Privacy Policy

Introduction

At Valdora Jewellery ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, submit an order, or interact with our services. We treat your data with the same care and precision we bring to every piece of jewellery we craft.

This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you are located in the European Economic Area, your rights are also protected under the EU GDPR. If you are located in the United Arab Emirates, your rights are additionally protected under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL). The UAE PDPL grants data subjects rights that are closely aligned with those under the UK and EU GDPR, including the right to access, rectify, and request deletion of your personal data. To exercise any of these rights, please contact us at privacy@valdorajewellery.com.

Information We Collect

How We Use Your Information

• Processing, fulfilling, and managing your orders and bespoke requests
• Contacting you to confirm order specifications, discuss customisation, and send payment links
• Coordinating shipping and delivery, including communicating with international couriers
• Processing refunds, cancellations, and warranty claims
• Providing customer support and responding to enquiries
• Sending order updates, tracking information, and delivery confirmations
• Sending promotional communications (only with your consent, and you may opt out at any time)
• Improving our website functionality and user experience
• Preventing fraud, verifying identity, and ensuring security
• Complying with legal and regulatory obligations

Order Data and Shipping

When you submit an order, we collect and process your personal and delivery information to fulfil your purchase. This includes sharing your name, delivery address, and contact number with our courier partners to facilitate shipping and delivery. For international orders, your information may be shared with customs authorities as required by law.

Your order data (including the products ordered, customisation specifications, and pricing) is retained for the duration of our lifetime warranty commitment, to enable us to service your piece and honour warranty claims.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With courier and shipping partners to fulfil and track your delivery
• With payment processors to securely handle transactions
• With customs and regulatory authorities for international shipments
• With our manufacturing and production partners to fulfil bespoke orders (only the specifications required)
• When required by law, legal process, or to protect our rights
• In connection with a business transaction (merger, acquisition) — you would be notified
• With your explicit consent

Data Retention

We retain your personal data for as long as necessary to provide our services, comply with legal obligations, and support our lifetime warranty commitments. Order records are typically retained for a minimum of 7 years for accounting and warranty purposes. You may request deletion of your data at any time, subject to our legal obligations and legitimate business interests.

Payment Data

Valdora Jewellery does not directly process or store payment card details. All payments are handled via secure, certified third-party payment processors. When you pay by Visa, Mastercard, or bank transfer:

• Card details are entered directly on your bank or payment provider's secure page — never on our servers
• We receive only a transaction confirmation and masked payment reference
• Payment links sent to you are encrypted and single-use
• Your payment method type (e.g. Visa/Mastercard) may be recorded alongside your order for record-keeping

This approach ensures that your financial data is protected by PCI-DSS compliant infrastructure at all times and is never accessible to Valdora staff.

Customer Due Diligence and Identity Verification

As part of our commitment to preventing fraud and complying with applicable financial regulations, Valdora Jewellery may request identity verification for certain transactions — particularly high-value orders and bespoke commissions. This may include a government-issued photo ID, proof of address, or confirmation of payment method ownership. This information is processed lawfully under Article 6(1)(f) of the UK GDPR (legitimate interests) and is used solely for the purpose of verifying your identity and preventing fraudulent transactions. It is not shared with third parties beyond what is strictly necessary for this purpose, and is retained only for as long as required by our legal and compliance obligations.

Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. All payment processing is handled by certified third-party providers and is never stored on our systems. Communications containing sensitive order details are handled securely.

Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete information
• Erasure — request deletion of your personal data ("right to be forgotten")
• Restriction — request that we limit the processing of your data
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests or for marketing
• Withdrawal of consent — withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at privacy@valdorajewellery.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

UAE residents may additionally contact the UAE Data Office (dataoffice.ae) to raise any concerns about how their personal data is handled.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your browsing experience, remember your preferences (such as items in your favourites), analyse website traffic, and improve our services. Strictly necessary cookies (such as cart and session storage) are required for the website to function. You can control optional cookie settings through your browser preferences, though this may affect some website functionality.

International Data Transfers

As we serve clients globally, your data may be transferred to and processed in countries outside the UK and EEA. Where this occurs, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your information in accordance with applicable data protection law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and updating the date above. Continued use of our website after changes constitutes acceptance of the updated policy.

Contact Us

For questions, concerns, or to exercise your data rights, please contact us: