Last updated: 5 June 2026

Eleanor Jewellery operates this store and website, including all related information, content, features, tools, products and services (the “Services”). Our store is powered by Shopify. This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase, or otherwise communicate with us. Where our Terms of Service conflict with this Privacy Policy, this Privacy Policy applies to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing the Services, you confirm that you have read it and understand how your information is handled.

Personal information we collect

By “personal information” we mean information that identifies you or could reasonably be linked to you. It does not include anonymous or anonymised information. Depending on how you use the Services and where you live, we may collect or process the following, together with any inferences drawn from it:

• Contact details including your name, billing address, delivery address, phone number and email address.
• Payment details including card numbers, payment method, transaction details and payment confirmations.
• Account information including username, password, preferences and settings.
• Order information including items you view, add to your basket, purchase, return or cancel, and your past orders.
• Communications with us including anything you tell us when you contact customer service.
• Device information including your device, browser, network connection, IP address and other unique identifiers.
• Usage information including how and when you interact with or navigate the Services.

Where we collect it from

• Directly from you, when you create an account, visit or use the Services, contact us, or otherwise provide information.
• Automatically through the Services, from your device, including through cookies and similar technologies.
• From service providers who collect or process personal information on our behalf.
• From our partners and other third parties.

How we use your personal information

• Providing and improving the Services. To fulfil our contract with you, process payments, fulfil orders, remember your preferences, send order notifications, handle returns and refunds, create and manage your account, arrange delivery, enable reviews, and personalise your shopping experience.
• Marketing and advertising. To send marketing and promotional communications by email, text message or post, and to show you online advertising, where you have consented to this.
• Security and fraud prevention. To authenticate your account, secure payments, and detect and investigate fraudulent, unlawful or malicious activity. If you register an account, you are responsible for keeping your login details secure. Please do not share your username or password with anyone.
• Communicating with you. To provide customer service, answer your questions and maintain our relationship with you.
• Legal reasons. To comply with applicable law, respond to lawful requests from authorities, and establish, exercise or defend legal claims.

Lawful bases for processing

Under the UK GDPR we rely on the following lawful bases: performance of a contract (to process and deliver your order); consent (for marketing communications and non-essential cookies, which you may withdraw at any time); legitimate interests (to improve our Services and prevent fraud); and legal obligation (to meet our tax and accounting duties).

How we disclose personal information

We may disclose your personal information in the following circumstances:

• To Shopify and other service providers who perform services on our behalf, such as IT management, payment processing, data analysis, customer service, cloud storage, fulfilment and delivery.
• To business and marketing partners, to provide marketing services and show you advertising. These partners will use your information in accordance with their own privacy notices. You may have the right to opt out of the sharing of your information for personalised advertising.
• Where you ask us to, or consent to us doing so, for example to arrange delivery or when using social media widgets or login integrations.
• With our affiliates or within our corporate group.
• In connection with a business transaction such as a merger or insolvency, or to comply with legal obligations, enforce our terms, and protect our rights or the rights of others.

Our relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve them. Information you provide through the Services will be shared with Shopify and with third parties who may be located in countries other than your own. We also use certain advanced Shopify features that draw on data from your interactions with our store, with other merchants and with the Shopify platform. In those circumstances Shopify is responsible for processing your personal information, including responding to requests to exercise your rights. To learn more, see Shopify’s consumer privacy policy at privacy.shopify.com.

Third-party websites and links

The Services may contain links to websites and platforms operated by third parties. We do not control those sites and are not responsible for their privacy or security practices, or for the accuracy or completeness of information found on them. Please read their privacy policies before providing information. Including a link does not imply our endorsement.

Children’s information

The Services are not intended for children. We do not knowingly collect personal information from children under the age of 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us using the details below and we will delete it.

Security and data retention

No security measure is perfect, and we cannot guarantee complete security. Information transmitted to us over the internet may not be secure in transit, so please do not use insecure channels to send us sensitive or confidential information.

How long we keep your personal information depends on factors such as whether we need it to operate your account, provide the Services, meet legal requirements, resolve disputes or enforce our policies.

Your rights

Under the UK GDPR and the Data Protection Act 2018 you have the following rights. These rights are not absolute and may not apply in every case.

• Access. You may ask for a copy of the personal information we hold about you.
• Erasure. You may ask us to delete the personal information we hold about you.
• Rectification. You may ask us to correct inaccurate information.
• Portability. You may ask for a copy of your information in a portable format, or ask us to transfer it to a third party.
• Objection and restriction. You may ask us to stop or restrict processing your information for certain purposes.
• Withdrawing consent. Where we rely on your consent, you may withdraw it at any time. This does not affect the lawfulness of processing carried out before you withdrew it.
• Marketing preferences. You may unsubscribe from marketing emails at any time using the link in any of our emails. We may still send you non-promotional messages about your account or orders.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on your request, and we will respond within one month, as required by law. You may authorise an agent to make a request on your behalf, but we will require proof of their authority. We will not discriminate against you for exercising your rights.

Complaints

If you have a complaint about how we handle your personal information, please contact us first using the details below. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk or on 0303 123 1113.

International data transfers

We may transfer, store and process your personal information outside the United Kingdom. Where we do so, we rely on recognised transfer mechanisms such as the UK International Data Transfer Agreement or the UK Addendum to the European Commission’s standard contractual clauses, unless the country in question has been found to provide an adequate level of protection.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal or regulatory reasons. We will post the updated policy on this page, revise the “Last updated” date, and notify you of changes where the law requires it.

Contact

For any questions about our privacy practices or this Privacy Policy, or to exercise your rights, contact us by email at contact@eleanorjewellery.co.uk or by post at:

TC MOTION LLP, trading as Eleanor Jewellery
71–75 Shelton Street, London, Greater London, WC2H 9JQ, United Kingdom

For the purposes of UK data protection law, we are the controller of your personal information.