Privacy Policy

1. Who We Are

Avita Jewellery is a bespoke jewellery design studio based in London, United Kingdom. We operate the website www.avitajewellery.co.uk. For the purposes of data protection law, Avita Jewellery is the data controller of your personal information.

2. What Information We Collect

We collect personal information that you provide to us directly, and information that is collected automatically when you use our website.

Information you provide to us:

• Name, email address, phone number, and postal address when you place an order or make an enquiry
• Payment information (processed securely by our payment provider — we do not store card details)
• Design preferences, ring size, and other details you share during a consultation
• Communications you send us via email, WhatsApp, or contact forms

Information collected automatically:

• IP address, browser type, and device information
• Pages visited, time spent on site, and referring URLs
• Cookie data (see our Cookie Policy below)

3. How We Use Your Information

We use your personal information for the following purposes:

• To process and fulfil your orders, including delivery and aftercare
• To respond to enquiries and provide customer support
• To manage bespoke design consultations and commissions
• To send order confirmations, shipping updates, and service notifications
• To send marketing communications, where you have given consent
• To improve our website and services through analytics
• To comply with our legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under UK GDPR:

• Contract performance: Processing necessary to fulfil your order or provide our services
• Legitimate interests: Improving our services, preventing fraud, and direct marketing to existing customers
• Consent: Marketing communications to new subscribers and cookie usage beyond strictly necessary cookies
• Legal obligation: Compliance with tax, accounting, and other legal requirements

5. Sharing Your Information

We do not sell your personal data. We share your information only with trusted third parties who help us operate our business:

• Shopify: Our e-commerce platform, which processes orders and stores customer data
• Payment processors: Stripe and PayPal, for secure payment processing
• Delivery partners: Royal Mail and courier services, for order fulfilment
• Email marketing: Klaviyo, for sending newsletters and order communications
• Analytics: Google Analytics, for understanding how our website is used

All third-party processors are contractually required to handle your data securely and in accordance with applicable data protection law.

6. How Long We Keep Your Data

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Specifically:

• Order and transaction records: 7 years (for tax and accounting purposes)
• Customer account data: Until you request deletion or close your account
• Marketing consent records: Until you withdraw consent
• Enquiry and consultation records: 3 years from last contact

7. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request that we limit how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@avitajewellery.co.uk. We will respond within 30 days.

8. Cookies

Our website uses cookies to improve your browsing experience and to understand how our site is used. Cookies are small text files stored on your device.

We use the following types of cookies:

• Strictly necessary cookies: Required for the website to function (e.g., shopping cart, login sessions)
• Analytics cookies: Help us understand how visitors use our site (e.g., Google Analytics)
• Marketing cookies: Used to deliver relevant advertising (e.g., Facebook Pixel, Google Ads)

You can manage your cookie preferences through our cookie consent banner or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality of our website.

9. Security

We take the security of your personal data seriously. Our website uses SSL encryption for all data transmission, and we implement appropriate technical and organisational measures to protect your information against unauthorised access, disclosure, alteration, or destruction.

Payment information is processed directly by our payment providers (Stripe and PayPal) and is never stored on our servers.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on this page with a revised date. We encourage you to review this policy periodically.

11. Contact & Complaints

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.