Privacy Policy

Last updated: 26 September 2026

Evelle Jewellery ("we", "us", "Evelle") is committed to protecting your privacy. This policy explains what personal data we collect when you use evellejewellery.co.uk, why we collect it, and your rights over it.

1. Who we are

Evelle Jewellery, operated by Lisa Lewis (trading as Evelle Jewellery).
Contact: lisa@evellejewellery.co.uk
ICO Registration Number: 0000000

2. What data we collect

When you place an order or contact us, we collect:

Name
Delivery and billing address
Email address
Phone number (if provided)
Order details (items purchased, ring size where applicable)
Payment is processed by PayPal; we do not collect or store your card details

3. Why we collect it and our lawful basis

To process and fulfil your order (contract)
To respond to enquiries via our contact form (contract/legitimate interest)
To meet accounting and tax obligations (legal obligation)

We do not use your data for marketing unless you separately opt in.

4. How long we keep it

Order and invoice records are kept for 6 years to meet UK tax and accounting requirements. Contact form enquiries not linked to an order are kept for 12 months, then deleted.

5. Who we share it with

PayPal, to process payment
Zoho Mail, our email provider, for order correspondence
Delivery carriers, to fulfil shipping

We do not sell or share your data with anyone else.

6. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data (subject to our legal retention obligations)
Restrict or object to processing
Data portability
Withdraw consent where we rely on it
Complain to the ICO (ico.org.uk) if you're unhappy with how we handle your data

To exercise any of these, email lisa@evellejewellery.co.uk. We will respond within one calendar month.

7. Cookies

We do not use cookies for advertising, analytics, or tracking. Our shopping cart uses your browser's local storage to remember your basket, this stays on your device and is never sent to us. Our staff login area uses a single strictly-necessary session cookie, which does not apply to customers browsing or shopping on the site.

8. Security

We take reasonable technical measures to protect your data, including HTTPS encryption and secure hosting.

9. Changes to this policy

We may update this policy from time to time. Changes will be posted on this page.