Privacy Policy

Privacy Policy

SECTION 1 - ABOUT

Your privacy is important to us at Eloree Jewellery, a trading name of Forge&Lumber Ltd.

We respect and uphold the confidentiality of information and the privacy of our visitors and customers. This Privacy Policy provides you with information on what kind of information we collect and the purpose for which we collect it. Your continued use of our website constitutes your acknowledgement and understanding of, and agreement with, our Terms and Conditions (available at eloreejewellery.com/pages/terms-conditions) and this Privacy Policy.

Data Controller Details:

  • Company: Forge&Lumber Ltd (trading as Eloree Jewellery)
  • Company Number: 14866867
  • VAT Number: GB467291855
  • Address: Forge & Lumber, Suite 13 The Granary, Waverley Lane, GU9 8BB, United Kingdom
  • Contact: info@eloreejewellery.com

SECTION 2 – PURPOSE

We may use information from the data we collected, our interactions with you and from certain third parties, to help us achieve our goal of providing the highest quality products and services. We process your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

SECTION 3 – PAYMENT

We are committed to confidentiality of your information.

We accept payment using Credit/Debit Cards, Apple Pay, Google Pay, PayPal, and Klarna. (Visa, Mastercard, American Express, Discover).

All transactions are done securely via our payment gateway. We do not have any access to any Credit or Debit Card information.

The transfer of the purchase details from our site to our payment gateways are encapsulated using an encrypted and digitally-signed protocol. This uses a secure combination of standard methods to ensure that the information passed is secure and tamper-proof.

For Klarna payments, additional data may be shared with Klarna for credit assessment purposes. Please refer to Klarna's privacy policy for how they handle your data.

SECTION 4 – DATA COLLECTION

What Data We Collect We will collect your data when you join our mailing list and when you make a purchase with us. When you make a purchase on the Site, as part of the buying and selling process, you may be requested to provide personal data such as, but not limited to, the following:

  • Full Name
  • Address(es)
  • Date of birth (if required for age verification)
  • Contact details, including telephone number or email address
  • Payment information (processed securely by our payment providers)

We may also collect your data through your interactions with our website to improve our products and services.

Legal Basis for Processing We process your personal data on the following legal bases:

  • Contract performance: To fulfil orders and provide our services
  • Legitimate interests: To improve our website and services, prevent fraud, advertising and marketing
  • Consent: For marketing communications and targeted advertising (where you have opted in)
  • Legal obligation: To comply with accounting and tax requirements

SECTION 5 – USAGE OF DATA

Your data will enable us and our processors to fulfil your order and to notify you about important functionality changes and for statistical or survey purposes to improve this website and our services to you. We may also send you from time to time (by email) information about products and services and details of promotions and special offers from Eloree Jewellery.

Advertising and Marketing We may use your personal data for advertising and marketing purposes, including:

  • Creating custom audiences for targeted advertising on social media platforms (such as Google, Meta/Facebook, TikTok, and other social media platforms)
  • Showing you relevant advertisements based on your interests and purchase history
  • Measuring the effectiveness of our advertising campaigns
  • Creating lookalike audiences to find similar potential customers

This may involve sharing hashed or pseudonymised versions of your data with advertising platforms. You can opt out of targeted advertising by:

  • Adjusting your cookie preferences on our website
  • Managing your advertising preferences directly with the advertising platforms
  • Contacting us at info@eloreejewellery.com

Marketing Communications We will only send you marketing communications if you have given us your consent to do so. You can withdraw your consent at any time by:

  • Clicking the unsubscribe link in any marketing email
  • Contacting us at info@eloreejewellery.com
  • Managing your preferences in your account settings

If you do not wish to be contacted for marketing purposes, please contact us at info@eloreejewellery.com.

