Privacy Policy

Last updated: April 2026

Prong Jewellery is committed to protecting your personal data and respecting your privacy. This policy explains how we collect, use, store and protect your information when you visit our website or place an order with us.

This policy is written in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

The data controller is:
Prong Jewellery
49 St Aubin's Court, Balmes Road, London, N1 5TN
Email: info@prongjewellery.com

ICO Registration Number: [INSERT YOUR ICO REGISTRATION NUMBER]

2. What Personal Data We Collect

We collect the following personal data when you use our website or place an order:

• Name and contact details (email address, phone number)
• Delivery and billing address
• Payment information (processed securely by our payment provider — we do not store card details)
• Order history and purchase details
• IP address and browser/device information (collected automatically)
• Email marketing preferences (where you have opted in)

3. How We Use Your Personal Data

We use your personal data for the following purposes and on the following legal bases under UK GDPR:

• To process and fulfil your order — lawful basis: performance of a contract
• To send order confirmations and delivery updates — lawful basis: performance of a contract
• To respond to your enquiries — lawful basis: legitimate interests
• To send marketing emails (only where you have opted in) — lawful basis: consent
• To comply with legal obligations (e.g. tax records) — lawful basis: legal obligation
• To improve our website and services — lawful basis: legitimate interests

4. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

• Order and transaction records: 7 years (to comply with HMRC requirements)
• Customer accounts: for the duration of the account, plus 2 years after last activity
• Marketing preferences: until you withdraw consent
• Enquiry records: 2 years

5. Who We Share Your Data With

We do not sell your personal data. We share it only with trusted third parties who help us operate our business, including:

• Shopify Inc. — our e-commerce platform, website host and email marketing provider. See Shopify's Privacy Policy.
• Royal Mail / courier services — to fulfil and track your delivery
• Payment processors (e.g. Stripe, PayPal) — to process your payment securely
• HMRC and other regulatory bodies — where required by law

All third-party processors are required to handle your data securely and in accordance with applicable data protection law.

6. International Data Transfers

Some of our third-party service providers (including Shopify) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

7. Cookies

Our website uses cookies to improve your browsing experience and help us understand how our site is used. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies — necessary for the website to function (e.g. shopping cart, session management)
• Analytics cookies — help us understand how visitors use our site
• Marketing cookies — used to show relevant advertising (only where consent is given)

You can manage or disable cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of our website.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you
• Right to rectification — you can ask us to correct inaccurate or incomplete data
• Right to erasure — you can ask us to delete your data in certain circumstances
• Right to restrict processing — you can ask us to limit how we use your data
• Right to data portability — you can request your data in a portable format
• Right to object — you can object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us at info@prongjewellery.com. We will respond within one month.

9. Marketing Communications

We will only send you marketing emails if you have opted in to receive them. You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

10. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Our website is hosted on Shopify's secure, encrypted platform.

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the ICO within 72 hours and inform affected individuals without undue delay.

11. Right to Complain

If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns directly before you contact the ICO — please get in touch with us first.

12. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be published on this page with the date it was last updated.

13. Contact Us

For any questions about this privacy policy or how we handle your data, please contact us at:
info@prongjewellery.com
Prong Jewellery, 49 St Aubin's Court, Balmes Road, London, N1 5TN