Privacy Policy

1. Information We Collect

We collect personal information that is necessary to provide our products and services. This may include:

• Identity & contact: name, email address, phone number, delivery address
• Transaction data: order history, purchase details, payment method type (card details are processed by Stripe and never stored by us)
• Usage data: pages visited, browser type, IP address, referring URL, via Google Analytics
• Communications: enquiries you submit via email or contact forms, newsletter subscription
• Bespoke orders: design preferences, measurements, and brief details you provide for custom pieces

We only collect information that is reasonably necessary. You may browse our website without providing personal information, though some features (checkout, enquiries) will require it.

2. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders, including arranging shipping
• Send order confirmations, shipping updates, and support responses
• Deliver newsletters and promotional content (only where you have subscribed)
• Facilitate bespoke jewellery design and consultation
• Improve our website, products, and services through analytics
• Comply with legal obligations

We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

3. Third-Party Service Providers

To operate our business, we share information with trusted service providers under strict confidentiality obligations:

4. Cookies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and personalise content. Cookies we use include:

• Strictly necessary: session management, cart state, admin authentication
• Analytics: Google Analytics cookies for aggregate usage statistics

You may disable cookies via your browser settings. Some functionality may be limited as a result.

5. Data Storage & Security

Your personal information is stored securely using industry-standard measures including encryption in transit (TLS) and at rest. We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access. No method of transmission or storage is 100% secure; in the event of a data breach that is likely to cause serious harm, we will notify affected individuals and the OAIC in accordance with the Notifiable Data Breaches scheme.

6. Retention

We retain personal information for as long as necessary to fulfil the purposes described in this Policy, or as required by law. Order records are retained for a minimum of 7 years to comply with Australian tax and financial record-keeping obligations. You may request deletion of your account and associated personal data (subject to legal retention requirements) by contacting us.

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent for marketing communications at any time (unsubscribe link in every email)
• Request deletion of your personal data (subject to legal retention requirements)
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. International Transfers

Some of our third-party service providers are located outside Australia. Where personal information is disclosed overseas, we take reasonable steps to ensure it is handled in accordance with the Australian Privacy Principles, including binding contractual protections. Countries where data may be processed include the United States and Singapore (Stripe, Supabase, SendGrid, Google).

9. Children

Our website and services are not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at [email protected] and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Policy on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.