Privacy policy


Last Updated: 26 September 2026

Gem n Tonic respects your privacy and is committed to protecting personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data-protection legislation.

1. Data Controller

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the data controller is:

GEM TONIC SINGLE MEMBER P.C.
Trading as Gem n Tonic
143 Chrysostomou Smyrnis Ave
162 31 Vyronas, Greece

Registration No.: 188939802000
Phone: +30 211 008 5010
Email: hello@gemntonic.com

2. Information We May Collect

Depending on how you interact with us, we may collect:

  • Name

  • Business or company name

  • Business information

  • Billing and shipping addresses

  • Email address

  • Telephone number

  • Company registration or tax information supplied for account or invoicing purposes

  • Wholesale application information

  • Account information

  • Order and transaction information

  • Payment-related information

  • Shipping information

  • Communications with us

  • IP address

  • Browser and device information

  • Website usage information

  • Cookie and similar technology information

  • Marketing preferences

For personalised products, we may also process names, dates, initials, handwriting, fingerprints, photographs, coordinates, messages, artwork or other information supplied for production.

3. How We Use Information

We may process personal data to:

  • Review wholesale applications

  • Create and manage trade accounts

  • Process and fulfil orders

  • Manufacture personalised products

  • Process payments

  • Arrange shipping

  • Issue invoices and maintain transaction records

  • Provide customer service

  • Handle returns, claims and refunds

  • Communicate regarding orders and accounts

  • Prevent fraud and protect our services

  • Improve our website and services

  • Meet accounting, tax and legal obligations

  • Send marketing communications where legally permitted

4. Legal Bases

Depending on the circumstances, processing may be based on:

Contract — where processing is necessary to enter into or perform a contract.

Legal obligation — where information must be processed or retained to comply with applicable law.

Legitimate interests — where processing is reasonably necessary to operate, protect and improve our business, provided those interests do not override applicable individual rights.

Consent — where we specifically request consent, including certain marketing or optional technologies where required.

Where processing is based on consent, consent may be withdrawn at any time.

5. Wholesale Applications

Information submitted through a trade-account application may be used to assess the application, verify business information, communicate with the applicant and establish an approved wholesale account.

Submitting an application does not guarantee approval.

6. Personalisation Data

Information submitted for personalised jewellery is used as necessary to manufacture the requested product, communicate regarding production and provide relevant customer service.

You should only provide materials that you are authorised to provide and use.

7. Payments

Payments may be processed through Shopify and/or other payment service providers.

Payment providers may process payment information under their own privacy terms.

Gem n Tonic does not ordinarily receive or store complete card details when payment information is processed directly by a payment provider.

8. Sharing Information

Where necessary, we may share information with service providers and other recipients including:

  • E-commerce and hosting providers

  • Payment processors

  • Banks and financial providers

  • DHL, FedEx and other logistics providers

  • IT and security providers

  • Email and communication providers

  • Analytics and marketing providers

  • Accountants, lawyers and professional advisers

  • Government, tax, customs, regulatory or law-enforcement authorities where legally required

We disclose personal data only where there is an appropriate purpose and legal basis.

9. International Data Transfers

Some service providers may process information outside Greece or the European Economic Area.

Where applicable, international transfers are made using legally recognised mechanisms or safeguards required by data-protection law.

10. Cookies

Our website may use cookies and similar technologies for essential functionality, customer accounts, security, preferences, analytics and, where permitted, advertising and marketing.

Where legally required, non-essential technologies will be used according to the choices made through our cookie-consent system.

11. Marketing

Where permitted by law, we may send information about Gem n Tonic products, collections, wholesale services and business updates.

You may unsubscribe from marketing communications at any time using the unsubscribe function in the communication or by contacting:

hello@gemntonic.com

Transactional messages concerning orders or accounts may still be sent where necessary.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and for applicable legal, accounting, tax, contractual or regulatory requirements.

Retention periods therefore vary depending on the type of information and purpose.

13. Your Rights

Subject to applicable GDPR conditions, individuals may have rights including:

  • Access

  • Rectification

  • Erasure

  • Restriction of processing

  • Data portability

  • Objection to certain processing

  • Withdrawal of consent where consent is relied upon

  • Rights concerning certain automated decision-making

Requests can be sent to:

hello@gemntonic.com

We may need to verify your identity before processing a request.

14. Complaints

You may contact us if you have concerns regarding our processing of your personal data.

You also have the right, where applicable, to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.

15. Security

We use reasonable technical and organisational measures designed to protect personal data against loss, unauthorised access, misuse, alteration or disclosure.

No electronic transmission or storage system can, however, be guaranteed to be completely secure.

16. Third-Party Websites

Links to third-party websites may be provided for convenience.

Independent third-party websites are responsible for their own privacy practices.

17. Changes to this Policy

We may update this Privacy Policy periodically.

The current version and revision date will be published on this page.

18. Contact

Data Controller

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the data controller is:

GEM TONIC SINGLE MEMBER P.C.
Trading as Gem n Tonic
143 Chrysostomou Smyrnis Ave
162 31 Vyronas, Greece

Registration No.: 188939802000
Phone: +30 211 008 5010
Email: hello@gemntonic.com