Who is responsible for your data
The data controller is A & A JEWELLERY LIMITED, Private Limited Company registered in England and Wales, of 12-13 The Oaks Clews Road, Redditch, England, B98 7ST, United Kingdom. For anything to do with your personal data, email support@aajewelleryuk.shop or call +44 7210559084.
We process personal data in line with the UK GDPR and the Data Protection Act 2018, and we use cookies in line with the Privacy and Electronic Communications Regulations (PECR).
What we collect, why, and for how long
| Data | Why | Lawful basis | Kept for |
|---|---|---|---|
| Name, email, phone, delivery address, order contents and order value | To take, fulfil and deliver your order and handle returns | Performance of a contract | 6 years from the end of the tax year, as required for UK accounting and tax records |
| Name, email, phone, message on the contact form | To answer your enquiry | Consent | 24 months, or until you ask us to delete it |
| Material enquiry answers: post gauge, position, budget, message | To answer a specification question about our range | Consent | 90 days |
| A past reaction you describe on the material enquiry form | Solely to answer that materials question. Never for marketing, never for profiling | Explicit consent, UK GDPR Article 9(2)(a) — special category data | 90 days maximum, then erased |
| Email address for the newsletter | To send occasional emails about new pieces and care notes | Consent | Until you unsubscribe |
| Basket contents held in your browser | So your basket survives a page reload | Strictly necessary — stored on your device, not sent to us | Until you clear it or clear your browser storage |
Health-related information is handled differently. If you tell us on the material enquiry form that your ears have reacted to something, that is special category data under Article 9. We only store it if you give explicit, separate consent on that form; we use it only to answer your question about materials; we never use it for marketing or share it; and we erase it within 90 days. You can withdraw that consent at any time by emailing us, and we will delete it immediately. We do not use it to diagnose anything — we are not qualified to and we do not try.
Who we share it with
We do not sell personal data, and we do not share it for anyone else’s marketing. We share the minimum necessary with:
- Delivery carriers — name, address and phone, so the parcel can be delivered.
- Our payment provider — payment is processed on the provider’s own systems. They act as an independent controller for the payment itself. We never see, handle or store your full card number. See payment security.
- Our hosting and database providers — acting as processors under contract, storing the order and enquiry records described above.
- Our accountants and HMRC — where required for tax and accounting.
- Law enforcement or regulators — only where we are legally required to.
Transfers outside the UK
Some of our providers operate outside the UK. Where personal data is transferred outside the UK we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, so that your data keeps essentially equivalent protection.
Your rights
Under UK GDPR you have the right to:
- Be informed — this page.
- Access a copy of the personal data we hold about you.
- Rectification of anything inaccurate.
- Erasure of data we no longer have a lawful reason to keep. Order records we must keep for tax purposes are the main exception, and we will tell you if that applies.
- Restrict processing while a dispute is resolved.
- Data portability — a machine-readable copy of data you gave us.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time where consent is the basis. Withdrawing it does not affect what was done before.
- Not to be subject to solely automated decision-making with legal or similarly significant effects. We do not carry out any such automated decision-making.
To exercise any of these, email support@aajewelleryuk.shop. We respond within one month. There is no charge.
Your right to complain to the regulator. If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office. You do not have to raise it with us first, although we would like the chance to fix it.
Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF. Helpline 0303 123 1113. ico.org.uk/make-a-complaint
Cookies
A cookie is a small file stored on your device. Under PECR we must get your consent before setting any cookie that is not strictly necessary, and refusing must be as easy as accepting. On this site both are a single button, the same size, side by side — there is no second layer of menus on the reject path.
| Type | What it does | Consent needed |
|---|---|---|
| Strictly necessary | Keeps your basket, remembers your cookie choice, and secures form submissions | No — the site cannot work without these |
| Analytics | Anonymous, aggregated statistics about which pages people use to choose a piece | Yes — off unless you accept |
| Advertising or tracking | We do not use any. No advertising pixels, no cross-site trackers, no data brokers. | Not applicable |
You can change your mind at any time by clearing this site’s data in your browser settings, which brings the choice back on your next visit. Browsers also let you block or delete cookies entirely.
Security
The site is served over HTTPS. Access to order and enquiry records is restricted to the people who need it to run the shop. We keep only what we have a reason to keep, which is the most reliable protection there is — data we never held cannot be lost. If a breach ever occurs that is likely to risk your rights, we will report it to the ICO within 72 hours and tell you directly where required.
Children
This site is for adults. We do not knowingly collect data from anyone under 18, and we do not sell earrings intended for children under 12. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this notice
If we change how we use personal data we will update this page and change the date at the top. Material changes affecting existing customers will be emailed.