Privacy policy
Hemstock’s Jewellers – Privacy Policy (UK GDPR Compliant)
1. Introduction
This Privacy Policy explains how Hemstock’s Jewellers (“we”, “us”, “our”) collects, uses, stores and protects your personal information when you visit www.hemstocks.co.uk, contact us, or make a purchase online or in‑store.
We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Nothing in this policy affects your rights under the Consumer Rights Act 2015.
2. Who We Are
Hemstock’s Jewellers Ltd 37 Market Street Wymondham NR18 0AJ United Kingdom
We are the data controller for the personal information we collect.
You can contact us at: Websales@Hemstocks.co.uk
3. Personal Information We Collect
We collect personal information in the following categories:
a) Information you provide directly
-
Name
-
Billing and delivery address
-
Email address
-
Phone number
-
Payment details (processed securely by third‑party providers; we do not store card numbers)
-
Order details
-
Repair, valuation or guarantee information
-
Customer service enquiries
-
Preferences (e.g., marketing consent)
b) Information collected automatically
When you visit our website, we collect:
-
IP address
-
Browser type and version
-
Device information
-
Pages viewed and browsing behaviour
-
Cookies and tracking data (see Section 11)
c) Information from third parties
-
Payment processors (Shopify Payments, PayPal, Klarna)
-
Fraud‑prevention services
-
Delivery partners
-
Marketplace platforms (eBay, if used)
We do not collect special category data unless you voluntarily provide it (e.g., accessibility needs).
4. How We Use Your Personal Information
We use your information for the following purposes:
a) To fulfil your order
-
Processing payments
-
Providing invoices and order confirmations
-
Delivering your items
-
Managing repairs, guarantees and valuations
-
Handling returns and refunds
Lawful basis: Contract performance.
b) To provide customer support
-
Responding to enquiries
-
Resolving issues
-
Providing aftercare
Lawful basis: Legitimate interests.
c) To improve our website and services
-
Analytics
-
Monitoring website performance
-
Preventing fraud and misuse
Lawful basis: Legitimate interests.
d) To send marketing communications (optional)
We only send marketing emails if you have explicitly opted in.
You can unsubscribe at any time.
Lawful basis: Consent.
e) To comply with legal obligations
-
Tax and accounting requirements
-
Responding to lawful requests from authorities
-
Guarantee and warranty record‑keeping
Lawful basis: Legal obligation.
5. Sharing Your Personal Information
We only share your information with trusted third parties when necessary:
-
Shopify – website hosting and order processing
-
Payment providers – Shopify Payments, PayPal, Klarna
-
Delivery companies – Royal Mail, DPD, etc.
-
Fraud prevention services
-
Professional advisers – accountants, auditors
-
Law enforcement – only when legally required
We do not sell or rent your personal information to any third party.
6. International Transfers
Some of our service providers (including Shopify) may store or process data outside the UK.
Where this occurs, we ensure appropriate safeguards are in place, such as:
-
UK adequacy regulations
-
Standard Contractual Clauses (SCCs)
These ensure your data remains protected to UK GDPR standards.
7. How Long We Keep Your Information
We retain personal information only for as long as necessary:
-
Order records: 6 years (legal requirement)
-
Guarantee/valuation records: retained for the life of the guarantee
-
Marketing data: until you withdraw consent
-
Customer service enquiries: up to 24 months
-
Cookies: see Section 11
You may request deletion of your data at any time (see Section 9).
8. Automated Decision‑Making
We do not make decisions that have legal or significant effects using automated processes.
Shopify may use automated fraud‑screening tools to protect our business and customers. These do not produce legal effects.
9. Your Rights Under UK GDPR
You have the following rights:
-
Right to access – request a copy of your data
-
Right to rectification – correct inaccurate information
-
Right to erasure – request deletion (where legally permitted)
-
Right to restrict processing
-
Right to data portability
-
Right to object to processing based on legitimate interests
-
Right to withdraw consent (for marketing)
To exercise your rights, contact: Websales@Hemstocks.co.uk
If you are unhappy with our response, you can complain to the Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/ (ico.org.uk in Bing)
10. Security
We take appropriate technical and organisational measures to protect your personal information, including:
-
Encrypted payment processing
-
Secure servers
-
Access controls
-
Staff training
-
Fraud‑prevention systems
No method of transmission is 100% secure, but we follow industry best practice.
11. Cookies
Our website uses cookies to:
-
Enable essential site functions (shopping cart, checkout)
-
Improve performance
-
Provide analytics
-
Personalise your experience
-
Support advertising (only with consent)
You can manage or disable cookies through your browser settings. Blocking cookies may affect website functionality.
A full list of cookies used by Shopify is available at: https://www.shopify.com/legal/cookies
12. Behavioural Advertising
We may use cookies or analytics tools to show you relevant products or ads.
You can opt out of personalised advertising via:
-
Google Ads settings
-
Facebook Ads preferences
-
Browser cookie controls
We only use advertising cookies with your consent.
13. Third‑Party Links
Our website may contain links to third‑party sites. We are not responsible for their privacy practices.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our website.
15. Contact Us
If you have questions about this policy or how we handle your data, contact:
Email: Websales@Hemstocks.co.uk Address: Hemstock’s Jewellers Ltd., 37 Market Street, Wymondham, NR18 0AJ, United Kingdom
Reviewed: 27 February 2026.
Legal entity statement: