Privacy Policy

GorrLine Jewelry

1. Introduction

GorrLine Jewelry ("GorrLine", "we", "us" or "our") operates the online store at gorrline.com (the "Site") and the related services, content and features (together, the "Services"). We respect your privacy and are committed to protecting the personal information you share with us, in accordance with the Israeli Protection of Privacy Law, 5741-1981 (the "Law"), the Privacy Protection Regulations (Data Security), 5777-2017, other applicable Israeli law and, where applicable, the privacy laws of the country in which you live.

Our store is hosted on and operated through the Shopify platform, which enables us to provide the Services to you (see "Our relationship with Shopify" below).

This Privacy Policy explains what personal information we collect, how we use and share it, how we protect it, and the rights and choices you have. Please read it carefully. By using the Services you confirm that you have read and understood this Privacy Policy. If there is a conflict between this Privacy Policy and our Terms of Service, this Privacy Policy prevails with respect to the collection, processing and disclosure of personal information.

Controller of your personal information (owner of the database): GorrLine, Company Reg. No. 311051437, Haviva Reich Street, P.O. Box 3254134, Haifa, Israel. Privacy contact: support@gorrline.com.

2. Information we collect

Information you provide to us

•       Contact and identification details: full name, email address, phone number, shipping address and billing address.

•       Account details (if you create an account): email address or username, password and preferences.

•       Order and transaction details: products ordered, order history, returns and exchanges, invoices and receipts.

•       Payment details: payments are processed by third-party payment providers (such as PayPal and Tranzila). Full payment-card numbers are not stored on our systems.

•       Communications: the content of your messages to us (by email, WhatsApp, contact forms or reviews), including customer-service inquiries and return or exchange requests.

•       Marketing preferences: whether you have consented to receive marketing communications and your communication preferences.

Information collected automatically

•       Device and connection data: IP address, device type, operating system, browser type and language, and approximate location derived from your IP address.

•       Usage data: pages viewed, products viewed or added to your cart, referral source, dates and times of visits, and clicks and actions on the Site.

•       Cookies and similar technologies – see "Cookies and similar technologies" below.

Information from third parties

•       From Shopify and our service providers (for example, payment and shipping status and fraud-prevention signals).

•       From social networks or login and sharing tools, if you choose to interact with us through them.

•       From advertising and analytics partners, to the extent permitted by law.

We do not intentionally collect sensitive information (such as health information) and ask that you do not send us such information.

3. Is providing information mandatory?

You are under no legal obligation to provide us with personal information; providing it depends on your free will and consent. However, without certain information (such as your name, shipping address and payment details) we will not be able to process your order or provide some of the Services. The information will be kept in GorrLine's database and used for the purposes set out in this Privacy Policy.

4. How we use your personal information

•       Operating the Site and processing orders: processing payments, shipping and delivery, returns and exchanges, issuing invoices and receipts, and managing your account.

•       Customer service and communications: responding to your inquiries and sending service messages about your orders and account (these are not marketing messages).

•       Marketing (subject to your consent and applicable law): newsletters, promotions, personalized offers, and showing you advertisements on other platforms based on your activity on the Site (see "Marketing communications" and "Cookies and similar technologies").

•       Improving the Services: statistical analysis, personalization, product development and understanding how the Site is used.

•       Security and fraud prevention: authenticating accounts, detecting and preventing fraud and abuse, and securing the Site.

•       Legal compliance: bookkeeping, tax and accounting obligations, responding to lawful requests from competent authorities, establishing and defending legal claims, and enforcing our Terms of Service.

For users in the European Economic Area (EEA) and the United Kingdom, our legal bases for processing are the performance of our contract with you, your consent (for example, for marketing and non-essential cookies), our legitimate interests (such as security, improving the Services and marketing to existing customers where permitted by law) and compliance with legal obligations.

5. Marketing communications

•       We will send you marketing messages (by email, text message or messaging apps) only if you have given your explicit consent (opt-in), as required by Section 30A of the Israeli Communications Law (Bezeq and Broadcasting), 5742-1982, or otherwise where permitted by applicable law.

