Privacy

At Autumn and May, your trust matters to us. We are committed to respecting and protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the rights you have. By using our website or shopping with us in-store, you agree to this policy. 

Privacy at a Glance
We want to keep things clear and simple:

  • We only collect the information we need to serve you.
  • We never sell your personal data.
  • We share data only with trusted partners (e.g. payment and delivery services).
  • You are always in control of your marketing preferences.
  • Your data is stored securely and kept only as long as necessary.
  • You can ask us at any time about the data we hold on you.

1. Who We Are
Autumn and May Jewellery Designs Ltd is an independent jewellery retailer lovingly based in the United Kingdom. Under the UK General Data Protection Regulation (UK GDPR) and other data protection laws, we act as the data controller, meaning we decide how and why your personal information is used.

Our website is powered by Shopify Inc. Shopify collects and processes certain personal information about your use of our website in order to provide and improve the Services. To learn more about how Shopify uses your personal information, visit the Shopify Privacy Policy

If you have any questions, please contact us using the details provided at the end of this policy.

2. The Data We Collect
We collect information so we can process your orders, deliver our services, and make your shopping experience better. This may include:

  • Identity and Contact Information: such as your name, email, phone number, billing and delivery addresses, account details, ring sizing preferences, engraving instructions, and special occasion reminders. When you purchase jewellery as a gift, we may collect the recipient's delivery details solely for order fulfilment.
  • Transactional Data: order history, payment details (processed securely via third parties), refunds, returns, and gift card or loyalty scheme use.
  • Technical Data: browsing activity, IP address, device and browser details, and items you've favourited, placed in your basket, or added to your Wishlist.
  • Marketing and Engagement Data: newsletter subscriptions, campaign responses, competitions, reviews, and feedback.
  • In-Store Data: CCTV recordings for security, contact details for receipts or repairs, and mailing list sign-ups collected in person. For bespoke pieces, we may retain design preferences and consultation notes to serve you better in future. For repair and maintenance services, we may keep records of your jewellery's specifications and service history.

We do not collect sensitive data such as race, religion, or health information.

3. How We Collect Your Data
Most of your data comes directly from you, for example, when you place an order, create an account, sign up for marketing, or contact us. We also collect data automatically via cookies and analytics when you browse our site. In some cases, third parties such as payment providers, couriers, fraud prevention services, or review platforms share information with us. If you interact with us on social media platforms (like Instagram or Facebook), please note that their own privacy policies also apply.

4. How We Use Your Data
We only use your personal data responsibly and where legally permitted. The main reasons are to fulfil your orders, provide customer support, and improve our services. In some cases, we rely on legitimate interests (such as creating a more personal shopping experience), and in others, we rely on your consent (for example, marketing emails).

We use your information to:

  • Process and deliver orders, returns, and refunds.
  • Provide updates on orders, deliveries, or service changes.
  • Create a more personal shopping experience and suggest products you might love.
  • Improve our website, products, and services.
  • Run promotions, loyalty programmes, and competitions.
  • Prevent fraud and ensure security.
  • Send marketing communications where you have opted in (or not opted out of similar offers). We typically send marketing emails no more than 1-2 times per week.   

5. Sharing Your Data
We never sell your data. We only share it with trusted third parties who help us deliver our services, including:

  • Payment providers such as Klarna or ShopPay.
  • Delivery partners.
  • IT and security providers to protect our systems.
  • Marketing and review platforms.
  • Shopify, which hosts our website and processes certain data on our behalf. Shopify may use information about your interactions with our store, along with data from other merchants, to provide enhanced features and improve their services. For more details, see the Shopify Privacy Policy. 
  • Regulators or law enforcement where legally required.

Some of our trusted partners may process data outside the UK/EEA. Where data is transferred outside the UK or European Economic Area, we rely on Standard Contractual Clauses or other appropriate safeguards to protect your information.

Our website may link to third-party sites. If you use these, their own privacy policies will apply.

6. Data Security
We take your data security seriously. Your payment card details are never stored on our systems, they're processed securely through our trusted payment partners. Additional measures include secure website browsing (HTTPS), tokenised payments, limited staff access, and system monitoring.

Please be aware that no security measures are perfect or impenetrable. We recommend that you do not use unsecure channels to communicate sensitive information to us.

If a data breach occurs, we will notify you and the relevant authorities where legally required.

7. Data Retention
We only keep your data for as long as needed:

  • Order data: usually retained up to 6 years for tax and legal purposes.
  • Marketing data: kept until you unsubscribe or request deletion.
  • Customer service records typically kept up to 6 years to serve you informed and better.
  • CCTV footage: stored only for a short period unless needed for investigation.

After this, your data is securely deleted or anonymised.

8. Your Rights
You have rights under data protection law. These include:

  • Access: request a copy of your order history, preferences, and personal data we hold.
  • Correction: update your delivery address, contact details, or fix any inaccuracies.
  • Erasure: request deletion where data is no longer needed.
  • Restriction: limit how your data is used.
  • Portability: request transfer of your data to another provider.
  • Objection: opt out of direct marketing or certain processing.
  • Withdraw consent: change your mind about marketing at any time.
  • Authorized agent: you may designate an authorized agent to make requests on your behalf. We may require proof of authorization and identity verification.

To exercise these rights, please contact us using the details below. We will respond to your data requests within one month.

If we decline your request, you may have the right to appeal our decision by contacting us again or lodging a complaint with your local data protection authority.

9. Cookies
We use cookies and similar technologies to make our site work smoothly, personalise content, and measure performance. These include essential cookies, performance tools, and marketing cookies. For more details and to manage your preferences, see our Cookie Policy.

10. Contact Us
If you have any questions, concerns, or requests about this Privacy Policy, please contact us:

Email: info@autumnandmay.com 

Telephone: +44 (0) 2082939361 

Address: Autumn and May, 9A Greenwich Market, London, SE10 9HZ

Or use our website contact form.

11. Complaints
If you are unhappy with how we handle your data, we encourage you to contact us first so we can resolve your concerns. You also have the right to complain to the UK Information Commissioner's Office (ICO). If you reside in the European Economic Area, you can find your local data protection authority.

12. Updates to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date at the top. We will provide notice of material changes as required by applicable law, including by email or prominent notice on our website.

Our Promise
At Autumn and May, we treat your personal data with transparency, care, and responsibility.

Last updated on January 29, 2025