This policy explains how Groundwrk Jewelzz ("we", "us") collects and uses your personal information when you visit groundwrkjewelzz.com or book a fitting with us. We follow the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). We keep this document in plain language, in line with guidance from the UK Information Commissioner's Office (ICO).
Who we are (the data controller)
Groundwrk Jewelzz is a sole-trader jewellery studio based in London (SE28). You can contact us at Groundwrk.jewelzz@gmail.com.
What we collect and why
We only collect what we need to fulfil bookings and deliver the pieces you order. Specifically:
- Name, email address and UK phone number — so we can confirm your booking, send appointment reminders, and reach you about your order.
- Booking details (date, time, grill preference, notes you provide) — to plan and deliver the fitting.
- Payment reference (Stripe session id, £10 deposit status) — to reconcile deposits. We never see or store your card details.
Our lawful bases
- Contract — to fulfil the booking / order you have placed with us.
- Legitimate interest — to send you appointment reminders, safeguard our records, and market our own jewellery to previous customers where you would reasonably expect it.
- Consent — for non-essential cookies (analytics), which you can grant or withdraw at any time (see the Cookie Policy).
How we use your information
Under our ICO free-tier registration, we only process personal data for:
- Staff administration (running the business)
- Advertising, marketing and public relations for our own goods and services
- Accounts and records
- Order fulfilment and delivery of custom jewellery
We do not sell your data. We do not use it for automated decision-making or profiling. We do not share your data with third parties for their own marketing.
Who we share your data with (our processors)
- Stripe, Inc. — payment processing for the £10 deposit. Stripe receives your name, email and payment card details directly from you at checkout; we only see the payment status and a session id. See Stripe's privacy notice at stripe.com/privacy.
- Resend (email delivery) — we use Resend to send booking confirmations, appointment reminders, and reschedule/cancel notifications. Resend processes your name, email and the content of the email on our behalf as a data processor. See resend.com/legal/privacy-policy.
- Google Analytics (gtag.js) — only if you accept analytics cookies. Google receives pseudonymous usage data (page views, device type). IP addresses are anonymised. See policies.google.com/privacy.
- Cloud hosting — our website and booking database are hosted on managed cloud infrastructure inside the UK/EU. Providers act as processors under a written agreement.
International transfers
Some of our processors (Stripe, Resend, Google) may transfer data outside the UK/EU. We rely on the UK International Data Transfer Agreement and Standard Contractual Clauses to provide equivalent protection to your data.
How long we keep your data
- Booking records: 7 years from the fitting date, so we can meet UK accounting record obligations.
- Marketing consent: until you unsubscribe (every marketing email has a one-click unsubscribe).
- Analytics data (if you consented): up to 14 months in Google Analytics, then automatically deleted.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you.
- Correct anything that's wrong.
- Ask us to erase your data (once we no longer need it for accounting records).
- Restrict or object to how we use your data.
- Port your data to another provider.
- Withdraw consent at any time — including cookie consent, by clicking "Cookie settings" in the footer.
To exercise any right, email Groundwrk.jewelzz@gmail.com. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
Security
The site is served over HTTPS. Passwords are stored using bcrypt hashing. Booking data is stored in a private database only accessible to the studio. We never store payment card numbers on our servers.
Changes
If we update this policy we'll change the "Last updated" date at the top and, for material changes, tell existing customers by email.