Privacy policy

How we handle the personal data of our trade customers and of the contact persons of businesses applying for an account.

Last updated: October 2026

Data controller

LIMONJEWELRY, S.L. (“we”), Gran Vía de les Corts Catalanes 197, 8º A, 08014 Barcelona, Spain (NIF B88945316), registered in the Registro Mercantil de Barcelona (Barcelona Commercial Registry), Tomo/IRUS 1000476385793, Folio 1, Hoja B-660034, Inscripción 1ª. Papaya Jewelry is our wholesale brand. You can reach us at hello@papayajewelry.com.

What data we process

Account application: company details (company name, tax number, address, type of business, website) and the contact person's details (name, email, phone).
Account and orders: login credentials, order history, shipping and billing addresses, invoices and the communications about your orders.
Payments: the reference of the bank transfers received; card payments are handled by our payment provider and we do not store card numbers.
Use of the site: technical data needed for the site to work and, only with your consent, analytics data (see “Cookies”).

Why we use it and on what basis

To process the application and manage the trade account: pre-contractual steps and performance of the contract.
To prepare, ship and invoice orders, collect payment and send payment reminders: performance of the contract and legal obligations (invoicing and tax record-keeping).
To send you the emails about your account and orders (confirmation, shipping, payment): performance of the contract.
To prevent fraud and protect the site and the accounts: legitimate interest.
To analyse how the site is used: consent, which you can withdraw at any time.

We do not send marketing emails from this site; the emails you receive are those about your account and your orders.

Who we share it with

Only with providers that help us deliver the service and act as processors: hosting of the site and of the commerce platform, email delivery, the card payment provider (when used), the carrier (GLS) that delivers the orders, network and security services, business email and accounting and tax advisers. We also disclose data to public authorities where the law requires it. Some providers are outside the European Economic Area; in those cases we rely on the safeguards provided for in the GDPR (standard contractual clauses or adequacy decisions).

How long we keep it

Account data for as long as the account is active. Applications that were not approved, for one year from the decision. Order, invoice and payment data for the commercial and tax retention periods (generally six years from the last entry). Analytics data according to the provider's settings.

Your rights

You can access, correct or delete your data, restrict or object to its processing and request its portability, and withdraw your consent at any time. Email us at hello@papayajewelry.com and we will reply within the time limits set by law. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

Cookies

We use essential cookies so that the site works (session, cart, preferences) and, only if you accept them, analytics cookies to understand how the site is used. You can change your choice at any time:

Changes

We may update this policy; the date at the top shows the latest revision.

Live chat

If you write to us in the chat on this website, we process what you write, the email address you choose to give us, the language and the page where you started the chat, so that we can answer you. If you are signed in, the conversation is linked to your company's account. Legal basis: answering your request, including steps before or under a contract, and our legitimate interest in answering enquiries.

The conversation is read by our customer service team. Our hosting and email providers process it on our behalf; if we use an artificial intelligence service to translate the conversation or to let our assistant answer you, it also acts only on our behalf. Some of these providers, including the artificial intelligence service, may process the conversation outside the European Economic Area (for example in the United States); in that case we rely on the safeguards provided for in the GDPR, such as the European Commission's standard contractual clauses. The artificial intelligence service does not use the conversation to train its models and deletes it within 30 days, unless it has to keep it longer to prevent misuse or comply with the law.

An artificial intelligence assistant may answer you first in the chat; its messages are labelled as such. It uses the information on our website and, if you give it your order number and the order email, the status of that order. You can ask to talk to a person at any time with the button in the chat. The assistant does not decide on refunds, returns or changes to orders: our team does.

We delete a conversation 12 months after its last message, or earlier if you ask us at hello@papayajewelry.com.