•       You may withdraw your consent at any time using the unsubscribe link at the bottom of our messages or by emailing support@gorrline.com. Withdrawing consent does not prevent us from sending you service messages required for your order or account (such as order confirmations and shipping updates).

•       Under the Law, you may at any time require that information about you be deleted from a database used for direct mailing, and that it not be transferred to third parties for direct-mailing purposes.

6. How we share personal information

GorrLine does not sell personal information for money and does not transfer personal information to third parties, except in the following cases:

•       Shopify – hosting, store infrastructure, checkout, analytics and additional features (see the next section).

•       Service providers acting on our behalf: payment processors, shipping and delivery companies, email and SMS marketing platforms, customer-support systems, analytics tools, cloud storage, IT and information-security services and accounting – in each case only to the extent needed to perform services for us.

•       Advertising and analytics partners (such as Google and Meta) – to measure our campaigns and show you relevant advertisements, subject to your cookie choices. In some jurisdictions (for example, certain US states) this may be considered a "sale" or "sharing" of personal information for targeted advertising, which you can opt out of as described in this Privacy Policy.

•       Legal requirements: to comply with laws, court orders or requests from competent authorities; to protect our rights, the safety of users and the public, and to prevent fraud; and to enforce our Terms of Service.

•       Business transfers: in connection with a merger, acquisition, sale of assets or insolvency proceedings – subject to this Privacy Policy.

•       With your consent or at your direction – for example, when you choose to share content on a social network.

We take steps to ensure that our service providers are contractually bound to maintain confidentiality and data security and to comply with applicable law. However, GorrLine is not responsible for any use of information by third parties beyond what is required to perform services for us, where such use could not reasonably have been anticipated.

7. Our relationship with Shopify

The Site is hosted on the Shopify platform. Shopify collects and processes personal information about your access to and use of the Site in order to enable us to operate the Services, including checkout, order management and store analytics. Information you submit on the Site is transmitted to Shopify and to other service providers, some of which may be located outside Israel or outside the country in which you live.

In addition, we may use certain Shopify features (such as Shop Pay, the Shop app or Shopify's advertising tools) that combine information about your interactions with our store with information from other merchants and from Shopify itself, in order to protect, grow and improve our business. For these features, Shopify is responsible for the processing of your personal information, including for responding to requests to exercise your rights regarding that use. To learn more about how Shopify uses personal information and about your rights, see the Shopify Consumer Privacy Policy at https://www.shopify.com/legal/privacy/customers and the Shopify Privacy Portal at https://privacy.shopify.com/en.

8. Cookies and similar technologies

The Site uses cookies, pixels, local storage and similar technologies (together, "cookies"). Some are set by Shopify and some by other service providers. We use the following types of cookies:

•       Strictly necessary: required to operate the Site – shopping cart, checkout, account login, security and fraud prevention. These cannot be switched off.

•       Performance and analytics: help us understand how the Site is used and improve it (for example, Shopify analytics and Google Analytics).

•       Functional: remember your preferences, such as language and currency.

•       Marketing and advertising: measure the effectiveness of our campaigns and allow us to show you relevant advertisements on other sites and platforms (for example, Meta Pixel and Google Ads).

Managing cookies: you can block or delete cookies through your browser settings and, where the Site displays a cookie banner or preference center, choose which types of cookies you accept. Blocking cookies may affect the functioning of some Services. Continued use of the Site constitutes consent to strictly necessary cookies; non-essential cookies are used in accordance with your choices and applicable law. Where required by law, we treat recognized browser opt-out signals (such as Global Privacy Control) as a request to opt out of targeted advertising. For information about Shopify's cookies, see https://www.shopify.com/legal/cookies.

9. Data security

We implement physical, technological and organizational security measures in accordance with the Privacy Protection Regulations (Data Security), 5777-2017 and accepted industry standards, including encryption of communications with the Site (SSL/TLS), access controls, and Shopify's secure infrastructure, which is certified PCI DSS Level 1 for payment processing. Payment-card details are processed by our payment providers and are not stored on GorrLine's systems.

