Privacy Policy
Privacy Policy
Lazuela Last updated: 05/10/2026 Version: 3.0
At Lazuela, we create jewelry that represents the people you love most. This means we handle something delicate: your name, your address, sometimes the story behind a purchase. We treat that information with the same care we treat the pieces we ship.
This policy explains, plainly, what data we collect, why we use it, with whom we share it, and what you can request from us at any time. It's written to be easy to understand. If anything isn't clear, email us at privacidad@lazuela.com and we'll explain it in simple terms.
1. Who is responsible for your data
Lazuela is the brand responsible for processing personal data collected through lazuela.com.
- Brand: Lazuela
- Website: lazuela.com
- Privacy email: privacidad@lazuela.com
- Customer service email: hola@lazuela.com
- Response time: 20 business days
For any request related to your personal data, including the full identification of the data controller, you can write to us at privacidad@lazuela.com and we will provide it to you.
When we say "Lazuela," "we," or "our" in this document, we are referring to the brand and whoever operates it.
2. What data we process
We only collect what we need to sell, ship, and serve you well. Nothing more.
2.1 Data you provide directly
| Category | What it includes | When we collect it |
|---|---|---|
| Identification | First and last name | When you create your account or place an order |
| Contact | Email, phone | When you buy, subscribe, or write to us |
| Delivery | Address, city, zip code, country, delivery references | When you place an order |
| Billing | Tax data when you request an invoice (RFC, NIF, company name) | Only if you request an invoice |
| Payment | Payment method and transaction confirmation | Upon payment |
| Communications | The content of your messages, emails, and chats with us | When you contact us |
| Content you share | Photos, videos, reviews, and testimonials that you send us or publish | Only if you choose to share them |
| Preferences | Sizes, preferences, wish lists, marketing consents | When using the store |
Regarding your payment data: Lazuela does not store your full card numbers. This information is encrypted and sent directly to the payment gateway, which processes it under PCI-DSS standards. We only see that the payment was approved, the method used, and the last few digits.
2.2 Data generated when you use the site
| Category | What it includes |
|---|---|
| Technical | IP address, device type, browser, operating system, language |
| Navigation | Pages viewed, products consulted, time spent, traffic source |
| Transaction | Order history, abandoned carts, returns |
| Campaign | Advertising and cookie identifiers when you arrive from an advertisement |
2.3 Data we DO NOT collect
We do not request or want sensitive data: ethnic origin, religious or political beliefs, health, sexual orientation, biometric or genetic data. If you spontaneously send them to us in a message, we will delete them.
We do not purchase databases or obtain your data from sources that you cannot identify.
3. Where we obtain your data
- From you, when you buy, create an account, subscribe, write to us, or participate in a promotion.
- From your browsing, through cookies and similar technologies (see section 11).
- From our technology providers, when they confirm a payment, shipment, or delivery.
- From social networks, only if you interact with our accounts or write to us through those channels, and only with the information that those platforms allow us to see according to your own privacy settings.
4. Why we use your data and on what legal basis
Each use has a specific reason. Here are all of them.
| Purpose | What it entails | Legal basis |
|---|---|---|
| Process your order | Charge, prepare, ship, and deliver your purchase | Contract execution |
| Manage returns and warranties | Process exchanges, refunds, and claims | Contract execution / legal obligation |
| Customer service | Answer your inquiries by email or social media | Contract execution / legitimate interest |
| Transactional communications | Order confirmation, shipping notice, tracking | Contract execution |
| Tax and accounting obligations | Issue and retain invoices and records | Legal obligation |
| Fraud prevention | Detect fraudulent orders and protect the store | Legitimate interest / legal obligation |
| Email or messaging marketing | Send you updates, collections, and promotions | Consent (revocable at any time) |
| Personalized advertising | Show you relevant ads on social media and search engines | Consent (via the cookie banner) |
| Analytics and site improvement | Understand what works and what doesn't to improve the store | Consent / legitimate interest |
| Customer reviews and content | Publish your testimonial, photo, or video | Consent |
| Legal defense | To exercise or defend claims | Legitimate interest |
About legitimate interest: when we invoke this basis, we have evaluated that our interest does not override your rights. You can object at any time by writing to privacidad@lazuela.com, and we will respect it unless there is a compelling legal reason.
