Privacy Policy

1. Who We Are

MI Jewellery ("we", "us", "our") is a boutique jewellery brand based in the United Kingdom. We are committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy-related queries, you can contact us at: hello@mijewellery.co.uk

2. Data We Collect

We collect the following personal data when you use our website or place an order:

• Full name and contact details (email address, telephone number)
• Delivery and billing address
• Order history and transaction details
• Account credentials if you create an account
• Marketing preferences (opt-in/opt-out)
• Browsing and usage data via cookies

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
• Send order confirmations and shipping updates
• Manage your customer account
• Send marketing communications where you have opted in
• Comply with our legal obligations
• Improve our website and customer experience

4. Legal Basis for Processing

We process your data under the following legal bases: contract performance (to fulfil your order), legitimate interests (to improve our services), legal obligation (e.g. financial record-keeping), and consent (for marketing communications, which you may withdraw at any time).

5. Marketing Communications

We will only send you marketing emails if you have not opted out at checkout or via a subsequent request. You may withdraw your consent at any time by contacting us or clicking "unsubscribe" in any marketing email. Opting out of marketing will not affect the processing of your order-related communications.

6. Sharing Your Data

We may share your data with trusted third parties only where necessary:

• Stripe — for secure payment processing
• Delivery partners — to fulfil and track your order
• IT and platform providers — who host and maintain our website

We do not sell or rent your personal data to any third parties.

7. Data Retention

We retain your personal data for as long as necessary to fulfil our contractual and legal obligations — typically up to 7 years for financial records. Account data is retained while your account is active and for a reasonable period afterwards.

8. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Request erasure of your data ("right to be forgotten")
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us at hello@mijewellery.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

9. Cookies

Our website uses cookies to ensure functionality and improve your experience. By continuing to use our site, you consent to our use of essential cookies. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review this policy periodically.