Who we are
This website is operated by [Company name] Ltd (trading as MoonRock Diamonds), a company registered in England and Wales under company number [company number], with its registered office at [registered address]. We are the data controller for the personal information described in this policy. We are registered with the Information Commissioner’s Office under number [ICO registration number].
Information we collect
We collect information you give us directly and some information automatically when you use the website.
— Contact details: name, email address, phone number and postal address.
— Enquiry and appointment details: the pieces you are interested in, notes left in your Jewellery Box, preferred appointment times and any information you share with a specialist.
— Order and payment details: items purchased, invoices, deposits and delivery information. Card payments are processed by our payment provider; we do not store full card numbers.
— Ring sizes, engraving text and design preferences for bespoke commissions.
— Technical information: IP address, browser type, device and pages visited, collected through cookies (see our Cookie Policy).
How we use your information
—
To respond to private enquiries and arrange appointments, including video consultations.
—
To prepare quotations and invoices, take deposits and payments, and fulfil orders.
—
To arrange insured delivery or collection and to provide order tracking updates.
—
To handle returns, repairs, resizing and aftercare.
—
To send marketing about new collections and events, only where you have agreed. You can unsubscribe at any time.
—
To improve the website and keep it secure.
—
To meet legal obligations, including anti-money laundering checks on high-value purchases.
Our legal basis
Under UK GDPR we rely on: contract (to process enquiries, orders and deliveries you request); legitimate interests (to run and improve our business and prevent fraud); consent (for marketing emails and non-essential cookies); and legal obligation (for tax, accounting and anti-money laundering records).
Who we share it with
We do not sell your personal information. We share it only with trusted providers who help us run the business, under contracts that require them to protect it.
—
Payment processors, to take deposits and payments securely.
—
Insured couriers, to deliver your order.
—
Website hosting, email and calendar providers (including Google, for appointment invitations and video meeting links).
—
Professional advisers, insurers and authorities where required by law.
International transfers
Some providers store data outside the UK. Where this happens we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
How long we keep it
Enquiries that do not lead to a purchase are kept for up to 24 months. Order, invoice and payment records are kept for 6 years to meet tax and accounting requirements. Marketing preferences are kept until you withdraw consent.
Your rights
You have the right to access, correct or delete your personal information, to restrict or object to its use, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us using the details above. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
Security
The website uses SSL encryption. Access to client information is limited to staff who need it, and we review our security measures regularly.
Changes to this policy
We may update this policy from time to time. The date at the top of the page shows when it was last changed.
