Privacy Policy

GG JEWELLERY · UK

Last updated: 9 October 2026

Who is responsible for your information?

GG Jewellery is a UK-based jewellery business. The business contact and current launch status appear below. Contact gleamgrillz@gmail.com for privacy questions, rights requests or a complaint.

This website is a collection preview. Ordering, new email signups and customer accounts remain paused while the legal business details and email privacy setup are completed.

Information we use and why

• Browsing: our hosting services receive ordinary connection information, such as IP address, request time, browser information and requested URLs, to deliver and secure the website. Our legitimate interests are operating a reliable service and preventing abuse.
• Your basket: product, finish, size and quantity choices are stored in your browser to provide the basket you request. The Shopify storefront and checkout process the information needed for your requested basket and orders. Payment providers handle payment-card information.
• Email updates: when signups are available, we ask only for your email address and a separate, unchecked marketing choice. Klaviyo manages single opt-in subscriptions, consent records, welcome emails and unsubscribe requests. Our basis is your consent. A purchase, quote enquiry or account does not automatically subscribe you.
• Enquiries: we use the contact details and message you choose to send by email or WhatsApp to respond and, where applicable, take steps you request before a contract. Our legitimate interests cover general customer support and resolving complaints. Do not send card information, identity documents or medical information in an enquiry.
• Orders and accounts: Shopify handles account sign-in and, once ordering is available, checkout and order records. Name, contact and delivery information are needed to perform the order contract; financial records are kept where required by law. Payment providers handle payment information. Required information and final charges will be identified before payment.

Services receiving data

This website is hosted on Shopify, which provides storefront, accounts and checkout. A separate archived design preview is hosted using OpenAI Sites and Cloudflare. Klaviyo provides opted-in email marketing and receives standard network information when you submit its subscription request. Our existing Shopify–Klaviyo integration can synchronise customer and order information; its scope must be limited to the configured service purposes. Google/Gmail handles email enquiries, and WhatsApp/Meta handles messages you choose to send there. Delivery providers receive the information necessary for an agreed delivery when orders open.

Social links are ordinary links, not embedded feeds. Opening an external service makes a request to that service, which has its own privacy and cookie information. Our custom theme adds no social widgets, advertising pixels, session replay or independent analytics scripts. Shopify and app pixels are managed separately through Shopify Customer privacy and Customer events; their settings remain part of the launch review.

Marketing and tracking choices

Email marketing is optional. You can unsubscribe using the link in an email or contact us. Marketing automation is paused pending verification of the provider's email open/click tracking settings and treatment of the remaining pixel request; agreeing to emails is not agreement to behavioural tracking. The previous Resend email dispatcher is disabled. Earlier local signup records and unsubscribe links may still exist; new Klaviyo signups are not duplicated into that database.

Retention

Shopify manages cart, account and essential storefront storage. Durations depend on the Shopify feature and cookie in use; see our cookie policy and Shopify’s platform cookie information. We retain active subscription and consent records to manage the subscription; after withdrawal, we stop marketing and may retain a minimal suppression record to honour your choice. Enquiries are retained while needed to respond and resolve the matter. Order, accounting and dispute records are retained for applicable legal obligations and claims periods. Provider security logs and backups follow their service retention arrangements. Contact us for information about a particular record or to request deletion; we do not promise a deletion schedule that has not been implemented.

International processing and security

Some of these providers process information outside the UK. Transfers require an applicable UK adequacy decision or appropriate safeguards, such as approved contractual protections, where required. Contact us for details of the arrangement applying to your information. Provider contracts, transfer safeguards and retention settings are launch checks; this notice does not assert that an unverified arrangement has been completed. We use HTTPS, keep private credentials off the public website and restrict collection to the stated purposes. No system can guarantee absolute security.

Your rights

Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. We ordinarily respond to rights requests within one month; we will explain any permitted extension or identity check. We do not make solely automated decisions with legal or similarly significant effects on this website. Payment providers may carry out their own eligibility and fraud checks.

Privacy complaints

Email gleamgrillz@gmail.com with the subject “Privacy complaint” and enough detail to investigate. We will acknowledge your complaint within 30 days, investigate and explain the outcome without undue delay, and keep you informed. You may also complain to the Information Commissioner's Office (ICO). You do not have to waive your rights to contact us.

Changes

We will update this notice when the actual service or data use changes, and provide new information or obtain consent when required. See the cookie and storage policy for device storage.