Jewellers Reviews

Privacy Policy

We believe privacy is a right, not a feature. This policy explains exactly what data we collect, why we collect it, and what you can do about it.

📅
Last updated June 2026 — This policy applies to all data collected through jewellersreviews.com and any related services
🏢
Data controller Jewellers Reviews · jewellersreviews.com · For all data enquiries: contact@jewellersreviews.com
👁️
Right to access
Request a copy of all data we hold about you
✏️
Right to rectify
Correct inaccurate or incomplete personal data
🗑️
Right to erasure
Request deletion of your personal data
🚫
Right to object
Opt out of processing based on legitimate interest
Section 01

Who we are

Jewellers Reviews operates the website at jewellersreviews.com — a consumer review platform for jewellery businesses. We are the data controller for all personal data collected through this website and our associated services.

This Privacy Policy applies to all visitors, registered users, review submitters, and business owners who interact with our platform. It explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

💡 If you are based in the European Union, the EU GDPR also applies to our processing of your data. Our data protection standards are consistent across both frameworks.
Section 02

What data we collect

We only collect data that is necessary for the purposes described in this policy. Here is a complete breakdown of what we may collect depending on how you use our platform.

Data you give us directly

  • Account registration: name, email address, and password when you create an account
  • Review submission: your display name, email address, star rating, written review content, date of purchase, and any photos you choose to upload
  • Business claim: business name, your name, your role at the business, business email, phone number, and proof of association
  • Business submission: business name, website, city, country, category, and your contact email
  • Contact forms: name, email address, and the content of your message
  • Newsletter signup: email address and, optionally, name

Data we collect automatically

  • Usage data: pages visited, time on site, referring URL, search queries used on our platform
  • Device data: browser type and version, operating system, screen resolution, device type
  • Technical data: IP address, approximate geographic location (country/city level), session identifiers
  • Cookies and similar technologies: see Section 08 for full details

Data we do not collect

  • We do not collect payment card details — all transactions are handled by third-party payment processors and we never see your card data
  • We do not collect special category data (health, religion, ethnicity, political views) unless you voluntarily include it in a review — which we strongly discourage
  • We do not collect data on children under 16 (see Section 11)
Section 03

How we collect your data

  • Directly from you — when you register, submit a review, claim a business, fill a contact form, or sign up for our newsletter
  • Automatically — through cookies, server logs, and analytics tools as you browse our website
  • From third parties — if you log in via a social account (Google), we receive your name and email from that provider subject to your settings with them
  • From public sources — business information (name, address, website) may be sourced from publicly available directories to populate our business listings
Section 04 & 05

Why we use your data & our legal basis

We process your personal data only where we have a valid legal basis under UK GDPR. The table below explains each purpose, what data is used, and the legal basis we rely on.

Purpose Data used Legal basis
Creating and managing your account Name, email, password Contract
Publishing your review Display name, review content, rating, photos Contract
Verifying review authenticity & fraud prevention Email, IP address, device fingerprint Legitimate interest
Processing a business claim Name, email, business details, proof documents Contract
Sending transactional emails (review confirmed, claim approved) Email address Contract
Sending our newsletter & platform updates Email address, name Consent
Responding to your enquiries and complaints Name, email, message content Legitimate interest
Analysing site usage to improve our platform Usage data, device data (anonymised) Legitimate interest
Displaying targeted advertising Cookie data, approximate location Consent
Complying with legal obligations Any data required by law Legal obligation
Enforcing our Terms of Service and Review Guidelines Account data, review data, IP address Legitimate interest
⚖️ Where we rely on legitimate interest, we have conducted a balancing test to ensure our interests do not override your rights and freedoms. You have the right to object to processing based on legitimate interest — see Section 10.
Section 06

Who we share your data with

We do not sell your personal data. We do not share it with advertisers for them to contact you directly. We share data only in the following limited circumstances.

  • Service providers: We use trusted third-party providers to operate our platform — including web hosting, email delivery, analytics, and fraud detection. These providers act as data processors and are contractually bound to process your data only on our instructions and to the same security standards we apply
  • Analytics providers: We use Google Analytics (with IP anonymisation enabled) and similar tools to understand how our platform is used. These providers receive anonymised usage data
  • Payment processors: If any paid services are introduced, payments are handled by PCI-DSS compliant processors. We never receive or store your payment card data
  • Legal requirements: We may disclose personal data where required to do so by law, court order, or at the request of a regulatory or law enforcement authority
  • Business transfers: If Jewellers Reviews is acquired, merged, or sold, your data may be transferred as part of that transaction. We will notify you in advance of any such transfer and your rights under this policy will continue to apply
  • With your consent: We will share data in any other way only with your explicit consent
🔒 All third-party data processors are vetted for security practices and bound by data processing agreements. We do not use processors located outside the UK or EEA without appropriate safeguards in place.
Section 07

How long we keep your data

We retain personal data only for as long as is necessary for the purpose it was collected, or as required by law. Below are our standard retention periods.

