Privacy
What we hold, and for how long
H & Y JEWELLERY LIMITED is the data controller for the personal data described here. This notice is written to the UK GDPR and the Data Protection Act 2018, and the cookie section to PECR.
What we collect and why
- Order details
- Name, email, telephone, delivery address and postcode, and what you ordered. Lawful basis: performance of a contract. Without these we cannot deliver a signed-for parcel.
- Enquiry details
- Whatever you put in the contact or ring enquiry form. Lawful basis: consent, given by the tick box on the form, which you may withdraw at any time.
- Ring size and finger measurements
- Held only as part of an order. It tells us what to make and dispatch and is not used for anything else.
- Proposal dates and personal notes
- If you tell us a date or the circumstances, that is personal data about you and about another person. It is deleted once the order is complete and the return window has closed.
- Email list
- Email address only, and only if you ask for it. Lawful basis: consent. Every message carries a one-click unsubscribe and leaving removes the address.
- Server logs
- Our hosting provider records IP addresses and request details for security and to keep the site running. Lawful basis: legitimate interests. Held for a short period by the provider and not used to build any profile of you.
What we do not collect
- Card numbers. Card details are entered directly with the payment provider. They do not pass through this site and are never stored here. How payment is handled
- Identity documents. Where a carrier checks identification on the doorstep for an insured parcel, that check is theirs. No copy of any document is sent to us or held by us.
- Tracking and advertising data. This site runs no analytics, no advertising pixels and no third-party trackers of any kind.
How long we keep it
- Order records
- Six years from the end of the tax year in which the order was placed, which is what HMRC requires of us.
- Enquiries with no order
- Twelve months, then deleted.
- Ring sizes and personal notes
- Deleted once the order is complete and the 14-day cancellation period has ended.
- Email list
- Until you unsubscribe. The address is then removed rather than suppressed.
Your rights
Under the UK GDPR you have the right to:
- be told what we hold about you, and to have a copy of it
- have inaccurate data corrected
- have data erased, where we have no continuing legal reason to keep it
- restrict or object to how we use it
- receive it in a portable format
- withdraw consent at any time, where consent was the basis
Write to support@hyjewelleryuk.shop or to Aspen House, Forth Floor, 25 Dover Street, London, England, W1S 4LX. We answer within one month. There is no charge.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by telephone on 0303 123 1113. You may complain to the ICO without coming to us first, though we would rather have the chance to put it right.
Children
This shop is intended for adults. We do not knowingly collect data from anyone under 16. If you believe we hold data about a child, write to us and it will be deleted.
Changes to this notice
If this notice changes materially we will say so on this page. The version you agreed to at the time of an order is the version that governs that order.