Privacy Policy
Last updated 10 August 2026
Draft, pending legal review. Every square bracket below needs a real answer, and a qualified adviser should read this notice before it goes live. Delete this block once that has happened.
- We collect what an order needs — your name, contact details, address and what you bought.
- Your card details never reach us. They go straight to the payment provider.
- We do not sell your personal information or share it for anyone else’s advertising.
- Marketing email is opt-in, and you can stop it from any message we send.
- You can ask to see, correct or delete what we hold. We answer within one month.
Who we are
This notice covers this website and any order placed through it. The business responsible is [registered company name, company number and registered address], trading as Novara Diamonds.
What we collect
When you order: your name, email address, delivery and billing addresses, a phone number for the carrier, and what you bought. If you engrave a piece we hold the text you asked for, and if you write to us we keep the message and our reply.
Automatically: the pages you view, your device and browser, a rough location from your network address, and the identifiers stored by cookies.
We never see your full card number. Payment details are entered on our payment provider’s systems, and we are told only that a payment succeeded, plus the card type and last four digits so a refund can be matched to it.
How we collect it
Most of it you give us directly at checkout, in an account, or by email. Some is gathered by cookies as you use the site. A little reaches us from others: our payment provider confirms a payment, and a carrier tells us who signed for a parcel.
Why we use it, and on what basis
We use personal information for the purposes below and nothing else. Each rests on a lawful basis — the legal justification for holding it.
| What we use it for | Lawful basis |
|---|---|
| Taking payment, making your piece and delivering it | Performing our contract with you |
| Support, returns, resizing and warranty claims | Performing our contract with you |
| Fraud checks and keeping the site secure | Our legitimate interest in preventing loss |
| Tax, accounting and records we must keep | A legal obligation |
| Marketing email and analytics cookies | Your consent, which you can withdraw |
[This table uses the lawful-basis framework applied in the UK and EU. If the business is established elsewhere, have an adviser confirm the equivalent.]
Who else sees it
Only the suppliers we need to run a shop, and only for the job we give them. They act on our instructions and cannot use your details for their own purposes. They are: [payment provider], [shipping carriers], [email platform], [analytics provider] and [ecommerce platform, plus any other processor].
We may also disclose information where the law requires it, or to defend a legal claim. We do not sell personal information.
Cookies
Some cookies are strictly necessary: they keep your basket, hold your session together through checkout, and block obvious fraud. The site cannot work without them. Everything else, including analytics, is set only if you agree, and you can change your mind at any time. Blocking cookies in your browser works too, but blocking the necessary ones stops checkout.
How long we keep it
Order records are kept for [number] years, because tax rules and the lifetime warranty both need us to prove what was sold and when. Support messages are kept for [period], and analytics data for [period]. Marketing contacts stay until you unsubscribe, after which we keep a minimal record of that request. [Confirm every period here with your accountant and adviser.]
Your rights
You can exercise any of these by writing to us. We answer within one month, and we will not charge you or treat you differently for asking.
See what we hold
Ask for a copy of your personal information.
Correct it
Have anything inaccurate or incomplete put right.
Delete it
Ask us to erase it where we have no obligation to keep it.
Restrict our use
Have us pause while a question is resolved.
Object
Object to anything we do on a legitimate-interest basis.
Take it with you
Receive what you gave us in a portable form.
Withdraw consent
Stop marketing or optional cookies at any time.
Sending data abroad
Some suppliers listed above operate outside the country you live in, so your information may be handled there. Where that happens we rely on the safeguards the law provides. [Name the countries your processors operate in and the transfer mechanism you rely on, and check this paragraph before publishing.]
Children
This shop is for adults. We do not knowingly collect information from children or market to them. If you believe a child has given us personal information, tell us and we will delete it.
Complaints
If something we have done concerns you, raise it with us first — most things are quicker to fix directly. You can also complain to the supervisory authority for data protection where you live, which for us is [name your data protection regulator and its website]. Coming to us first does not affect that right.
Changes to this notice
We update this notice when what we do with personal information changes, and the date at the top shows the current version. If a change materially affects you, we will say so.
Contact
Write to [privacy contact email], or by post to [registered company name and registered address]. Tell us which right you are using and we will be faster.
The terms you buy under are in our Terms & Conditions, delivery in the Shipping Policy, and returns in the Refund Policy.