Privacy policy
Privacy Policy
This Privacy Policy explains how Gemineye Jewellery Limited ("we", "us", "our") collects, uses, and protects your personal data when you visit gemineyejewellery.com or make a purchase from us.
1. Who We Are
Gemineye Jewellery is an online jewellery retailer based in the United Kingdom. Contact: general@gemineyejewellery.com
2. What Data We Collect
When you visit our website or place an order, we may collect:
- Name, email address, phone number, and delivery address
- Payment information (processed securely via Shopify Payments - we do not store card details)
- Browsing behaviour and device information via cookies
- Communications you send us via email or social media
3. How We Use Your Data
We use your data to:
- Process and fulfil your orders
- Send order confirmations and shipping updates
- Respond to customer enquiries
- Send marketing emails (only with your consent - you can unsubscribe at any time)
- Improve our website and customer experience
- Comply with legal obligations
4. Legal Basis for Processing (UK GDPR)
We process your data on the following legal bases:
- Contract - to fulfil your order
- Legitimate interests - to improve our services and prevent fraud
- Consent - for marketing communications
5. Sharing Your Data
We do not sell your personal data. We share it only with trusted third parties necessary to operate our business, including:
- Shopify - our e-commerce platform
- Klaviyo - email marketing
- Royal Mail / InPost / Evri - order fulfilment and returns
- Trustpilot - review collection
- Google - analytics and advertising
All third parties are required to handle your data securely and in accordance with applicable law.
6. Cookies
We use cookies to improve your browsing experience and analyse site traffic. You can control cookie settings via your browser. By continuing to use our site, you consent to our use of cookies.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order data is typically retained for 7 years for accounting purposes.
8. Your Rights (UK GDPR)
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing
- Data portability
- Withdraw consent at any time
To exercise any of these rights, contact us at general@gemineyejewellery.com.
9. Data Security
We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. All transactions are encrypted via SSL.
10. Third-Party Links
Our website may contain links to third-party sites. We are not responsible for their privacy practices and encourage you to review their policies.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page.
12. Contact
For any privacy-related questions or requests, contact us at general@gemineyejewellery.com.