1. Who We Are

Sharolta Jewels is a handcrafted jewellery business operating in the United Kingdom. We are committed to protecting your privacy and ensuring your personal information is handled securely.

2. Information We Collect

When You Make a Purchase:

• Name and billing address
• Email address
• Phone number
• Shipping address
• Payment information (processed securely by Stripe)

When You Browse Our Website:

• Browser type and version
• Pages visited and time spent
• IP address and location data
• Device information

3. How We Use Your Information

• Process and fulfill your orders
• Send order confirmations and shipping updates
• Provide customer support
• Improve our website and services
• Comply with legal obligations
• Send marketing communications (only with your consent)

4. Legal Basis for Processing (UK GDPR)

• Contract: Processing necessary to fulfill your order
• Legitimate Interest: Improving our services and website security
• Consent: Marketing communications (you can withdraw consent anytime)
• Legal Obligation: Keeping records for tax and accounting purposes

5. Information Sharing

We only share your information with:

• Payment Processors: Stripe for secure payment processing
• Shipping Partners: Royal Mail, DPD, or other carriers for delivery
• Legal Requirements: When required by law or to protect our rights

We never sell your personal information to third parties.

6. Data Security

We implement appropriate security measures to protect your personal information:

• SSL encryption for all data transmission
• Secure payment processing via Stripe
• Regular security updates and monitoring
• Limited access to personal information

7. Data Retention

• Order Information: 7 years for tax and accounting purposes
• Marketing Data: Until you withdraw consent
• Website Analytics: 26 months

8. Your Rights (UK GDPR)

You have the right to:

• Access: Request a copy of your personal information
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured format
• Object: Object to processing for marketing purposes
• Withdraw Consent: Unsubscribe from marketing communications

To exercise these rights, please contact us at [insert contact email].

9. International Transfers

Some of our service providers may be located outside the UK/EU. We ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses.

10. Cookies

We use essential cookies to make our website function properly. We do not use tracking cookies or analytics without your consent.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

12. Contact Us

If you have any questions about this privacy policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated.