We want to let you know that your privacy and how we store your information is really important to us at TheCharmworks. We don’t want to send you stuff if you don’t want to hear from us - it comes across as a bit desperate!
We know privacy policies can be long and boring, but we’ve done our best to make it as clear and easy to understand as possible.
If you’re not up for reading the whole thing (because who has the time, right?) , this is the short version of what it says:
Big on detail? Read on...
All credit card transactions on our website are secured by industry standard encryption. You will see the green padlock in your browser whenever you are entering your card details. All credit card transactions are processed by Braintree, a PayPal company, on behalf of jewellerybox.
The information we collect via this website:
We are a registered Data Controller, and any personal information we collect from this website will be used in accordance with the General Data Protection Regulation (GDPR) and other applicable laws. The details we collect will be used by us and our third party contractors:
On occasion, and only for our own administrative functions, your personal data may be processed outside of the EEA by our third party contractors. By registering an account with us, contacting us by email, our contact form, through live support, or by placing an order with us, you consent to the transfer of your personal data outside of the EEA where it may be processed on servers outside of the EEA, and by our third party contractors.
Royal Mail is our chosen carrier in the UK. We also use a number of other couriers and international carriers with whom, together with the Royal Mail, we share your name and address and (if relevant), your phone number so that your Charmworks parcel can be delivered in a timely manner. None of our carriers are permitted to share your data, or use your personal data for any purposes other than for the safe delivery of your goods.
When you are logged in, or create an account on our website for the first time, you will be assigned a unique user ID. This is an anonymous string of numbers and does not contain personal information such as your name or email address. We provide this unique string of numbers to Google every time you log in to your account. This allows Google to add you to an anonymous group of 100+ browsers to which we may serve relevant adverts to, based on your browsing behaviour and purchase history. In practice this means that if you view our website on one browser, or on one device, and then later you are searching for products on another device, you will be able to find relevant Charmworks products more quickly and easily in the search results.
We are registered for VAT in a number of jurisdictions throughout the EU. We use a number of VAT agents, including ITR Service and Simply VAT to process quarterly and monthly VAT returns in a number of jurisdictions. Depending upon your country of residence, these VAT agents, together with the relevant tax authorities are passed your name, address, the value of your order and the tax charged. This information is provided in an encrypted form, and maintained on record by these agents for the purposes of filing accurate tax returns only.
In order to provide customers with the best service possible, we outsource some back office and customer service functions. This means that when our office in the UK is closed, we can still provide replies to emails so we can answer any queries you may have as quickly as possible. Your order data is available to our back office provider to allow them to give the best support and speedy processing of your order. This is information is accessed on an ad hoc basis over a secure connection.
Our IT infrastructure is located in Europe and managed outside it. The developers we use have been working with us since we started and have access to the website code and database solely to make improvements to our site, keep it safe and secure and debug issues.
We use MailChimp as our preferred third party email marketing provider. We provide MailChimp with your name, your email address, and your previous purchase and browsing behaviour. This allows us to ensure that you are served emails relevant to the type of products you have shown an interest in. MailChimp is not permitted to pass these details on to any other business, and you will not receive any marketing emails from companies other than Jewellerybox because of your relationship with Jewellerybox. All of our emails contain an unsubscribe button. Should you wish to unsubscribe from all future marketing emails at any time, you can do so instantly.
If you are logged in to Facebook and you visit our website, Facebook will be able to see what pages on our website you have visited. Facebook then aggregates the data about who has visited what pages on our website, and you may be served content on Facebook relevant to the type of products you have shown an interest in. For customers who have registered an email address with Jewellerybox, we may share this information with Facebook. Facebook does not share your profile with us, or tell us whether or not you have a Facebook account. However, based on the email addresses we provide, Facebook may add your Facebook profile to an anonymous list of 100+ profiles which may collectively be served content specific to Jewellerybox. Facebook will not use the emails we provide to allow other 3rd parties to market products to you.
We want to put you in control of your data and privacy. We now have a data control panel where you can control the data we store about you. Please login to your account where you can view the options available and update your preferences.
In this portal you can:
You can also ask us to update or remove your personal information by clicking on the contact us link or by writing to us at our customer services address below. However, please note that we may need to keep some personal data in order to process orders or to comply with customer service or after sale obligations.
You also have the right to request a copy of any personal information we hold about you. To do this, simply write to us at the following address:
151 - 161 Tunnel Avenue
London, SE10 0PW
We keep order and customer data to comply with tax and accounting law in the various jurisdictions we operate. However, annually we remove personal data from accounts and the orders linked to those accounts that have been inactive for 4 years.
You can at any time request account deletion through the ‘Your Data’ section of our website.