We never use your data for a purpose incompatible with what we informed you about when collecting it, nor do we send you advertising if you did not accept it.
5. With whom we share your data
We do not sell your personal data. Never. Not to advertisers, not to intermediaries, not to anyone.
We do share it, to the strictly necessary extent, with the following categories of providers that allow us to operate:
| Category | For what purpose | What data is received |
|---|---|---|
| E-commerce platform and hosting | To run the store | Account, order, and browsing data |
| Payment gateways | To charge securely | Payment data and amount |
| Distribution centers and logistics partners | To prepare and ship your order | Name, address, phone, email, order content |
| Shipping and courier companies | To deliver your package and provide tracking | Name, address, phone |
| Email and messaging platforms | To send you confirmations and communications | Name, email, phone |
| Analytics tools | To measure and improve the site | Technical and browsing data |
| Advertising platforms | To display and measure ads | Cookie identifiers and purchase events |
| Customer service and reviews | To manage tickets and testimonials | Contact and communication data |
| Legal, accounting, and tax advisors | To comply with the law and defend ourselves | Strictly necessary data |
| Authorities | When required by law | Strictly required data |
With all of them, we maintain data processing contracts that oblige them to use your information only to provide us with the service, to protect it, and to return or delete it upon termination of the relationship.
6. International data transfers
Lazuela is an international brand. We operate with a network of distribution centers and logistics partners located in different countries, which allows us to fulfill orders in America and Europe.
Therefore, and for your order to reach your door, some of your data may be processed outside your country of residence, including countries in America, Europe, and Asia. Specifically, your name, shipping address, phone number, and email may be shared with the distribution center and carrier corresponding to your shipment.
Some of these countries have data protection laws different from your country's and, in certain cases, less protective. When this occurs, we adopt adequate safeguards to protect your information:
- Standard contractual clauses approved by the European Commission, when the transfer leaves the European Economic Area to a country without an adequacy decision.
- Equivalent contractual clauses and confidentiality commitments required from our partners in other jurisdictions.
- Strict data limitation: logistics partners only receive the essential data to prepare and deliver the order. They do not receive your payment data, purchase history, or marketing preferences.
- Contractual prohibition from using your data for their own purposes.
You can request a copy of the applicable safeguards by writing to privacidad@lazuela.com.
7. How long we retain your data
We retain each piece of data only as long as it has a reason to exist:
| Data type | Retention period |
|---|---|
| Account data | While the account is active, and up to 12 months after your deletion request |
| Order, billing, and tax data | The period required by applicable tax legislation (between 5 and 10 years depending on the country) |
| Payment data | We do not store it; it is retained by the gateway according to its own policies |
| Customer service communications | 24 months from the last contact |
| Marketing data | Until you revoke your consent, and up to 12 months later to prove deregistration |
| Cookies and browsing data | According to the period indicated in the Cookies Policy |
| Data linked to a claim | During the procedure and the subsequent statute of limitations period |
Once the period expires, we delete or anonymize the information irreversibly.
8. How we protect your data
We apply technical and organizational measures proportionate to the risk:
- Connection encryption using SSL/TLS certificate across the entire site.
- Encryption of payment data in transit, processed by PCI-DSS certified gateways.
- Access control: only personnel who need data for their work can view it.
- Strong authentication on administrative platforms.
- Confidentiality and processing contracts with all our suppliers.
- Backups and periodic review of permissions.
No system is infallible. If a security breach occurs that poses a high risk to your rights, we will notify you and inform the competent authority within the deadlines set by law.
9. Your rights
Regardless of where you live, you can exercise the following rights regarding your data:
- Access. To know what data we have about you and obtain a copy.
- Rectification. To correct inaccurate or incomplete data.
- Erasure or deletion. To request that we delete your data when it is no longer necessary.
