Privacy policy

Privacy Policy

Diane Kordas Jewellery
Last updated: 14 July 2026

This Privacy Policy describes how Diane Kordas Jewellery collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from dianekordasjewellery.com, or otherwise communicate with us regarding our services. For the purpose of this Privacy Policy, "you" means you as a user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. If you have any questions, see the Contact section at the end of this policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the date above, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us.

Information We Collect Directly from You

  • Contact details, including your name, address, phone number, and email
  • Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number
  • Account information, including your username, password, and other information used for account security
  • Customer support information, including anything you choose to include in communications with us, for example when contacting us with a query

Some features of the Services may require you to provide certain information about yourself. You may elect not to provide this information, but doing so may prevent you from using or accessing those features.

Information We Collect About Your Usage

We automatically collect certain information about your interaction with the Services using cookies, pixels, and similar technologies. Usage Data may include device information, browser information, network connection information, your IP address, and other information about your interaction with the Services.

Information We Obtain from Third Parties

We may obtain information about you from third parties who support our business, including:

  • Shopify, which powers and hosts the Site and processes orders
  • Our payment processors, including Shopify Payments and the card and wallet providers accepted at checkout (American Express, Apple Pay, Diners Club, Discover, Maestro, Mastercard, Shop Pay, Union Pay, and Visa), who collect payment information to process your order
  • Klaviyo, our email marketing platform, which tracks engagement with marketing communications you have opted in to receive
  • List verification providers, such as ZeroBounce, engaged periodically under a data processing agreement to remove invalid or undeliverable addresses from our mailing list
  • HED Studio, our website development agency, who provide technical support for the Site

Any information we obtain from third parties is treated in accordance with this Privacy Policy.

How We Use Your Personal Information

  • Providing Products and Services: to process payments, fulfil orders, send order and account notifications, arrange shipping, and facilitate returns and exchanges, in order to perform our contract with you
  • Marketing and Advertising: to send marketing, advertising, and promotional communications by email where you have opted in, and to better tailor the Services to your preferences. Where you are an EEA or UK resident, marketing communications sent with your consent rely on that consent as the legal basis; where sent on the basis of legitimate interest, this is under Art. 6(1)(f) GDPR
  • Security and Fraud Prevention: to detect, investigate, and take action regarding possible fraudulent or malicious activity, in our legitimate interest under Art. 6(1)(f) GDPR
  • Communicating with You and Service Improvement: to provide customer support and improve our Services, in our legitimate interest under Art. 6(1)(f) GDPR

Cookies

Like many websites, we use cookies on our Site to power and improve the Site and Services, to remember your preferences, and to run analytics. For information about the cookies used to power our Shopify store, see shopify.com/legal/cookies. When you first visit the Site from the UK or EEA, you will be shown a cookie banner allowing you to accept or manage non-essential cookies; strictly necessary cookies (for example, those required for checkout) are always active.

Most browsers accept cookies by default, but you can set your browser to remove or reject them; doing so may affect certain features of the Site. Where Global Privacy Control (GPC) is enabled in your browser, we will treat this as a valid request to opt out of the sharing of your information for targeted advertising purposes, where applicable.

How We Disclose Personal Information

We may disclose your personal information to third parties for the purposes set out in this policy, including:

  • Vendors and third parties who perform services on our behalf (Shopify, Klaviyo, payment processors, couriers, list verification providers, HED Studio)
  • Business and marketing partners, where relevant to advertising and promotional activities
  • Professional advisers, regulators, and law enforcement, where required by law
  • A successor entity, in connection with a business transaction such as a merger or sale of assets

We do not sell your personal information for money. If any advertising pixels (for example, Meta or Google Ads) are active on the Site, certain identifiers and usage data may constitute a "sale" or "sharing" under California law; this section will be completed once the Site's tracking setup has been audited.

Third Party Websites and Links

Our Site may link to websites or platforms operated by third parties. We are not responsible for the privacy or security practices of such sites, and recommend reviewing their own policies.

Children's Data

The Services are not intended for use by children, and we do not knowingly collect personal information from anyone under the age of 16. If you are the parent or guardian of a child who has provided us with personal information, please contact us to request its deletion.

Security and Retention of Your Information

No security measures are perfect or impenetrable, and we cannot guarantee absolute security. We recommend that you do not use insecure channels to communicate sensitive information to us. We retain personal information for as long as necessary to maintain your account, provide the Services, comply with legal obligations, and resolve disputes. Order and transaction records are retained for 6 years from the end of the relevant accounting period, in line with HMRC record-keeping requirements for VAT and Corporation Tax and the limitation period for contract claims under the Limitation Act 1980. Marketing data is retained until you unsubscribe or until periodic list cleaning removes inactive or invalid contacts.

Your Rights

  • Right to Access / Know: request access to personal information we hold about you
  • Right to Delete: request that we delete personal information we hold about you
  • Right to Correct: request that we correct inaccurate personal information
  • Right of Portability: request a copy of your personal information in a portable format
  • Right to Opt Out of Sale, Sharing, or Targeted Advertising: direct us not to sell or share your personal information, including via the Global Privacy Control signal
  • Right to Restriction of Processing: ask us to stop or restrict our processing of your personal information
  • Right to Withdraw Consent: withdraw consent at any time where processing is based on consent
  • Right to Appeal: appeal our decision if we decline to process your request, by replying directly to our response
  • Managing Communication Preferences: unsubscribe from marketing emails at any time via the link included in each email

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before responding to a request, and you may designate an authorised agent to act on your behalf, subject to verification.

Complaints

If you have concerns about how we process your personal information, please contact us using the details below. If you are not satisfied with our response, you may lodge a complaint with your local data protection authority — in the UK, this is the Information Commissioner's Office (ICO), ico.org.uk.

International Users

We may transfer, store, and process your personal information outside the country in which you live, including in the United States, where our service providers such as Shopify and Klaviyo are based. Where we transfer personal information out of the UK or EEA, we rely on recognised transfer mechanisms such as the UK and EU Standard Contractual Clauses, or an equivalent adequacy decision.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please contact us at:

customercare@dianekordasjewellery.com

Diane Kordas Jewellery Ltd
12 Montpelier Square, London, SW7 1JU

For the purpose of applicable data protection laws, and unless stated otherwise, we are the data controller of your personal information.