Last updated: May 22, 2026

At Cookie’s Jewellery we take your privacy very seriously. We believe that your personal information is a precious thing, just like the jewelry we make. We only collect the information we absolutely need to process your order and provide you with the best possible service. We will never sell, rent or share your personal information with anyone for marketing purposes.

This privacy policy explains what information we collect, how we use it, and your rights under UK GDPR. If you have any questions, please don’t hesitate to reach out to us at [你的邮箱]. We’re always happy to help.

1. What Information We Collect

We only collect the information necessary to fulfill your order and communicate with you:

When you place an order: Your name, email address, shipping address, phone number and payment information.

When you contact us: Your name, email address and any information you choose to share with us.

When you sign up for our newsletter: Your email address (you can unsubscribe at any time).

Non-personal information: Your IP address, browser type and device information, which we use to improve our website and user experience.

Important note about our unboxing videos: We film a short, unique unboxing video for every order, showing your jewelry being carefully packed into its gift box. These videos are only sent to you, the customer, and are never shared publicly or with any third parties. We delete all unboxing videos 30 days after your order is delivered, unless you give us written permission to share them on our social media.

2. How We Use Your Information

We use your information for the following purposes only:

To process and fulfil your order

To send you order confirmations, shipping updates and customer service communications

To send you our newsletter (only if you have explicitly opted in)

To improve our website, products and services

To comply with legal obligations (such as tax and accounting requirements)

We will never use your information for any other purpose without your explicit written consent.

3. Third-Party Services

We use a small number of trusted third-party services to operate our website and process orders. Each of these services has its own privacy policy, and we only share the information necessary for them to perform their services:

Squarespace: Our website hosting and e-commerce platform.

Stripe & PayPal: Our payment processors. We do not store your full credit card details on our servers.

Royal Mail: Our shipping provider.

Google Analytics: To help us understand how our website is used.

4. How Long We Keep Your Information

We only keep your information for as long as we need it:

Order information: We keep your order details for 7 years, as required by UK tax law.

Newsletter subscriptions: We keep your email address until you unsubscribe.

Unboxing videos: We delete all videos 30 days after your order is delivered.

Customer service communications: We keep them for 1 year after your issue is resolved.

When we no longer need your information, we will securely delete it.

5. Your Rights Under UK GDPR

You have the following rights regarding your personal information:

Right to access: You can request a copy of all the personal information we hold about you.

Right to correction: You can ask us to correct any inaccurate or incomplete information.

Right to deletion: You can ask us to delete your personal information, subject to legal obligations.

Right to restriction: You can ask us to stop processing your information.

Right to data portability: You can ask us to provide your information in a machine-readable format.

Right to object: You can object to the processing of your information for marketing purposes.

To exercise any of these rights, please send an email to ycao17030@gmail.com . We will respond to your request within 30 days.

6. Data Security

We take appropriate technical and organisational measures to protect your personal information from unauthorized access, use or disclosure. All payment information is processed securely via Stripe and PayPal, which are PCI DSS compliant.

However, no method of transmission over the internet is 100% secure. While we do our best to protect your information, we cannot guarantee its absolute security.

7. Changes to This Privacy Policy

We may update this privacy policy from time to time. Any changes will be posted on this page, and we will notify you of significant changes via email.