Privacy Policy

1. Information We Collect

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, and shipping/billing addresses
• Payment Information: Debit/credit card details and billing information (processed securely through our payment providers)
• Order Information: Products purchased, order history, and transaction details
• Communication Data: Messages, emails, and support requests you send us
• Account Information: Username and password if you create an account
• Jewellery Preferences: Size preferences, metal choices, and style preferences

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and browser type
• Device information and operating system
• Pages viewed and time spent on our site
• Referring website and exit pages
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Process and fulfil your jewellery orders
• Communicate with you about your orders, shipping, and our products
• Send promotional emails about new collections, special offers, and jewellery care tips (with your consent)
• Improve our website and customer shopping experience
• Prevent fraud and enhance security, especially for high-value transactions
• Comply with legal obligations, including consumer protection regulations
• Respond to your questions, requests, and support inquiries
• Personalise your shopping experience based on your preferences

3. Lawful Basis for Processing

Under UK GDPR, we process your personal data on the following lawful bases:

• Contract: To fulfil orders and provide the services you've requested
• Consent: For marketing communications and non-essential cookies
• Legal obligation: To comply with tax, accounting, and regulatory requirements
• Legitimate interests: For fraud prevention, security, and website improvement

4. Information Sharing

We do not sell your personal information. We may share your information with:

• Service Providers: Payment processors (PayPal, Stripe), shipping carriers (Royal Mail, DPD), and email service providers who help us operate our business
• Jewellery Partners: Selected craftsmen and suppliers who assist in creating and fulfilling your orders
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure payment processing through PCI-compliant providers
• Regular security audits and monitoring
• Limited access to personal information by authorised employees
• Secure data storage with encryption at rest
• Enhanced verification for high-value orders

6. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences, cart contents, and jewellery size selections
• Analyse website traffic and shopping patterns
• Personalise your experience with relevant product recommendations
• Serve relevant advertisements and measure campaign effectiveness

You can control cookies through your browser settings. Disabling cookies may affect your ability to use certain features of our website.

7. Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access: Request a copy of the personal information we hold about you
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information ("right to be forgotten")
• Restriction: Request that we limit processing of your data
• Data portability: Request a copy of your data in a portable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at privacy@jewellerycentral.com. If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. International Data Transfers

If we transfer your personal data outside the UK, we ensure it is protected by appropriate safeguards, such as International Data Transfer Agreements (IDTAs) or the UK Addendum to the EU Standard Contractual Clauses, in accordance with UK GDPR requirements. Some of our jewellery partners may be located in the EU or other countries with adequate data protection standards.

9. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Order records are retained for a minimum of six years to comply with tax and accounting requirements. Customer preferences and browsing data are retained for up to 2 years after your last interaction.

10. Children's Privacy

Our website is not intended for individuals under 18 years of age, as our jewellery is designed for adults. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will promptly delete it.

11. Third-Party Links

Our website may contain links to third-party websites, including payment processors and social media platforms. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Jewellery Central
Email: privacy@jewellerycentral.com
Support: support@jewellerycentral.com