The Carat Club Privacy Policy

Last updated: 9th September 2026

This Privacy Policy explains how The Carat Club (“we”, “us” or “our”) collects, uses, stores and shares your personal information when you visit our website, purchase from us, use our services or otherwise communicate with us.

We are committed to protecting your privacy and handling your personal information responsibly and in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

Please read this Privacy Policy carefully to understand how we handle your personal information.

1. Personal Information We Collect

The personal information we collect depends on how you interact with us and may include:

• your name, billing address and delivery address;
  
• your email address and telephone number;
  
• order and purchase information;
  
• payment and transaction information;
  
• account information, where applicable;
  
• products and pages you view or interact with;
  
• information you provide when contacting us or making an enquiry;
  
• information relating to your product, stone or bespoke jewellery requirements;
  
• marketing preferences and information about your interaction with our communications; and
  
• technical information such as your IP address, browser, device information and information about how you interact with our website.
  

Payment information may be collected and processed directly by our payment providers. We do not need to receive or store your complete payment card details in order to process your purchase.

2. How We Collect Your Information

We may collect personal information:

• directly from you when you place an order, create an account, contact us, subscribe to marketing or provide information in connection with an enquiry or bespoke order;
  
• automatically when you browse or interact with our website, including through cookies and similar technologies;
  
• from service providers that support our website, payments, marketing, advertising, analytics, communications and order fulfilment; and
  
• from suppliers and other third parties where necessary to source or fulfil products and provide our services.
  

3. How We Use Your Personal Information

We may use your personal information to:

• process and fulfil your orders;
  
• take and manage payments;
  
• arrange delivery;
  
• provide order confirmations, delivery updates and other transactional communications;
  
• source products requested by you;
  
• communicate with you regarding products, enquiries and bespoke or custom-made jewellery;
  
• provide customer service;
  
• manage returns, refunds and other after-sales services;
  
• maintain, operate and improve our website and services;
  
• prevent fraud and protect the security of our website and business;
  
• comply with legal and regulatory obligations;
  
• send marketing communications where permitted;
  
• measure the effectiveness of our advertising and marketing; and
  
• understand how customers use our website and improve their experience.
  

4. Our Legal Bases for Using Your Information

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may process your personal information because:

• it is necessary to perform a contract with you or take steps at your request before entering into a contract;
  
• it is necessary for us to comply with a legal obligation;
  
• it is necessary for our legitimate interests, provided those interests are not overridden by your rights and interests; or
  
• you have given us your consent.
  

Our legitimate interests may include operating and improving our business, providing customer service, preventing fraud, understanding how our website is used and promoting our products and services where permitted by law.

Where we rely on consent, you may withdraw your consent at any time.

5. Orders, Payments & Delivery

When you place an order, we use the information you provide to process your purchase, take payment, communicate with you and arrange delivery.

We may share relevant information with payment providers, delivery companies, suppliers and fulfilment partners where necessary to complete your order.

We only provide the information reasonably necessary for the relevant service.

Some products may be sourced or fulfilled with assistance from third-party suppliers. Where this occurs, relevant order information may be shared where necessary to source, secure or fulfil your purchase.

6. Marketing Communications

Where you have subscribed to marketing communications, or where we are otherwise legally permitted to contact you, we may send you information about our products, services, promotions and other relevant updates.

We may use third-party marketing platforms to manage and send these communications and to understand how customers interact with them.

You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails.

Unsubscribing from marketing does not prevent us from sending necessary communications relating to an order, payment, delivery or customer service matter.

7. Cookies, Analytics & Advertising

Our website uses cookies and similar technologies to operate the website, remember preferences, understand how visitors use our website, measure performance and support our advertising and marketing activities.

Some cookies are necessary for our website to function correctly. Other cookies may be used for analytics, advertising and performance measurement.

Where required by law, non-essential cookies and similar technologies will only be used with your consent.

You can manage your cookie preferences using the cookie or privacy controls available on our website. You may also be able to manage cookies through your browser settings.

8. How We Share Personal Information

We may share personal information with trusted third parties where reasonably necessary to operate our business and provide our services.

These may include:

• website and e-commerce service providers;
  
• payment processors;
  
• delivery and postal providers;
  
• product suppliers and fulfilment partners;
  
• marketing and communications providers;
  
• analytics and advertising providers;
  
• IT, hosting and technology providers;
  
• 
  professional advisers where necessary; and
  
• government, regulatory or law-enforcement authorities where we are legally required to do so.
  

We do not sell your personal information.

Where third parties process personal information on our behalf, we expect them to handle that information appropriately and in accordance with applicable data protection requirements.

9. Communications

If you contact us by email, messaging service, contact form, social media or another communication method, we may collect and use the information you provide to respond to your enquiry and provide customer service.

This may include information relating to products you are interested in, stone specifications, budgets, bespoke jewellery requirements, existing orders or other enquiries.

Third-party communication platforms may process information in accordance with their own privacy policies.

Please avoid sending unnecessary sensitive or confidential information through third-party messaging services.

10. International Transfers

Some of the service providers, technology providers or suppliers we use may process or store personal information outside the United Kingdom.

Where personal information is transferred internationally, we take appropriate steps to ensure that the transfer is made in accordance with applicable UK data protection law.

Where required, this may include using recognised adequacy arrangements or approved contractual safeguards.

11. How Long We Keep Your Information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

This may include keeping appropriate records for orders, customer service, accounting, tax, legal obligations, fraud prevention and resolving disputes.

The appropriate retention period will depend on the type of information and the reason we hold it.

When personal information is no longer required, we will delete or anonymise it where appropriate.

12. Security

We take reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure or alteration.

However, no method of transmitting or storing information electronically is completely secure and we cannot guarantee absolute security.

If you have an account with us, you are responsible for keeping your login details and password confidential.

13. Your Data Protection Rights

Under UK data protection law, depending on the circumstances, you may have the right to:

• request access to the personal information we hold about you;
  
• request correction of inaccurate or incomplete personal information;
  
• request deletion of your personal information;
  
• request restriction of how we process your personal information;
  
• object to certain processing, including direct marketing;
  
• request a copy or transfer of certain personal information in a portable format; and
  
• withdraw consent where we rely on your consent to process your information.
  

These rights are not absolute and may be subject to exemptions or conditions under applicable law.

To exercise any of these rights, please contact us at info@thecaratclub.co.uk.

We may need to verify your identity before completing your request.

14. Children's Privacy

Our website and services are not specifically intended for children and we do not knowingly collect personal information from children where doing so would be unlawful.

If you believe that a child has provided us with personal information inappropriately, please contact us.

15. Third-Party Websites & Services

Our website may contain links to websites, platforms or services operated by third parties.

We are not responsible for the privacy practices, security or content of independent third-party websites or services.

If you follow a link to another website or choose to use a third-party service, we recommend reviewing its privacy policy.

16. Your Right to Complain

If you have concerns about how we collect or use your personal information, please contact us so that we have the opportunity to address your concerns.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technology, legal obligations or the way we process personal information.

When we make changes, we will update the “Last updated” date at the top of this policy.

18. Contact Us

If you have any questions about this Privacy Policy, how we use your personal information or would like to exercise your data protection rights, please contact us at:

The Carat Club

Email: info@thecaratclub.co.uk