Shaun Leane Jewellery Ltd is the data controller responsible for processing your personal data. If you have any questions about this policy or our privacy practices, please contact us:

Email: info@shaunleane.com
Postal address: Low Meadow Farm, Windsor Road, SL9 8SR
Contact person: Office Administrator

Shaun Leane Ltd is registered with the ICO under the Data Protection Register. Our registration number is 05540750. Our data protection officer is the Office Administrator and can be contacted at info@shaunleane.com.

We may collect data through our interactions with you when you:

• Register, or complete forms on our website
• Download content on our website
• Provide feedback via phone, email, or social media
• Subscribe to our newsletters
• Use a chat function or leave comments
• Purchase or use our products and services

We may collect the following categories of personal information:

• Identifiers: name, email address, postal address, telephone number, IP address
• Customer records: address, bank account or card number, other financial information
• Commercial information: delivery information, records of goods purchased or considered
• Internet activity: browsing history, search history, device information
• Geolocation data: city, state, postcode related to your IP address
• Inferences: preferences and characteristics derived from your interactions

Our website automatically collects certain data through cookies and similar tools, including:

• Technical data: browser type, operating system, device details, IP address, domain name, referral URL, time zone, and visit timestamp
• Usage data: pages visited, time spent on pages, date and duration of visit, and other analytical data

Please refer to our Cookie Policy for full details on cookies and related technologies.

We use your personal data for the following purposes:

• To fulfil the purpose for which the information is provided
• To provide products and services you request
• To communicate and respond to your requests and enquiries
• To send email alerts, event registrations, and notices about our products
• To manage and enhance our site's technical and functional aspects
• To evaluate, develop, and improve our services
• To protect the rights and property of Shaun Leane, our clients, or others
• To fulfil obligations from any contract with customers or third parties
• For testing, research, analysis, and product development
• To comply with applicable law and regulations
• To respond to law enforcement requests as required by applicable law

We rely on the following legal bases under GDPR:

• Consent: where required, we will obtain your consent before processing
• Performance of a contract: where processing is necessary to fulfil a contract with you
• Legal obligation: where we are required to process your data to comply with applicable legislation
• Vital interest: where processing is necessary to protect vital interests
• Public interest: where processing is necessary for a task carried out in the public interest
• Legitimate interest: to improve our products, services, and marketing where consistent with your rights

Cookies are small files transferred to your computer's hard drive through your web browser that enable our systems to recognise your browser and remember certain information.

We are permitted to store essential cookies on your device without consent. For all other types of cookies we will ask for your consent. For full details on our cookie controls, please refer to our Cookie Policy.

Under GDPR and applicable privacy laws, you have the following rights in relation to your personal data:

1. Right of access: to be informed and request access to the personal data we hold about you
2. Right to rectification: to request correction of inaccurate personal data
3. Right to erasure: to request deletion of your personal data
4. Right to restriction of processing: to request we stop processing all or some of your data
5. Right to data portability: to request a copy of your data in electronic format
6. Right to object: to object to us processing your data at any time, including for direct marketing
7. Right not to be subject to automated decision making: not to be subject to decisions based solely on automated processing

You have the right to know the specific pieces of information we collect, use, disclose, or sell covering the 12-month period preceding your request. You may ask us to disclose:

1. The specific pieces of personal information we have collected about you
2. The categories of personal information collected
3. The categories of sources from which we collected it
4. The categories of personal information we sell or disclose for a business purpose
5. The categories of third parties to whom we sell or disclose your information
6. The commercial purpose for which we collected or sold your personal information

You have the right to request that we delete personal information we hold about you, subject to certain exceptions under applicable law.

You also have the right to request a copy of the personal information we have collected about you.

To exercise either right, please email us at info@shaunleane.com.

If you exercise any of your consumer rights under GDPR, you have the right not to be subjected to discrimination by us, including denial of goods or services or being charged a different price.

You may exercise any of your rights by contacting us at info@shaunleane.com. We will confirm that the request is made by the consumer about whom we have collected information. We will not generally ask for additional information beyond what is needed to verify your identity, however in some cases we may need to request more information to confirm your identity.

