Privacy Policy

1. Introduction

Heartstones Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you:

• Visit our website
• Join our waitlist or early access list
• Contact us
• Place an order or make an enquiry

We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Heartstones is a trading name of Heartstones Ltd, a company registered in England and Wales.

Company number: 16999965
Registered office:
23 Graig Park Road
NP20 6HD
United Kingdom

Email: accounts@heartstonesjewellery.com

Heartstones Ltd is the data controller responsible for your personal data.

3. What Personal Data We Collect

We may collect and process the following personal data:

• Name
• Email address
• Postal address
• Telephone number
• Order and enquiry details
• Communication history
• Any information you voluntarily provide through forms or email

We only collect personal data that is necessary to operate our business and provide our services.

4. Waitlist & Early Access Sign-Ups

When you join our waitlist or early access list, we collect:

• Your name (if provided)
• Your email address

This information is used only to:

• Notify you about the Heartstones launch
• Provide early access to products or commissions
• Share relevant updates about Heartstones

We will not use waitlist details for unrelated marketing and we will never sell or share this information with third parties for marketing purposes.

You may unsubscribe from these communications at any time by:

• Clicking the unsubscribe link in emails, or
• Contacting us directly at accounts@heartstonesjewellery.com

5. How We Use Your Personal Data

We use personal data in order to:

• Respond to enquiries
• Manage orders and bespoke commissions
• Communicate with you about your order or enquiry
• Send updates you have opted in to receive (such as waitlist notifications)
• Meet legal, accounting, and regulatory obligations

Heartstones Ltd does not sell personal data.

6. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases for processing personal data:

Consent – for waitlist sign-ups and optional communications
Contract – where processing is necessary to fulfil an order or commission
Legal obligation – for accounting, tax, and regulatory compliance
Legitimate interests – to operate and improve our business and services

7. How We Store and Protect Your Data

Personal data is stored using reputable platforms and systems with appropriate security measures in place.

We take reasonable steps to protect personal data from:

• Unauthorised access
• Loss or accidental deletion
• Misuse
• Unauthorised disclosure

Personal data is retained only for as long as necessary for the purposes described in this policy, or as required by law.

8. Sharing Your Data

We may share your personal data only where necessary with trusted service providers, including:

• Payment processing providers
• Delivery and postal services
• IT and website service providers (such as email platforms or hosting services)

These providers are given only the information required to perform their services and are required to handle your data securely.

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain types of processing
• Withdraw consent at any time where consent was relied upon
• Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise any of these rights, please contact:

accounts@heartstonesjewellery.com

10. Cookies

Our website may use cookies to ensure it functions correctly and to improve user experience.

You can control or disable cookies through your browser settings.

Additional details may be provided in a separate Cookie Policy if required.

11. Third-Party Links

Our website may contain links to third-party websites.

Heartstones Ltd is not responsible for the privacy practices or content of external websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes.

The most current version will always be available on our website.

13. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact:

Heartstones Ltd
Email: accounts@heartstonesjewellery.com