Privacy policy

Privacy Policy

Last updated: 07 August 2026

Bervia Jewellery ("we", "us", "our") operates berviajewellery.co.uk. This policy explains what personal data we collect, why, and your rights over it. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Contact: info@berviajewellery.com

What we collect

When you place an order: your name, email address, delivery and billing address, phone number (if provided), and details of the items you purchase. Payment card details are processed securely by our payment providers (e.g. Shopify Payments, PayPal) — we never see or store your full card number.

When you browse the site: device and browser information, IP address, pages viewed, and how you arrived at our site, collected via cookies and similar technologies.

When you sign up to our mailing list: your email address and your marketing preferences.

When you leave a review: your name (as you choose to display it), your review content, and your order verification, handled through our reviews provider Judge.me.

When you contact us: your name, contact details, and the contents of your message.

Why we use it (lawful bases)

To fulfil your order — processing payment, delivering your items, sending order and dispatch confirmations. Lawful basis: performance of a contract.
To meet our legal obligations — keeping transaction records for tax and accounting. Lawful basis: legal obligation.
To send marketing emails — new arrivals, restocks and offers, only where you've subscribed. You can unsubscribe at any time using the link in any email. Lawful basis: consent.
To improve our store and prevent fraud — understanding how the site is used, and protecting our checkout. Lawful basis: legitimate interests.
To display customer reviews — collecting and publishing verified reviews. Lawful basis: consent.

Who we share it with

We share personal data only with service providers who help us run the store, under contracts that protect your data:

Shopify — our e-commerce platform, which hosts the store and processes orders
Payment providers — to process your payment securely
Delivery carriers (e.g. [Royal Mail / Evri / CARRIER]) — to deliver your order
Judge.me — to collect and display product reviews
Email marketing provider ([e.g. Shopify Email / Klaviyo / PROVIDER]) — to send our newsletter

Some providers (such as Shopify) may process data outside the UK. Where that happens, transfers are protected by safeguards recognised under UK law, such as adequacy decisions or the International Data Transfer Agreement / standard contractual clauses.

We never sell your personal data.

Cookies

We use cookies that are essential for the site to function (cart, checkout, security), and — with your consent where required — analytics and marketing cookies to understand site usage and measure campaigns. You can manage cookies through your browser settings [and our cookie banner, if installed].

How long we keep it

Order and transaction records: 6 years after the tax year of purchase, as required for HMRC purposes
Marketing data: until you unsubscribe or ask us to delete it
Enquiries: up to [12 months] after resolution
Reviews: until you ask for removal

Your rights

Under UK GDPR you have the right to:

Access a copy of the personal data we hold about you
Correct inaccurate data
Request deletion of your data (where we have no legal duty to keep it)
Object to or restrict certain processing, including direct marketing
Data portability
Withdraw consent at any time, where consent is the basis for processing

To exercise any of these rights, email info@berviajewellery.com. We'll respond within one month.

If you're unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.