Privacy Policy for Esmé Studios Bespoke Jewellery

Effective Date: immediately.

At Esmé Studios Bespoke Jewellery, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website (https://www.esmestudios.online/) or engage with our services. We adhere to the UK General Data Protection Regulation (UK GDPR) and other applicable data protection laws.

1. Who We Are
Esmé Studios Bespoke Jewellery is a bespoke jewellery studio that designs and creates custom jewellery pieces for our clients. For data protection law, Esmé Studios Bespoke Jewellery is the 'data controller.'

2. What Personal Data We Collect
We may collect and process the following personal data:
- Contact Information: Name, email address, phone number, and postal address (when you make a purchase, request a consultation, or subscribe to our newsletter).
- Payment Information: Credit/debit card details, and billing information (processed through secure third-party payment providers).
- Website Usage Data: Information about how you use our website (e.g., IP address, browser type, and pages visited).
- Marketing Data: Preferences regarding our marketing communications (if you opt-in for newsletters or promotions).
- Consultation/Order Data: Details about any bespoke jewellery orders, consultations, or communication you’ve had with us.

3. How We Use Your Data
We use your data for the following purposes:
- To provide our services: To process orders, fulfil bespoke jewellery requests, provide customer support, and communicate with you regarding your orders or inquiries.
- To improve our website and services: We use website usage data to analyse and improve user experience.
- To send marketing communications: If you have opted in, we may send you promotional emails about new collections, events, or offers that might interest you. You can opt out of marketing communications at any time by unsubscribing from our emails.
- To comply with legal obligations: We may use your data to comply with legal or regulatory requirements (e.g., for accounting purposes).

4. Lawful Basis for Processing Your Data
Under the UK GDPR, we rely on the following lawful bases to process your data:
- Consent: When you provide us with your consent to send marketing communications or to use certain services.
- Contractual Necessity: To process orders, and payments, and provide bespoke jewellery services.
- Legal Obligation: To comply with legal obligations such as tax reporting or accounting.
- Legitimate Interests: To improve our website and services, and to communicate with customers about their orders.

5. Sharing Your Data
We do not sell, rent, or lease your data to third parties. However, we may share your data with trusted third parties to help us provide services, such as:
- Payment Processors: For processing payments securely.
- Delivery Providers: To deliver your bespoke jewellery orders.
- Service Providers: For website hosting, analytics, and marketing tools (e.g., email marketing services).
We ensure that any third-party providers we work with are GDPR compliant and handle your data securely.

6. Data Retention
We will retain your data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or for as long as we are required to retain it by law. For example, we may need to retain financial transaction data for tax purposes.

7. Your Rights Under UK GDPR
Under the UK GDPR, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data.
- Right to Erasure: You can ask us to delete your data, subject to certain conditions.
- Right to Restrict Processing: You can request that we limit the processing of your personal data in certain circumstances.
- Right to Data Portability: You can request that we transfer your data to another service provider in a structured, commonly used format.
- Right to Object: You can object to our processing of your data, including for direct marketing purposes.
- Right to Withdraw Consent: If we are processing your data based on consent, you can withdraw your consent at any time.

To exercise any of these rights, please contact us using the details below.

8. Cookies and Tracking Technologies
Our website uses cookies to enhance your browsing experience, track website usage, and provide relevant advertisements. By continuing to use our website, you consent to our use of cookies. You can manage your cookie preferences through your browser settings.

9. Security of Your Data
We take the security of your data seriously and have implemented appropriate technical and organisational measures to protect it from loss, misuse, or unauthorized access. While we strive to protect your personal data, no method of transmission over the internet is 100% secure, and we cannot guarantee its absolute security.

10. International Transfers
If we transfer your personal data outside the UK or European Economic Area (EEA), we will ensure that adequate safeguards are in place to protect your data, in accordance with applicable data protection laws.

11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated 'Effective Date.' Please review this Privacy Policy periodically to stay informed about how we are protecting your personal data.

12. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, or if you wish to exercise your data protection rights, please contact us:

Esmé Studios Bespoke Jewellery
Email: esmestudiosbespoke@gmail.com