Privacy policy

Last Updated: January 26, 2026

Grandmetric SRL, with its registered office at Strada Samuel Von Brukenthal, Avrig, Sibiu County, Romania, registered at the Trade Register under no. J2022001204322, having VAT number (CUI) 46288590, email: social@rua-jewelry.com (hereinafter referred to as “RUA” or the “Operator”), operates this store and website, including all information, content, features, tools, products, and related services, to provide you, the customer, with a tailored shopping experience (“Services”).

RUA is powered by Shopify, enabling us to provide the Services. This Privacy Policy describes how we collect, use, and share your personal information when you visit, use, make a purchase, or otherwise interact with the Services, or when you communicate with us in other ways. In case of any discrepancy between our Terms of Service and this Privacy Policy, this Privacy Policy governs the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any Service, you confirm that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.

Personal Information We Collect or Process

When we use the term “personal information,” we refer to information that identifies you or can reasonably be associated with you, as defined by Regulation (EU) 2016/679 (“GDPR”). Personal information does not include information collected anonymously or anonymized.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact information: Name, address, billing address, shipping address, phone number, email address.
Financial information: Data necessary to process payments (note that payments are processed by authorized providers, and RUA does not store full card data).
Account information: Username, password, preferences, and settings.
Transaction information: Products viewed, added to cart, purchased, returned, or exchanged.
Communications with us: Requests, messages, correspondence with customer service.
Device information: IP address, browser type, device used.
Usage information: Interactions with the website and Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you, including when you create an account, visit or use the Services, communicate with us, or otherwise provide your personal information.
Automatically through the Services, including from your device when you use our products or services or visit our websites, as well as through cookies and similar technologies.
From our service providers, including when we engage them to enable certain technologies and when they collect or process personal information on our behalf.
From our partners or other third parties, as permitted by law.

How We Use Your Personal Information

We process personal information for the following purposes and based on the following legal bases (Art. 6 GDPR):

Providing, personalizing, and improving the Services: We use your personal information to deliver the Services, fulfill our contract with you, process payments, honor your orders, retain your preferences and items of interest, send account-related notifications, handle purchases, returns, exchanges, or other operations, create and manage your account, arrange delivery, facilitate returns and exchanges, allow you to post reviews, and create a personalized shopping experience, including product recommendations based on your purchases. This may include using your personal information to improve and better tailor the Services.
Marketing and advertising: We use your personal information for marketing and promotional purposes, including sending marketing, advertising, and promotional communications via email, SMS, or mail, and displaying online advertisements for products or services within the Services or on other websites, including based on items you previously purchased or added to your cart, and other activity within the Services.
Security and fraud prevention: We use your personal information to authenticate your account, provide a secure checkout and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services. If you choose to use the Services and create an account, you are responsible for keeping your account data secure. We strongly recommend not sharing your username, password, or other access details with anyone else.
Communication with you: We use your personal information to provide customer support, respond promptly, deliver efficient services, and maintain our business relationship with you.
Legal reasons: We use your personal information to comply with applicable law or respond to valid legal procedures, including requests from law enforcement or public authorities, to investigate or participate in civil proceedings, potential or actual litigation, or other legal processes, and to enforce or investigate potential breaches of our terms, conditions, or policies.

How We Share Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes, subject to this Privacy Policy. Such circumstances may include:

With Shopify, service providers, and other third parties providing services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and delivery).
With business and marketing partners to provide marketing services and deliver advertising materials. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with various merchants and websites. Our business and marketing partners will use your information according to their own privacy policies. Depending on your location, you may have the right to request that we do not share your information for targeted marketing purposes. You can exercise this right here.
When you request, provide consent, or otherwise agree to the disclosure of certain information to third parties, such as to ship products to you or through social media widgets or login integrations.
With our affiliates or within our corporate group.
In connection with a business transaction, such as a merger or bankruptcy, to comply with legal obligations (including responding to subpoenas, search warrants, and similar requests), to enforce any applicable terms of service or policies, and to protect or support the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify Inc., which may process your personal data as a data processor or independent controller, in accordance with its privacy policies. Data may be transferred outside the European Economic Area, including to the United States and Canada, under the Standard Contractual Clauses approved by the European Commission. To learn more about how Shopify uses your personal information and your rights, you can visit the Shopify Privacy Policy for consumers. Depending on your location, you may exercise certain rights regarding personal information here.

Third-Party Sites and Links

We are not responsible for the privacy practices of third-party websites accessed through links in the Services.

Children’s Data

The Services are not intended for use by children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided personal information to us, you may contact us using the details below to request deletion. As of the effective date of this Privacy Policy, we have no knowledge of distributing or selling personal information of individuals under 16 years of age as defined by applicable law.

Security and Data Retention

We implement appropriate technical and organizational measures to protect data. Personal information is retained only as long as necessary to fulfill legal purposes.

Your Rights and Choices

Under GDPR, you have:

Right of access: You may have the right to request access to the personal information we hold about you.
Right to deletion: You may have the right to request deletion of personal information we hold about you.
Right to correction: You may have the right to request correction of inaccurate personal information we hold about you.
Right to portability: You may have the right to receive a copy of your personal information and request its transfer to a third party in certain circumstances and with certain exceptions.
Right to opt-out of sale or sharing for targeted advertising: Depending on your location, you may have the right to opt-out of the “sale” or “sharing” of your personal information for targeted advertising purposes. You may exercise this right here.

If you visit our site with Global Privacy Control (GPC) enabled, we may automatically treat this as an opt-out request for your device and browser. If your device is associated with a Shopify account, we will apply the request to the account as well. For more information about GPC, see: https://globalprivacycontrol.org/.

You can also manage communication preferences, including opting out of promotional emails at any time using the unsubscribe option in our emails. Transactional emails (e.g., account or order notifications) may still be sent.

For residents of the UK or the EEA, subject to local exceptions and limitations, you may also have:

Right to object or restrict processing: You may request that we stop or limit processing of personal information for certain purposes.
Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of prior processing.

You can exercise these rights via the Services or by contacting us using the information below. Verification of identity may be required. You may designate an authorized representative to act on your behalf.

Complaints

If you have complaints about how we process your personal information, contact us using the details below. Depending on your location, you may also have the right to lodge a complaint with the national supervisory authority (e.g., ANSPDCP in Romania). For the EEA, a list of supervisory authorities can be found here.

International Transfers

Your personal information may be transferred, stored, and processed outside the country where you reside. Transfers outside the EEA or the UK rely on recognized transfer mechanisms, such as Standard Contractual Clauses or equivalent agreements, unless the destination country has been deemed to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this site, update the “Last Updated” date, and provide notice as required by applicable law.