cloudflare Privacy Policy.

Processor: Cloudflare, Inc. (United States) acts as a processor. Cloudflare complies with the GDPR and has implemented appropriate safeguards for international data transfers.

4. Who do we share your data with?

We only share your personal data when necessary and exclusively with the following parties:

Processors

Aumentum BV
Country: Netherlands
Purpose: Processing wholesale applications from resellers/retailers
Shared data: Only data from the reseller application form

Proxxius
Country: Netherlands
Purpose: Hosting, website development, maintenance, and website security
Access: This party has access to server data as a technical administrator

Cloudflare, Inc.
Country: United States
Purpose: Spam protection via Turnstile
Shared data: Technical data such as IP address, browser information, and interaction patterns
Safeguards: Cloudflare complies with the GDPR and has appropriate safeguards for data transfer

Legal obligation

We may share personal data if we are required to do so under a legal obligation or court order, or for investigations related to public safety.

Business transfer

In the event of a takeover, merger, or sale of our company, your data may be transferred to the new owner, provided they comply with the provisions of this privacy statement.

5. Security of your data

We take the security of your personal data very seriously. We have implemented appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access, including:

• Secure servers with SSL certificate (HTTPS)
• Cloudflare security and DDoS protection
• Spam protection on forms (Turnstile)
• Limited access to personal data (only necessary personnel)
• Regular security updates and monitoring
• Encrypted data storage
• Automatic deletion of form data

6. Your rights

You have the following rights regarding your personal data:

• Right of access: You can request which personal data we process about you
• Right to rectification: You can have your personal data corrected or completed
• Right to erasure: You can request the deletion of your personal data
• Right to restriction: You can request the restriction of the processing of your data
• Right to data portability: You can request your data in a structured format
• Right to object: You can object to the processing of your data
• Right to withdraw consent: You can withdraw any consent you have previously given at any time

To exercise these rights, you can contact us using the contact details below. We will respond to your request within 30 days.

Please make sure to clearly state who you are so that we can ensure we are modifying or deleting the correct person’s data.

7. Retention periods

We do not retain your personal data longer than necessary for the purposes for which it was collected. The specific retention periods can be found for each purpose in section 2.

8.Third-party websites

This privacy statement only applies to the website and services of Forever Locked. Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external websites. We recommend reading the privacy statements of these websites before using them.

9. Changes to this privacy statement

We reserve the right to modify this privacy statement. Changes will be published on this page. We recommend reviewing this privacy statement regularly. The date of the latest update is listed at the top of this page.

10. Complaints

If you are not satisfied with the way we handle your personal data, you can contact us. If you cannot resolve the issue with us, you have the right to file a complaint with the Dutch Data Protection Authority.

Dutch Data Protection Authority
P.O. Box 93374
2509 AJ The Hague
Telefoon: 088 – 1805 250
Website: www.autoriteitpersoonsgegevens.nl

11. Contact and questions

For questions about this privacy statement or to exercise your rights, you can contact us at:

C'est Moi Jewels BV, handelend onder de naam Forever Locked Jewels
Keurenplein 41 (C4889) 1069CD Amsterdam
Email: [email protected]