PRIVACY POLICY
Your trust is important to us. Lyn Haslegrave Jewellery is committed to protecting your personal information and ensuring transparency about how we collect, store, handle, and keep your data safe in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy applies to all website visitors and customers shopping at www.lynhaslegravejewellery.co.uk. By using our website, you acknowledge the practices outlined in this policy.
1. The Personal Data We Collect
Personal information (or personal data) is any information that allows us to identify you. We collect the following data to provide you with a smooth shopping experience:
- Identity Data: Your name and date of birth.
- Contact Data: Your billing address, delivery address, telephone number, and email address.
- Transaction Data: Details about the items you ordered, payments processed, and your order history.
- Technical & Usage Data: Your geographical location, browser type, device type, how you were referred to us, search terms used, pages browsed, and time spent on our website.
2. Our Lawful Basis for Using Your Data
Under UK GDPR, we must have a specific legal reason to process your personal data. We use your data for the following reasons:
- Performance of a Contract: We process your Identity, Contact, and Transaction data to take payment, fulfil your order, and arrange delivery of your jewellery via our couriers.
- Consent: We process your email address to send you our newsletter and marketing updates only when you have explicitly opted in. You can withdraw this consent at any time.
- Legitimate Interests: We analyse your Technical and Usage data to improve our website performance, secure our platform, and measure the effectiveness of our advertising campaigns.
3. Third-Party Data Sharing & International Transfers
We do not rent, trade, or sell our email lists or customer data with other organisations. However, to run our business, we share relevant details with trusted third-party providers:
- Couriers and Postal Services: Our delivery partners (such as Royal Mail) have access to your shipping address and contact details to deliver your jewellery.
- Google Analytics: We use Google Analytics to collect standard internet log information and visitor behaviour patterns. This data is anonymised and cannot identify individuals. To understand how Google uses this data, please see the Google Partner Privacy Policy. If you wish to block tracking, you can use the Google Analytics Opt-out Browser Add-on.
- Mailchimp: We use Mailchimp to deliver our monthly e-newsletter. We gather statistics around email opening and clicks to help us monitor and improve our communications. For further details on how your data is handled on their platform, you can review the official Mailchimp Privacy Notice.
- Facebook Pixel (Conversion Tracking): This website uses the Facebook pixel to optimise ads and report on campaign success. The pixel tracks browsing sessions, IP addresses, and cookie data. To understand how Meta handles this tracking information, please review the official Meta Privacy Policy.
Note on International Transfers: Some of our providers (such as Mailchimp and Facebook) store data in production data centres located outside the UK and the European Economic Area (EEA), including the United States. We ensure these providers offer appropriate safeguards, such as UK Standard Contractual Clauses and certification under the UK Extension to the EU-U.S. Data Privacy Framework, to protect your data.
4. Cookies
Our website uses standard cookie technology to distinguish you from other users and improve your browsing experience. Cookies are small pieces of information stored on your device.
Our cookies do not store sensitive information like your name, address, or payment details. They simply remember your preferences and cart items between visits. You can restrict, block, or delete cookies at any time through your browser's settings, though this may limit some website functionality.
5. How Long We Keep Your Data
We only keep your personal data for as long as necessary to fulfill the purposes we collected it for:
- Order & Transaction Data: We retain this data for 6 years following the end of the financial year in which you made the purchase, to comply with UK tax laws (HMRC requirement).
- Marketing Data: We keep your email address on our newsletter list until you unsubscribe or request its deletion.
6. Your Legal Rights
Under UK GDPR, you have powerful rights regarding your personal data. You have the right to:
- Access a copy of the personal data we hold about you.
- Rectify any incorrect or incomplete personal data.
- Erase your personal data (the "Right to be Forgotten"), subject to legal holding obligations like HMRC tax rules.
- Object to or restrict the processing of your data (such as opting out of marketing).
- Data Portability: Request the transfer of your personal data to you or to a third party in a structured, commonly used, machine-readable format.
- Withdraw Consent at any time where processing is based on consent.
To exercise any of these rights, or if you have a complaint about how we handle your data, please email us directly at lyn@lynhaslegravejewellery.co.uk. If you are unsatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK data protection authority.
7. Contact Us & Unsubscribing
- To Unsubscribe: You can stop receiving our newsletters at any time by clicking the ‘unsubscribe’ link at the bottom of our emails or by emailing us.
- Data Controller Email: lyn@lynhaslegravejewellery.co.uk
Last Updated: 23 September 2026