Data type Retention period Reason
Account data Duration of account + 12 months Reactivation window; then deleted
Published reviews Indefinitely while platform operates Public record; deleted on verified request
Removed / rejected reviews 6 months after removal Moderation record keeping
Business claim data Duration of claim + 24 months Dispute resolution period
Contact form submissions 24 months Customer service records
Server logs & IP data 90 days Security monitoring
Analytics data (anonymised) 26 months Platform improvement
Marketing email consents Until withdrawn + 36 months Consent audit trail
🗑️ To request early deletion of your data, see your rights in Section 10 or email contact@jewellersreviews.com. Some data may be retained beyond standard periods where required by law or for legitimate legal defence.
Section 08

Cookies & tracking technologies

We use cookies and similar technologies on our website. A cookie is a small text file stored on your device when you visit a website. We use three categories of cookies.

🍪 You can manage your cookie preferences at any time using our cookie settings panel. You can also control cookies through your browser settings — note that disabling all cookies may affect how our website functions. For more detail, see our Cookie Policy.
Section 09

International data transfers

Some of our service providers operate outside the UK and EEA — for example, cloud hosting providers or analytics platforms based in the United States. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO) or the European Commission
  • Transfers to countries with an adequacy decision from the UK Secretary of State or the European Commission
  • Where applicable, the UK International Data Transfer Agreement (IDTA)
🌐 You can request details of the specific safeguards in place for any international transfer by contacting contact@jewellersreviews.com.
Section 10

Your rights under UK GDPR

You have the following rights regarding your personal data. You can exercise any of these rights at any time by contacting us at contact@jewellersreviews.com. We will respond within 30 days, and we will not charge you for making a request.

👁️

Right of access

Request a copy of all personal data we hold about you. We will provide this in a clear, structured format within 30 days.

✏️

Right to rectification

If your data is inaccurate or incomplete, you can ask us to correct it. We will do so promptly and notify any third parties where relevant.

🗑️

Right to erasure

Ask us to delete your personal data. This right applies in certain circumstances — for example, where the data is no longer needed or consent is withdrawn. Some data may be retained for legal reasons.

⏸️

Right to restriction

Ask us to pause processing of your data while a dispute or objection is resolved — for example, while you contest the accuracy of data we hold.

📦

Right to portability

Receive your data in a machine-readable format (JSON or CSV) so you can transfer it to another service. Applies to data processed on the basis of consent or contract.

🚫

Right to object

Object to processing of your data based on legitimate interest, including direct marketing. We will stop unless we can demonstrate compelling grounds that override your rights.

🤖

Rights re: automated decisions

We do not make solely automated decisions that produce significant legal effects. If this changes, you will have the right to request human review of any such decision.

↩️

Right to withdraw consent

Where processing is based on consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of processing before the withdrawal.

⏱️ We will verify your identity before acting on any request. We aim to respond within 30 days — and always within the statutory 30-day limit. Complex requests may take up to 90 days; we will notify you if this applies. All rights requests are free of charge.
Section 11

Children's privacy

Jewellers Reviews is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately at contact@jewellersreviews.com and we will delete that data as quickly as possible.

Where applicable local law sets the age of digital consent higher than 16, we apply that higher threshold for users in those jurisdictions.

Section 12

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make changes, we will update the "Last updated" date at the top of this page.

For significant changes — particularly those that affect how we use your data in ways you would not reasonably expect — we will notify registered users by email at least 14 days before the change takes effect. Your continued use of our platform after that date constitutes acceptance of the updated policy.

🔔 We recommend reviewing this policy periodically. Previous versions of this policy are available on request — email contact@jewellersreviews.com with the date of the version you need.
Section 13

Contact & complaints

For any questions, requests, or concerns relating to your personal data or this Privacy Policy, please get in touch using the contacts below.

📮
All privacy enquiries
Data access, erasure, portability requests, corrections, complaints, legal notices, and general questions about this policy
🏛️
Supervisory authority
If you are unsatisfied with our response to a privacy concern, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
⏱️ We aim to respond to all privacy enquiries within 5 working days and all formal data subject requests within the statutory 30-day period. We will acknowledge your request immediately upon receipt.

Questions about your privacy?

Read our related policies or contact our privacy team directly.