Privacy Policy

Introduction and organisational information

This Privacy Policy explains how QualiTi Jewellery Ltd ("we", "us" or "our") collects, uses, stores and protects personal information when you visit qualitijewellery.co.uk, create a trade account, place an order, contact us, or otherwise interact with us.

We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection laws.

QualiTi Jewellery Ltd is a company registered in England and Wales (Company Number: 08819540).

Unit 24
New Lydenburg Commercial Estate
New Lydenburg Street
London
SE7 8NF
UK

If you have any questions about this Privacy Policy or how we process your personal information, please contact us at support@qualitijewellery.co.uk.

Scope and application

This policy applies to visitors to our website, registered trade account holders, customers, suppliers and business contacts.

Personal information we collect

Depending on how you interact with us, we may collect and process:

• Name and business contact details
• Email addresses and telephone numbers
• Company name and business addresses
• VAT numbers and business tax identifiers
• Social media handles provided during registration
• Piercing licence documentation and trade verification information
• Account and order history
• Transaction information
• Customer support enquiries and communications
• IP address, browser and device information
• Website usage and analytics information
• Cookie consent preferences and consent records

How we use your information

We process personal information to:

• Create and manage trade accounts
• Verify business eligibility
• Process orders and transactions
• Provide customer support and manage customer communications
• Deliver products and services
• Send transactional communications relating to accounts, orders and customer service
• Improve our website and services
• Prevent fraud and maintain security
• Manage cookie preferences and consent records
• Comply with legal and regulatory obligations
• Send marketing communications where permitted

Legal basis for processing

We process personal information only where we have a lawful basis to do so under UK GDPR. Depending on the circumstances, we rely on one or more of the following legal bases:

• Performance of a contract – where processing is necessary to create and manage trade accounts, process orders, provide products and services, and fulfil our contractual obligations.
• Legitimate interests – where processing is necessary for the operation and improvement of our business, including website administration, fraud prevention, customer support, account verification, security monitoring and business communications.
• Consent – where you have given us permission to process your information, such as for certain cookies and direct marketing communications. You may withdraw your consent at any time.
• Legal obligations – where processing is necessary to comply with legal, regulatory, tax, accounting or other statutory requirements.

Payment processing

Payments made through our website are processed securely by third-party payment providers, including Braintree and PayPal.

We do not store, process or have access to your full payment card details. Payment information is handled directly by our payment providers in accordance with their own privacy and security policies.

Data storage and protection

Personal information is primarily stored within the United Kingdom using secure cloud infrastructure services, including Amazon Web Services (AWS).

We implement appropriate technical and organisational security measures to protect personal information against unauthorised access, disclosure, alteration and loss.

• Encryption of data in transit and, where appropriate, at rest
• Access controls restricting access to authorised personnel
• Security monitoring and auditing of systems and infrastructure
• Regular review of security procedures and permissions

Sharing personal information

We share personal information only where necessary to operate our business, provide our services, comply with legal obligations, or protect our legitimate interests.

International transfers

Some of our service providers operate internationally, including providers based in the European Economic Area and the United States. Where personal information is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, including adequacy decisions, International Data Transfer Agreements (IDTAs), or approved Standard Contractual Clauses where applicable.

Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and regulatory obligations.

Customer account information is retained while an account remains active. Business transaction and accounting records may be retained for up to seven years in accordance with UK legal and tax requirements.

Your rights

Under UK GDPR, you may have the right to:

• Access your personal information
• Correct inaccurate information
• Request erasure of your information
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent where applicable
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise any of these rights, please contact support@qualitijewellery.co.uk.

Cookies and tracking technologies

We use cookies and similar technologies to operate our website, improve performance, analyse usage and measure the effectiveness of our advertising.

• Strictly necessary cookies required for website functionality and security
• Analytics cookies used to understand website usage and performance
• Functional cookies used to remember preferences and settings
• Advertising cookies used to measure and improve advertising effectiveness

You can accept, reject or manage non-essential cookies through our cookie preference centre.

We use Cookiebot by Usercentrics to manage cookie preferences and record consent choices.

Detailed information about the specific cookies and similar technologies used on our website, including their purposes and retention periods, is available through our cookie preference centre and Cookie Policy.

Direct marketing

We may send marketing communications about our products, services and promotions where permitted by law or where you have provided consent.

You may unsubscribe from marketing communications at any time using the unsubscribe link included in our emails or by contacting us directly.