your data at jewellerybox
we want to let you know that your privacy and how we store your information is really important to us at jewellerybox. we don’t want to send you stuff if you don’t want to hear from us - it comes across as a bit desperate!
we know privacy policies can be long and boring, but we’ve done our best to make it as clear and easy to understand as possible.
if you’re not up for reading the whole thing (because who has the time, right?) , this is the short version of what it says:
- most of the information we store is required for you to buy from something us - like your name and address.
- we also keep some information to help you find the products that you love on our website.
- this includes whether you’ve been a customer of ours before, what you bought and how you found us. any personal data we do hold is encrypted and has restricted access within our business.
- we don’t share your data with any other company who might want to sell you something.
- we may share limited data with other companies to help with our own marketing. they are not permitted to share it with anyone else.
- we delete customer data for people who are no longer customers after 4 years.
- we have a way that you can opt out of each bit of data collection we do, apart from the stuff we have to legally keep. click here to make this happen
- you can also delete your entire account, if you want to.
big on detail? read on...
privacy policy
security
all credit card transactions on our website are secured by industry standard encryption. you will see the green padlock in your browser whenever you are entering your card details. all credit card transactions are processed by braintree, a paypal company, on behalf of jewellerybox.
who we are
jewellerybox.co.uk is a trading style of jewellerybox ltd. in this privacy policy references to "us" and "we" are to jewellerybox ltd.
what information we collect
the information we collect via this website:
- any personal details you type in and submit, such as name, address, email address, this is primarily used to process orders. data collected may also be used to make sure you see the products most relevant to your interests getting you to the stuff you want as fast as possible.
- your ip address (this is a string of numbers representing your computer on the internet kind of like a digital postal address )), which is automatically logged by our web server. this is used to note your interest in our website for statistical purposes and may be combined with other personal data we process to identify your browsing behaviour.
- your email preferences - if you want to hear from us! we will combine order and browsing data to make sure you get emails tailored to you. session information stored in cookies used to ensure the correct data is extracted from the database when you use our website. for more information on the cookies we use on this site, please see our cookies page
- we do not hold sensitive payment details such as your card number, expiry date and security code. all credit and debit card payments are handled through our secure third party payment processor, braintree. please refer to braintree’s privacy policy.
what we do with your information
we are a registered data controller, and any personal information we collect from this website will be used in accordance with the general data protection regulation (gdpr) and other applicable laws. the details we collect will be used by us and our third party contractors:
- to process your order & provide after-sales service
- to comply with legal requirements
- to keep you up-to-date with our latest offers
- to offer you the most personalised and relevant service we possibly can
- to make sure that our advertising is relevant to you, and delivered at a time, in a manner, and on the types of channels which you are most likely to enjoy, and hopefully to reduce the number of our adverts which you are likely to find irrelevant or irritating..
on occasion, and only for our own administrative functions, your personal data may be processed outside of the eea by our third party contractors. by registering an account with us, contacting us by email, our contact form, through live support, or by placing an order with us, you consent to the transfer of your personal data outside of the eea where it may be processed on servers outside of the eea, and by our third party contractors.
who we share your data with
royal mail & carriers
royal mail is our chosen carrier in the uk. we also use a number of other couriers and international carriers with whom, together with the royal mail, we share your name and address and (if relevant), your phone number so that your jewellerybox parcel can be delivered in a timely manner. none of our carriers are permitted to share your data, or use your personal data for any purposes other than for the safe delivery of your goods.
when you are logged in, or create an account on our website for the first time, you will be assigned a unique user id. this is an anonymous string of numbers and does not contain personal information such as your name or email address. we provide this unique string of numbers to google every time you log in to your account. this allows google to add you to an anonymous group of 100+ browsers to which we may serve relevant adverts to, based on your browsing behaviour and purchase history. in practice this means that if you view our website on one browser, or on one device, and then later you are searching for products on another device, you will be able to find relevant jewellerybox products more quickly and easily in the search results. please refer to google's own privacy policy around this to find out more: https://policies.google.com/technologies/partner-sites
tax agencies
we are registered for vat in a number of jurisdictions throughout the eu. we use a number of vat agents, including itr service and simply vat to process quarterly and monthly vat returns in a number of jurisdictions. depending upon your country of residence, these vat agents, together with the relevant tax authorities are passed your name, address, the value of your order and the tax charged. this information is provided in an encrypted form, and maintained on record by these agents for the purposes of filing accurate tax returns only.
back office
in order to provide customers with the best service possible, we outsource some back office and customer service functions. this means that when our office in the uk is closed, we can still provide replies to emails so we can answer any queries you may have as quickly as possible. your order data is available to our back office provider to allow them to give the best support and speedy processing of your order. this is information is accessed on an ad hoc basis over a secure connection.
it
our it infrastructure is located in europe and managed outside it. the developers we use have been working with us since we started and have access to the website code and database solely to make improvements to our site, keep it safe and secure and debug issues.
mailchimp
we use mailchimp as our preferred third party email marketing provider. we provide mailchimp with your name, your email address, and your previous purchase and browsing behaviour. this allows us to ensure that you are served emails relevant to the type of jewellery you have shown an interest in. mailchimp is not permitted to pass these details on to any other business, and you will not receive any marketing emails from companies other than jewellerybox because of your relationship with jewellerybox. all of our emails contain an unsubscribe button. should you wish to unsubscribe from all future marketing emails at any time, you can do so instantly.
if you are logged in to facebook and you visit our website, facebook will be able to see what pages on our website you have visited. facebook then aggregates the data about who has visited what pages on our website, and you may be served content on facebook relevant to the type of jewellery you have shown an interest in. for customers who have registered an email address with jewellerybox, we may share this information with facebook. facebook does not share your profile with us, or tell us whether or not you have a facebook account. however, based on the email addresses we provide, facebook may add your facebook profile to an anonymous list of 100+ profiles which may collectively be served content specific to jewellerybox. facebook will not use the emails we provide to allow other 3rd parties to market products to you.
session recording
we are constantly striving to make our website better. this means trying to reduce bugs, frustration points and generally making the interface easier so you can find what you want faster. to do this we sometimes use 3rd party session recorders such as fullstory or freshworks that let us see what your seeing when your browsing the site to help us do this. all sessions are removed after 30 days.
you
we want to put you in control of your data and privacy. we now have a data control panel where you can control the data we store about you. please login to your account where you can view the options available and update your preferences.
in this portal you can:
- unsubscribe from our mailing list
- opt out of receiving automatic review emails after you order
- opt out of being displayed adverts relevant to the products viewed
- delete your account
you can also ask us to update or remove your personal information by clicking on the contact us link or by writing to us at our customer services address below. however, please note that we may need to keep some personal data in order to process orders or to comply with customer service or after sale obligations.
you also have the right to request a copy of any personal information we hold about you. to do this, simply write to us at the following address:
data protection
unit 3
151 - 161 tunnel avenue
london, se10 0pw
saying goodbye
we keep order and customer data to comply with tax and accounting law in the various jurisdictions we operate. however, annually we remove personal data from accounts and the orders linked to those accounts that have been inactive for 4 years.
you can at any time request account deletion through the ‘your data’ section of our website.