Privacy policy

1. Introduction

 

Heartstones Ltd (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

 

This Privacy Policy explains how we collect, use, store, and protect your personal data when you:

 

  • Visit our website
  • Join our waitlist or early access list
  • Contact us
  • Place an order or make an enquiry

 

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.



2. Who We Are

 

Heartstones is a trading name of Heartstones Ltd, a company registered in England and Wales.

 

Company number: 16999965

Registered office:

23 Graig Park Road

NP20 6HD

United Kingdom

 

Email: accounts@heartstonesjewellery.com

 

We are the data controller responsible for your personal data.



3. What Personal Data We Collect

 

We may collect and process the following personal data:

 

  • Name
  • Email address
  • Postal address
  • Telephone number
  • Order and enquiry details
  • Communication history
  • Any information you voluntarily provide via forms or email

 

We only collect personal data that is necessary for legitimate business purposes.


4. Waitlist & Early Access Sign-Ups

 

When you join our waitlist or early access list, we collect:

 

  • Your name (if provided)
  • Your email address

 

This information is used solely to:

 

  • Notify you about our launch
  • Provide early access to products
  • Share relevant updates about Heartstones

 

We will not use waitlist details for unrelated marketing, and we will not share your information with third parties for marketing purposes.

 

You may unsubscribe from waitlist communications at any time by:

 

  • Clicking the unsubscribe link in emails, or
  • Contacting us directly at accounts@heartstonesjewellery.com



5. How We Use Your Personal Data

 

We use your personal data to:

 

  • Respond to enquiries
  • Manage orders and bespoke requests
  • Communicate with you about your order or enquiry
  • Send updates you have opted in to receive (such as the waitlist)
  • Meet legal and accounting obligations

 

We will never sell your personal data.



6. Lawful Basis for Processing


Under UK GDPR, we rely on the following lawful bases:


  • Consent – for waitlist sign-ups and optional communications
  • Contract – where processing is necessary to fulfil an order
  • Legal obligation – for accounting and regulatory compliance
  • Legitimate interests – to operate and improve our business



7. How We Store and Protect Your Data

 

Your data is stored securely using reputable platforms and systems with appropriate security measures in place.

 

We take reasonable steps to protect your personal data from:

 

  • Unauthorised access
  • Loss
  • Misuse
  • Disclosure

 

We retain personal data only for as long as necessary for the purposes outlined in this policy or to meet legal requirements.



8. Sharing Your Data

 

We may share your data only where necessary with:

 

  • Payment providers
  • Delivery and postal services
  • IT and website service providers (such as email or hosting platforms)

 

These providers are only given the information necessary to perform their services and are required to protect your data.



9. Your Rights

 

Under UK GDPR, you have the right to:

 

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Withdraw consent at any time
  • Lodge a complaint with the Information Commissioner’s Office (ICO)

 

To exercise your rights, please contact:

accounts@heartstonesjewellery.com



10. Cookies

 

Our website may use cookies to ensure it functions correctly and to improve user experience.

 

You can control or disable cookies through your browser settings.

Further details may be provided in a separate Cookie Policy if required.



11. Third-Party Links

 

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites.



12. Changes to This Privacy Policy

 

We may update this Privacy Policy from time to time to reflect legal or operational changes.

 

The most current version will always be available on our website.



13. Contact Us

 

If you have any questions about this Privacy Policy or how we handle your data, please contact:

 

Heartstones Ltd

Email: accounts@heartstonesjewellery.com