- Objection. To object to processing based on legitimate interest, and in any case to advertising.
- Restriction of processing. To request that we suspend processing while a discrepancy is resolved.
- Data portability. To receive your data in a structured, commonly used format, or to request that we send it to another controller.
- Withdrawal of consent. To withdraw the consent you gave us at any time, without affecting the lawfulness of processing prior to withdrawal.
- Not to be subject to automated decisions with significant legal effects.
In Mexico and several Latin American countries, these rights are known as ARCO rights (Access, Rectification, Cancellation, and Objection). They are the same, and we handle them equally.
Exercising any of these rights is free and will not have any consequences on your orders or your relationship with us.
10. How to exercise your rights
Write to us at privacidad@lazuela.com indicating:
- Your full name and a contact method.
- The right you wish to exercise.
- A clear description of the data affected.
- A document that proves your identity (or order details, if you prefer not to send documentation).
Response times: we will respond within a maximum of 20 business days, which is the shortest applicable period among the jurisdictions where we operate. If the request is complex, we will notify you and may extend it according to applicable law.
To unsubscribe from marketing, none of this is necessary: use the "unsubscribe" link at the bottom of any email, or reply to us with the word UNSUBSCRIBE.
If you are not satisfied with our response, you can file a complaint with your country's data protection authority. You will find the relevant authority in the annexes to this policy.
11. Cookies and similar technologies
We use our own and third-party cookies for the store to function, to remember your cart, to measure site performance, and to show you relevant advertising.
Cookies that are not strictly necessary are only activated if you accept them in the consent banner. You can accept them, reject all of them, or choose by category, and rejecting is as easy as accepting. You can change your decision at any time from the "Cookie settings" link in the footer.
Full details are in our Cookie Policy.
12. Marketing and personalized advertising
If you give us your consent, we will send you emails or messages about new collections, launches, and promotions. We write little and only when we have something to say.
We may also show you ads on social media and search engines. For this, we share encrypted identifiers with these platforms, which cross-reference them with their own databases to show you relevant content and measure results. This only happens if you have accepted advertising cookies.
You can opt out at any time, with one click, and without affecting your purchases.
13. Automated decisions and profiling
We use automated tools for two things: recommending products to you and detecting potential fraud in orders.
These tools do not make decisions with legal effects on you. If an anti-fraud system flags an order, a person reviews it before canceling it, and you can always request this human review and explain your case by writing to privacidad@lazuela.com.
14. Minors
Lazuela is intended for adults. We do not knowingly sell to minors or collect data from minors.
If you are a parent or guardian and believe that a minor under your care has provided us with data, please write to us at privacidad@lazuela.com and we will delete it immediately.
15. Changes to this policy
If we change this policy, we will update the date in the header. When the change is substantial—a new purpose, a new recipient, or a change in your rights—we will notify you by email or through a prominent notice on the site before it takes effect.
We keep previous versions available upon request.
16. Contact
All our attention is via email. You write to us and a team member responds, with no call centers or automatic replies.
Privacy and exercise of rights: privacidad@lazuela.com Customer service: hola@lazuela.com
We respond Monday to Friday. If you write to us on a weekend, you will receive a response on the next business day.
Country Annexes
The following annexes supplement the above policy with information required by the legislation of each country. In case of contradiction, the annex corresponding to your place of residence prevails.
Annex A — Mexico
This annex constitutes the Comprehensive Privacy Notice required by the Federal Law on Protection of Personal Data Held by Private Parties in force in Mexico.
Controller: Lazuela, brand responsible for the processing of data collected on lazuela.com. You can request the full identification of the controller by writing to privacidad@lazuela.com.
Personal data processed: those described in section 2 of this policy. We do not process sensitive personal data.
Primary purposes (necessary for the relationship): process and deliver your order, manage payments, returns and warranties, provide customer service, issue tax receipts, and comply with legal obligations.
Secondary purposes (not necessary, you can refuse without affecting your purchase): sending commercial communications, personalized advertising, satisfaction surveys, and statistical analysis.
