Privacy policy
PRIVACY POLICY
This policy explains how Nonna Jewellery collects, uses, stores and shares
your personal information when you use this website, buy from me, or get
in touch.
I handle your personal information in line with the UK General Data
Protection Regulation and the Data Protection Act 2018.
For the purposes of that law, Nonna Jewellery is the data controller.
Last updated: [DATE]
CHANGES TO THIS POLICY
I may update this policy to reflect changes to my business, the technology
I use, the law, or how I work.
The updated version will be posted on this page with a new "last updated"
date. If a change is significant, I will tell you by email or by a notice
on the website.
WHAT I COLLECT
What you give me
Your name
Your billing and delivery address
Your email address
Your phone number
Order and transaction details
Account details, if you create an account
Anything you write to me about
Information you give when you enter a promotion or fill in a form
What I collect automatically
When you use this website I may collect:
The pages you look at
The links and buttons you click
How long you stay
Device information
Browser type
IP address
Approximate location
Where you came to the site from
Cookies, pixels and similar technologies
What I get from others
I may receive personal information from companies that help me run the
shop:
My ecommerce platform, [PLATFORM NAME]
Payment providers
Delivery and fulfilment companies
Email and customer support tools
Marketing partners
Analytics and advertising platforms including Google and Meta
WHY I USE IT, AND MY LAWFUL BASIS
Under UK GDPR I have to have a lawful basis for using your information.
Here is what I use it for, and why I am allowed to.
To perform our contract with you:
Processing and posting your order
Taking payment
Arranging delivery
Handling returns, refunds and exchanges
Creating and running your account
Answering questions about your order
For my legitimate interests, which are running and improving a small
business and preventing fraud:
Providing customer support
Detecting and preventing fraud
Improving the website, my pieces and the way I serve customers
Measuring how the site performs
With your consent:
Non-essential cookies and tracking
Marketing emails, where consent is required
Personalising what you see
Advertising
To comply with my legal obligations:
Keeping accounting and tax records
Meeting other duties under UK law
Where I rely on consent, you can withdraw it at any time. That does not
affect anything I did with your information before you withdrew it.
MARKETING EMAILS
I will only send you marketing emails where you have agreed to receive
them, or where you have bought from me and the law allows me to email you
about similar pieces.
Every marketing email has an unsubscribe link. You can also email me at
hello@nonnajewellery.co.uk and I will take you off the list.
I do not send many. Just a note when I have finished something new, or
when there is very little left on the bench.
WHO I SHARE IT WITH
I may share your personal information with companies that help me run the
shop:
My ecommerce platform, including [PLATFORM NAME]
Payment providers
Delivery and logistics companies
Customer support providers
Email and communication tools
Cloud hosting and IT providers
Marketing and advertising partners
Analytics providers including Google and Meta
Professional advisers such as accountants and solicitors
Government bodies and regulators, where the law requires or permits it
I may also share information as part of a merger, acquisition,
restructure or sale of the business.
I do not sell your personal information.
SENDING INFORMATION OUTSIDE THE UK
Some of the companies I work with operate or store information outside the
United Kingdom. That means your personal information may be handled in
another country.
When that happens I make sure there is a legal safeguard in place. That
will usually be UK adequacy regulations, or the UK International Data
Transfer Agreement, or the UK Addendum to the EU Standard Contractual
Clauses.
You can ask me for details of the safeguard used for a particular
transfer.
COOKIES AND TRACKING
I use cookies and similar technologies to:
Run the website
Remember your preferences
Keep your basket working
Understand how the site is used
Measure website and advertising performance
Improve the service
Show you relevant advertising
Cookies that are strictly necessary to run the site are set automatically.
Everything else, including analytics and advertising cookies, is only set
once you agree through the cookie banner.
You can change your choices at any time using the cookie settings on the
website, or through your browser. Turning off some cookies may affect how
parts of the site work.
CHILDREN
My shop is for adults. I do not knowingly collect personal information
from children.
If you think a child has given me personal information, write to me at
hello@nonnajewellery.co.uk and I will delete it.
HOW LONG I KEEP IT
I keep personal information only as long as I reasonably need it for the
purposes set out above, including accounting, tax, fraud prevention and
reporting.
For example:
Order and transaction records are kept for six years after the end of
the tax year they relate to, as HMRC requires.
Account information is kept while your account is active, and for a
reasonable period afterwards.
Customer support messages are kept as long as reasonably needed to
resolve disputes and keep records.
Marketing information is kept until you unsubscribe.
Cookie and analytics data is kept in line with each provider's own
retention policy.
KEEPING IT SAFE
I take reasonable technical and organisational measures to protect your
personal information against misuse, loss, unauthorised access,
alteration and disclosure.
That includes restricted access, secure systems, and encryption of
communications where appropriate.
No method of sending or storing information electronically is completely
secure, so I cannot guarantee absolute security.
If there is a breach that is likely to result in a risk to your rights and
freedoms, I will report it to the Information Commissioner's Office within
72 hours, and tell you if the risk is high.
YOUR RIGHTS
Under UK data protection law you have the right to:
Ask for a copy of the personal information I hold about you
Ask me to correct anything inaccurate or incomplete
Ask me to delete your information in certain circumstances
Ask me to restrict how I use it in certain circumstances
Object to me using it for direct marketing, at any time
Object to me using it on the basis of legitimate interests
Ask me to transfer your information to you or another provider
Withdraw your consent at any time, where I rely on consent
To make a request, email me at hello@nonnajewellery.co.uk. I may need to
check who you are first.
I will respond within one month. If your request is complicated I may need
longer, and I will tell you if that happens. There is normally no charge.
COMPLAINTS
If you are unhappy with how I have handled your personal information,
please write to me first at hello@nonnajewellery.co.uk. Give me enough
detail to look into it properly and I will reply within a reasonable time.
You also have the right to complain to the Information Commissioner's
Office at any time:
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Helpline: 0303 123 1113
ico.org.uk
VISITING FROM OUTSIDE THE UK
If you use this website from outside the United Kingdom, your personal
information may be stored and handled in the UK, or in other countries
where the companies I work with operate. Privacy law in those countries
may differ from the law where you live.
CONTACT
For any question about this policy, a request about your personal
information, or a privacy complaint, write to me:
Email: hello@nonnajewellery.co.uk
Nonna Jewellery
[FULL TRADING ADDRESS]
[COMPANY NUMBER AND REGISTERED OFFICE, OR "Sole trader"]
My hours:
Monday to Friday, 9am to 5pm
Saturday, 10am to 2pm
Sunday, closed