SECTION 6 – DATA RETENTION

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

  • Order and customer data: 7 years (for accounting and tax purposes)
  • Marketing data: Until you withdraw consent or we determine it's no longer needed
  • Website analytics: Up to 26 months

SECTION 7 – YOUR RIGHTS

Under the UK GDPR and Data Protection Act 2018, you have the following rights:

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Ask us to correct any inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data in certain circumstances
  • Right to restrict processing: Ask us to limit how we use your data
  • Right to data portability: Request your data in a portable format
  • Right to object: Object to certain types of processing
  • Right to withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us at info@eloreejewellery.com. We will respond to your request within one month.

If you are not satisfied with how we handle your request, you have the right to complain to the Information Commissioner's Office (ICO). Visit ico.org.uk for more information.

SECTION 8 – SECURITY

We are committed to protecting your privacy. To protect your personal information, we take reasonable precautions to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed.

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Regular security assessments
  • Access controls and staff training
  • Secure payment processing

SECTION 9 – DISCLOSURE

We may share your personal information in the following circumstances:

  • Service providers: We work with third-party service providers who help us operate our business (e.g., payment processors, shipping companies, email service providers)
  • Legal requirements: We may disclose your personal information if we are required by law to do so or if you violate our Terms & Conditions
  • Business transfers: In the event of a merger, acquisition, or sale of assets

We ensure that any third parties we work with have appropriate safeguards in place to protect your data.

SECTION 10 - COOKIES

When you visit our website, we may assign your computer one or more "cookies." By accessing our website, you agree that we can place cookies on your device. A cookie is a small text file that contains information that can later be read by us to facilitate your access to our website, gather statistical data, and personalise your online experience.

Types of Cookies We Use:

  • Essential cookies: Necessary for the website to function properly
  • Analytics cookies: Help us understand how visitors use our website
  • Marketing cookies: Used to show you relevant advertisements
  • Advertising cookies: Used for targeted advertising on social media platforms and other websites

We currently use cookies on our website for purposes including, but not limited to, detecting your web browser's multimedia capabilities, tracking promotional advertisements that we have displayed to you, providing a unique identifier to your computer so that we can generate statistics regarding website usage, and creating audiences for targeted advertising on social media platforms.

Most browsers automatically accept cookies, but you can modify your browser setting to decline cookies. Generally, you can remove these cookies by following directions provided in your Internet browser's "help" file. If you choose not to allow us to place a cookie on your computer, you may be restricted from some services and some of the interactive features offered on our websites may be similarly restricted or rendered inoperable.

For more detailed information about cookies and how to manage them, visit aboutcookies.org.

SECTION 11 – LINKS TO THIRD PARTY SITES

In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Once you leave our store's website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website's Terms of Service.

Third-Party Services We Use:

  • Payment processors (PayPal, Stripe, Klarna)
  • Shipping providers (Royal Mail)
  • Email service providers
  • Website analytics (Google Analytics)
  • Advertising platforms (Google Ads, Meta/Facebook, TikTok, and other social media advertising platforms)

SECTION 12 – INTERNATIONAL TRANSFERS

We primarily process data within the UK. However, some of our service providers may be located outside the UK. Where we transfer personal data outside the UK, we ensure adequate safeguards are in place, such as:

  • Adequacy decisions by the UK Government
  • Standard contractual clauses approved by the UK authorities
  • Certification schemes or codes of conduct

SECTION 13 – CHILDREN'S PRIVACY

Our website and services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at info@eloreejewellery.com.

SECTION 14 – CHANGES TO POLICY

We reserve the right to modify or change this Privacy Policy at any time. If we make material changes to the Privacy Policy, we will post any changes on this page and update the "Last Updated" date below. We encourage you to review this page periodically to understand our policy regarding the collection and use of your personal data.

For significant changes that may affect your rights, we will notify you by email or through a prominent notice on our website.

SECTION 15 – CONTACT US

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us:

Email: info@eloreejewellery.com Post: Forge & Lumber, Suite 13 The Granary, Waverley Lane, GU9 8BB, United Kingdom

Data Protection Officer: For data protection enquiries, please email info@eloreejewellery.com with "Data Protection" in the subject line.

Last Updated: 23/06/25