Privacy policy

Katy Halliday Ltd, trading as Katy Halliday Fine Jewellery, is responsible for the personal information described in this policy. Contact us at hello@katyhalliday.com or +44 20 3026 1585. This policy explains how we use personal information when you browse our website, contact us, place an order or use our aftercare services.

Information we collect

We collect contact and delivery details, order and payment transaction information, account information, design and sizing preferences, correspondence and aftercare records. Payment details are handled through payment providers; we receive the information needed to process and reconcile transactions. We also receive technical and browsing information, such as IP address, device and browser details, pages visited and cookie preferences. Information comes from you, your use of our website and providers supporting payment, delivery, fraud prevention and store operation.

Contact, delivery and transaction information is needed to fulfil an order. Without it, we may be unable to accept or deliver your order. Marketing subscriptions are optional.

How and why we use information

Handle enquiries, prepare commissions, process orders and provide agreed services
Steps at your request before a contract and performance of a contract

Maintain accounting records and comply with legal requirements
Legal obligation

Prevent fraud, secure our systems, manage disputes and maintain proportionate aftercare records
Legitimate interests in protecting our business and customers and providing continuing support

Send subscribed marketing communications and use consent-requiring cookies
Consent

We balance our legitimate interests against your rights and interests. Marketing messages include an unsubscribe option; you can also contact us to withdraw consent. Withdrawal does not affect earlier lawful processing.

Service providers and sharing

We use Shopify to operate our store, Google Analytics to understand website use, and Klaviyo to manage subscribed email communications. We also use payment providers, delivery providers, customer messaging services, professional advisers and manufacturing or aftercare partners where needed. We share only the information relevant to their role. Information may also be disclosed where required by law or necessary to protect legal rights.

Provider information: Shopify, Google and Klaviyo.

Cookies and international processing

Our website uses cookies and similar technologies for store functionality and, where enabled, analytics and marketing. Consent-requiring technologies are subject to your cookie choices. You can change those choices through the website's privacy controls where available or contact us for assistance. Blocking essential technologies may affect store functions.

Our providers may process information outside the UK, including in the United States and Canada. Where a restricted international transfer takes place, an appropriate transfer mechanism is required, such as UK adequacy regulations or approved contractual safeguards. You can contact us for details and copies of applicable safeguards.

Retention and security

We retain information for as long as necessary for the purpose for which it was collected. Relevant considerations include accounting and tax requirements, unresolved complaints, legal claims and ongoing warranty or aftercare needs. Marketing records are retained while your subscription remains active; a limited suppression record may be retained to respect your unsubscribe request. We use appropriate organisational and technical measures to protect personal information.

Your rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability of your information. You may object to processing based on legitimate interests, and you have the right to object to direct marketing at any time. These rights have legal limitations; for example, we may need to retain accounting records despite an erasure request. Contact us to exercise your rights or raise a concern. You can also complain to the Information Commissioner's Office.

Where automated processing produces a decision with legal or similarly significant effects, additional protections may apply. Please contact us if you wish to question an order or fraud-screening outcome.

We may update this policy to reflect changes in our practices or legal requirements. The current version will be available on our website.