However, no security measure is perfect, and we cannot guarantee absolute security of your information. We recommend that you keep your account login details confidential and avoid sending us sensitive information through unsecured channels. In the event of a security incident affecting your personal information, we will act in accordance with applicable law, including, where required, reporting to the Privacy Protection Authority and notifying affected users.

10. Data retention

We retain personal information for as long as needed for the purposes for which it was collected: order and account details – for the duration of our relationship with you and afterwards for the period required by tax and bookkeeping laws (in Israel, generally seven years); marketing data – until you withdraw your consent; usage and analytics data – in aggregated or anonymized form. At the end of the retention period we delete the information or anonymize it, unless retention is required for legal proceedings or by law.

11. International transfers

Shopify's servers and some of our service providers are located outside Israel (including in the United States, Canada and the European Union), so your personal information may be transferred to, stored and processed in other countries. Transfers of information outside Israel are made in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 – to countries that ensure an adequate level of protection, subject to the recipient's undertaking to comply with the conditions set out in Israeli law, or with your consent. Transfers of personal information of users in the EEA or the United Kingdom outside those territories are made on the basis of adequacy decisions or recognized transfer mechanisms, such as the European Commission's Standard Contractual Clauses.

12. Your rights

Under the Israeli Protection of Privacy Law

•       Right of access – to review the information about you held in GorrLine's database (Section 13 of the Law).

•       Right to correction and deletion – if the information is inaccurate, incomplete, unclear or not up to date, to request its correction or deletion (Section 14 of the Law).

•       Direct mailing – to require your removal from a database used for direct mailing and to object to your details being transferred to third parties for direct-mailing purposes (Section 17F of the Law).

•       Withdrawal of consent – to withdraw your consent to marketing communications at any time.

•       Complaint – to contact the Privacy Protection Authority.

Users outside Israel

Users in the EEA and the United Kingdom also have the rights of access, rectification, erasure, restriction of processing, data portability, objection to processing (including to direct marketing), withdrawal of consent, and lodging a complaint with their local supervisory authority. Users in certain US states (such as California) may have the rights to know, access, delete and correct personal information, to opt out of the "sale" or "sharing" of personal information for targeted advertising, and not to be discriminated against for exercising these rights.

Exercising your rights

Contact us at support@gorrline.com (please put "Privacy request" in the subject line). Before handling a request we may ask for details to verify your identity, as permitted or required by law, and we will respond within the time required by law. These rights are not absolute, and in certain cases we may decline a request as permitted by law; we will not discriminate against you for exercising your rights. You may appoint an authorized agent to act on your behalf, subject to proof of authorization and verification of your identity. If you have an account on the Site, you can update some of your details directly in your account.

13. Children

The Services are intended for adults (over 18). We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us at support@gorrline.com and we will delete it.

14. Third-party websites and social media

The Site may contain links to third-party websites and services (such as social networks, payment providers or shipping companies). We are not responsible for the privacy practices or security of those sites, and we recommend that you review their policies. If you contact us through WhatsApp or Instagram, your messages are also processed by those platforms under their own privacy policies. Content you post publicly (such as reviews or comments) may be visible to other users.

15. Complaints

If you have a complaint about how we handle your personal information, please contact us first at support@gorrline.com and we will do our best to resolve it. You may also lodge a complaint with the Israeli Privacy Protection Authority (https://www.gov.il/en/departments/the_privacy_protection_authority) 

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes in our practices, technological changes or legal requirements. The updated version will be posted on the Site with a revised "Last updated" date and will take effect upon posting. If we make material changes, we will notify you as required by law, for example by a notice on the Site or by email. We encourage you to review this Privacy Policy periodically.

17. Contact us

For questions, requests or further information about this Privacy Policy:

GorrLine Jewelry

Email: support@gorrline.com

Company Reg. No. 311051437

Address: Haviva Reich Street, P.O. Box 3254134, Haifa, Israel