Privacy Policy

Last Updated: October 2026

1. Introduction & Data Controller

I respect your privacy and am committed to protecting your personal data. This Privacy Policy explains how I collect, use, store, and safeguard your personal information when you visit iainsainsbury.com, make an inquiry, or commission a piece of fine jewellery.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, I, Iain Sainsbury, am the Data Controller responsible for your personal information.

2. Lawful Basis for Processing Data

I collect and process your personal information only when I have a lawful basis to do so under UK law:

  • Performance of a Contract: Processing is necessary to fulfill a bespoke commission, process an order, or take steps at your request before entering into a contract (e.g., preparing a design estimate or shipping a silver test prototype).

  • Legitimate Interests: Processing is necessary for my legitimate business interests, such as managing inquiries, improving website performance, preventing fraud, and maintaining bench records of past custom work.

  • Legal Obligation: Processing is required to comply with statutory UK laws, including tax and accounting requirements enforced by HMRC.

  • Consent: Where you have explicitly opted in to receive studio updates or marketing communications. You may withdraw consent at any time.

3. Information I Collect & How It Is Used

3.1 Consultation & Enquiry Data

When you submit an inquiry form or contact me regarding a commission, I collect your name, email address, phone number, location, and details regarding your design preferences (including sentimental details, stone requirements, or ancestral metal information).

  • Purpose: To communicate directly with you, develop design concepts, and coordinate studio or remote consultations.

3.2 Order & Delivery Data

When you purchase a piece or place a deposit on a bespoke commission, I collect your billing address, delivery address, and contact details.

  • Purpose: To fulfil your order, arrange insured dispatch via Royal Mail Special Delivery, and issue invoice receipts.

3.3 Payment Information

All financial transactions on iainsainsbury.com are processed through secure third-party payment gateways (Stripe, PayPal, or direct BACS transfer). I do not store or have access to your full credit card numbers or banking passwords.

3.4 Website Analytics & Technical Log Files

Like most websites, iainsainsbury.com automatically collects technical data when you browse the site. This includes your IP address, browser type, device details, date/time stamps, referring pages, and navigation paths.

  • Purpose: This information is anonymised or aggregated to analyse website traffic, maintain site security, and optimise user experience.

4. Third-Party Data Sharing

I do not sell, rent, or trade your personal information to third parties. I share your data only with trusted service providers who assist in operating my studio, subject to strict confidentiality and security standards:

  • Website Hosting & Platform Providers: My website host (Squarespace) processes technical log files and form submissions on secure servers.

  • Payment Processors: Stripe and PayPal handle secure payment transactions.

  • Postal & Courier Services: Royal Mail receives your name and shipping address solely for dispatching insured orders.

  • Professional & Accounting Services: HM Revenue & Customs (HMRC) and my qualified accountant access sales ledgers for legal compliance.

5. Cookies

iainsainsbury.com uses functional and analytical cookies to ensure the website operates smoothly and to understand how visitors interact with my content.

  • Essential Cookies: Required for basic website navigation, shopping cart functionality, and secure checkout.

  • Analytics Cookies: Help me measure visitor numbers and traffic sources to improve website navigation.

You can set your browser to refuse or block non-essential cookies at any time through your browser settings.

6. Data Retention

I retain your personal information only for as long as necessary to fulfil the purposes for which it was collected:

  • Accounting & Transaction Records: Required by UK tax law (HMRC) to be retained for 6 years following the end of the relevant tax year.

  • Bespoke Commission Files: Design notes, ring sizes, and material details are retained indefinitely as a service record for future resizing, repairs, or insurance valuations.

  • Enquiry Form Submissions: Unconverted inquiry records are routinely reviewed and securely deleted after 24 months.

7. Your Legal Rights Under UK GDPR

Under UK data protection law, you hold specific rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal information I hold about you.

  • Right to Rectification: You have the right to request that I correct any inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): You have the right to request that I delete your personal information, subject to statutory retention requirements (such as HMRC accounting records).

  • Right to Restrict or Object: You may object to the processing of your data or request that processing be restricted under certain conditions.

  • Right to Data Portability: You have the right to request the transfer of your data to another party in a structured format.

To exercise any of these rights, please contact me directly at enquiries@iainsainsbury.com.

8. Children's Privacy

My website and bespoke fine jewellery services are intended strictly for adults aged 18 and over. I do not knowingly collect personal identifiable information from anyone under the age of 18.

9. How to Lodge a Complaint

If you have any concerns about how I handle your personal data, please contact me first so I can resolve the matter directly.

If you remain unsatisfied, you have the right to lodge a formal complaint with the UK supervisory authority for data protection:

  • Information Commissioner’s Office (ICO)

10. Changes to This Privacy Policy

I may update this Privacy Policy occasionally to reflect operational changes or updates to UK legislation. Any revised version will be published on this page with an updated revision date.