PRIVACY POLICY
Privacy Policy (UK GDPR)
Last Updated: 09 March 2026
This Privacy Policy explains how GemoriesUK (“we”, “our”, or “us”) collects, uses, and protects your personal data when you visit or make a purchase from our website [website URL]. We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Personal Data We Collect
When you use our website or place an order, we may collect the following personal data:
​
Information you provide directly
-
Full name
-
Email address
-
Billing address
-
Shipping address
Transaction information
-
Order details and purchase history
-
Payment information (processed securely by our payment providers)
Technical data
-
IP address
-
Browser type and device information
-
Website usage data
-
Cookies and tracking technologies
2. Why We Collect Your Data
We collect and process personal data for the following purposes:
​
Order processing
-
To process and deliver your orders
-
To send order confirmations and updates
-
To manage payments and refunds
Customer service
-
To respond to enquiries and provide support
Website functionality
-
To maintain and improve our website
-
To analyse website usage and performance
Marketing
-
To send promotional emails or offers (only where you have given consent or where permitted by law)
​
3. Legal Basis for Processing
Under UK data protection law, we rely on the following lawful bases to process your personal data:
​
Contract
-
Processing is necessary to fulfil your order and provide services you request
Legal obligation
-
We must retain certain data for tax, accounting, and regulatory purposes.
Legitimate interests
-
To operate and improve our business and website services.
Consent
-
For sending marketing communications where required by law. You may withdraw consent for marketing at any time.
4. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected.
​
Typical retention periods include:
-
Order and transaction records: up to 6 years (for legal and tax requirements)
-
Customer service communications: up to 2 years
-
Marketing data: until you withdraw consent or unsubscribe When personal data is no longer required, it is securely deleted or anonymised.
5. Third Parties We Share Data With
We may share personal data with trusted third parties who help us operate our business, including:
​
-
Payment processors to process payments securely
-
Delivery and courier companies to ship orders
-
Website hosting providers to maintain our website
-
Email service providers to send communications
-
Analytics providers to understand website usage
​
These providers only process your data on our instructions and are required to keep it secure.
​
6. Your Data Protection Rights
Under UK data protection law, you have the right to:
​
-
Access: Request a copy of the personal data we hold about you.
-
Correction: Request that we correct inaccurate or incomplete data.
-
Erasure (Right to be Forgotten): Request that we delete your personal data in certain circumstances.
-
Restriction of Processing: Request that we limit how we use your data.
-
Data Portability: Request that we transfer your data to another service provider.
-
Object to Processing: Object to processing based on legitimate interests or direct marketing.
Requests will normally be responded to within one month.
​
7. Data Security
We take appropriate technical and organisational measures to protect personal data, including:
​
-
Secure servers and encryption
-
Restricted access to personal data
-
Regular security monitoring
8. Cookies
Our website uses cookies and similar technologies to improve functionality and analyse usage. For more information, please see our Cookie Policy.
9. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
​
-
Email: gemoriesuk@gmail.com
-
Company Name: GemoriesUK
-
Address: 63 Grosvenor Road, London N10 2DR
If you believe your data has been handled improperly, you also have the right to lodge a complaint with the UK’s data protection regulator, the Information Commissioner’s Office (ICO).
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal or operational changes. The latest version will always be available on our website.