We do not disclose your information to third parties for personal use unless you authorise it. However, we may share it in the following circumstances:

• Law enforcement or government authorities where required by law
• Our representatives or service providers who carry out tasks on our behalf
• Where necessary to protect the rights, property, and safety of Shaun Leane and our employees
• For handling legal claims and disputes
• To carry out an agreement we have entered into with you
• In emergency or force majeure situations

We may collect aggregate, non-personally identifiable data and share this with partners, service providers, and advertisers for marketing or promotional purposes.

We work with service providers to run our website and provide website-related services. These third parties are only entitled to use your personal data to perform these tasks and are not permitted to share it or use it for any other purpose.

Service providers help us improve our marketing operations, engaging visitors with tailored information based on previous interaction with our website. You may ask us to stop using your information for marketing by contacting us via the methods provided above.

We use Google Analytics to record and analyse website traffic. Google Analytics may store your IP address, however we do not have access to your IP address as it is protected by Google. For more information, visit the Google Privacy Terms page.

Our website may contain links to websites not owned or managed by us. When you follow a third-party link, you will leave our website. We have no supervision over and do not accept responsibility for the practices, content, or services on third-party websites.

By using our website, you agree to allow third parties to process your IP address to determine your location for currency conversion, and to have that currency stored in a session cookie in your browser.

Your personal data will be retained for as long as is required to achieve the purposes outlined in this policy. If you ask us to delete your personal information, we will do so unless we are legally required to retain it, such as to comply with a court order or settle a legal dispute.

We may require you to confirm your identity before responding to requests to amend, delete, or restrict your personal data. If we are unable to fulfil a request within a reasonable time frame, we will advise you of the date when this will be available.

We are firmly committed to the security of your personal data. We implement adequate technical, physical, administrative, and organisational measures to guarantee the security of your information, including encryption and pseudonymisation where appropriate.

No information system can be completely safe, and we cannot guarantee the complete security of your information. We are not liable for the security of data transmitted across networks not under our control, such as wireless networks and the internet.

We recommend you choose a secure password, avoid sharing it with anyone, and log out of your account as soon as your session is over.

Data subjects may make subject access requests (SARs) at any time to find out more about the personal data we hold about them, what we are doing with it, and why.

SARs may be made in writing to Shaun Leane's management team. Responses will normally be made within one month of receipt, extendable by up to two months for complex or numerous requests.

Shaun Leane does not charge a fee for handling normal SARs but reserves the right to charge reasonable fees for additional copies of information already supplied, and for requests that are manifestly unfounded or excessive.

You have the right to require us to rectify any inaccurate or incomplete personal data. We will rectify the data and inform you within one month of being notified, extendable by up to two months for complex requests. Any third parties to whom affected data has been disclosed will also be informed.

You have the right to request erasure of your personal data in the following circumstances:

• It is no longer necessary for us to hold the data for the original purpose
• You wish to withdraw your consent
• You object to us holding and processing it and there is no overriding legitimate interest
• The data has been processed unlawfully
• Erasure is required to comply with a legal obligation

Unless we have reasonable grounds to refuse, all requests for erasure will be complied with within one month, extendable by up to two months for complex requests.

You may request that we cease processing the personal data we hold about you. If you make such a request, we will retain only the minimum amount of data required to ensure it is not processed further. Any third parties to whom affected data has been disclosed will be informed of the applicable restrictions.

Where you have given consent to process your personal data, or where processing is required for the performance of a contract, you have the right to receive a copy of your personal data in a portable format and to transmit it to another data controller.

We will make applicable personal data available in plain text format. All requests will be complied with within one month, extendable by up to two months for complex or numerous requests.

You have the right to object to us processing your personal data based on legitimate interests, direct marketing (including profiling), and processing for scientific or historical research purposes.

Where you object to processing based on legitimate interests, we will cease such processing immediately unless our legitimate grounds override your interests, rights, and freedoms, or the processing is necessary for legal claims.

Where you object to direct marketing, we will cease such processing immediately.

Despite our best efforts to secure your information, if we suffer a data breach we will do our best to minimise its effects and will follow the applicable notification provisions of GDPR and any other applicable laws.

Shaun Leane may update this notice periodically and will revise the date at the top to reflect when any update occurred. If we make material changes to how we collect, use, or share your personal information, we will endeavour to provide notice before such changes take effect, such as by posting prominent notice on our website.