If you do not want your data to be used for secondary purposes, please write to us at privacidad@lazuela.com with the subject "Limitation of use". Your refusal will not be a reason to deny you any service.
Transfers: as per section 6. Transfers to our logistics, payment, and technology providers are necessary for the provision of the service. For transfers other than those legally provided, we will request your consent.
ARCO rights and revocation: you can exercise your rights of Access, Rectification, Cancellation, and Opposition, as well as revoke your consent or limit the use and disclosure of your data, by requesting it at privacidad@lazuela.com according to the procedure in section 10.
Authority: if you consider that your right to data protection has been violated, you can go to the competent authority in Mexico on personal data protection.
Annex B — Spain, European Union and European Economic Area
Processing in accordance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD).
Legal bases: as indicated in section 4.
International transfers: as per section 6, covered by standard contractual clauses approved by the European Commission when the destination country does not have an adequacy decision. You can request a copy of these safeguards.
Rights: access, rectification, erasure, objection, restriction, portability, and not to be subject to automated decisions, in accordance with Articles 15 to 22 of the GDPR.
Supervisory authority: you can lodge a complaint with the Spanish Data Protection Agency (AEPD), www.aepd.es, or with the supervisory authority of your Member State.
Data Protection Officer: it is not mandatory to appoint one for the type and volume of processing we carry out. Queries are handled at privacidad@lazuela.com.
Annex C — Colombia
Processing in accordance with Law 1581 of 2012 and its regulatory decrees.
As the data subject, you have the right to know, update, rectify, and delete your personal data, to request proof of the authorization granted, to be informed about the use given to your data, to file complaints with the Superintendence of Industry and Commerce (SIC), and to revoke authorization.
Queries will be addressed within a maximum of 10 business days and complaints within a maximum of 15 business days, extendable as per law.
Authorization: by placing an order or subscribing, you expressly and informedly authorize the processing of your data in accordance with this policy.
Annex D — Argentina
Processing in accordance with Law 25.326 on the Protection of Personal Data.
The data subject has the right to access their data free of charge at intervals of no less than six months, unless they prove a legitimate interest in doing so.
The Public Information Access Agency, the control body of Law 25.326, is empowered to handle complaints and claims filed by those whose rights are affected by non-compliance with current regulations on personal data protection.
Annex E — Chile
Processing in accordance with Law 19.628 on the Protection of Private Life and, from its full entry into force, in accordance with Law 21.719, which creates the Personal Data Protection Agency and modernizes the Chilean regime.
You can exercise your rights of access, rectification, cancellation, objection, portability, and blocking by writing to privacidad@lazuela.com.
Annex F — Peru
Processing in accordance with Law 29733 on Personal Data Protection and its regulations.
You can exercise your rights of access, rectification, cancellation, and objection, as well as the rights to information, objective processing, and protection, by writing to privacidad@lazuela.com.
In case of an unsatisfactory response, you can go to the National Authority for Personal Data Protection of the Ministry of Justice and Human Rights.
Additionally, we provide our Virtual Complaints Book, accessible from the footer of the site.
Annex G — United States (California residents)
In accordance with the California Consumer Privacy Act (CCPA), as amended by the CPRA, if you are a California resident you have the right to:
- Know what categories of personal information we collect, for what purpose, and with whom we share them.
- Request a copy of your personal information.
- Request the deletion of your personal information.
- Request the correction of inaccurate information.
- Limit the use of sensitive personal information.
- Opt out of the "sale" or "sharing" of your personal information.
- Not be discriminated against for exercising these rights.
Lazuela does not sell personal information for money. However, the use of advertising cookies may be considered "sharing" under the CCPA. You can disable it using the link "Do not sell or share my personal information" available in the footer, or by rejecting advertising cookies in the consent banner.
To exercise your rights, write to privacidad@lazuela.com. We will respond within a maximum of 45 days, extendable to 90 when necessary.
This policy has been specifically drafted for Lazuela. It is not a generic template and reflects the actual data processing of our operation.
