Privacy policy

Who this notice covers

My Trove Jewels Ltd, company number 16538398, registered in England and Wales, is the controller for the personal information it processes through this store and its own customer and booking services. Our address is Unit 36, Orbital 25 Business Park, Dwight Road, Watford, WD18 9DA, United Kingdom.

The My Trove Jewels brand intellectual property is owned by Health and Vitality Bytes Ltd. Brand ownership alone does not make that company the seller of this store’s orders or give it unrestricted rights to customer information. A separately contracted service may identify a different controller in its own notice.

This notice explains our practices. Reading it or using the site is not, by itself, consent to every form of processing.

Information we may process

• Orders and accounts: names, contact details, billing and delivery addresses, order and transaction references, purchased or saved items, preferences and support history.
• Enquiries and bookings: the information you provide about a project, company, event, attendees, delivery arrangements or your requirements.
• Payments: payment status, payment method and transaction information. Card payments are handled through the payment providers used at checkout; do not send full card details or security codes to our inbox or chat.
• Website use: device and browser information, IP address, page interactions and cookie or similar technology data where used and permitted.
• Communications and content: messages, reviews, feedback and, where relevant, event photography or content provided for a project.

We collect information directly from you, through the store and its providers, and from a booking platform or organiser where necessary to deliver a service you have booked. An organiser sharing guest details must have an appropriate basis and provide the relevant privacy information.

Purposes and lawful bases

We use information only where there is an applicable lawful basis. Where consent is the basis, it can be withdrawn without affecting processing that was lawful before withdrawal.

Sensitive information and children

Please provide only the information needed for the enquiry or booking. If an accessibility or other requirement involves health or similarly sensitive information, contact us so the minimum necessary details and an appropriate lawful basis and safeguards can be agreed. Do not put detailed medical information into a general website chat.

The store is intended for adults placing orders or bookings. Where an agreed workshop involves children, the booking and relevant permissions must be arranged with a responsible adult or organiser. We do not treat a child’s participation as permission to use an identifiable image for marketing.

Service providers and Shopify

We use Shopify to host the store and support its commerce features. Information may be shared with providers needed for payments, delivery, customer support, communications, website services, booking administration and professional advice. We provide information appropriate to the task and use the arrangements required by data protection law.

Shopify also processes certain information for its own purposes in the circumstances explained in its Consumer Privacy Policy. This can include services and enhanced features involving interactions with Shopify and other merchants. Shopify is responsible for the processing it carries out as a controller; requests about that processing can also be made through Shopify’s privacy portal.

We may disclose information where lawfully required, to protect rights and investigate fraud, or as part of a genuine business transfer with appropriate safeguards. We do not give every third party an unrestricted right to use your information simply because it works with us.

Marketing, cookies and local storage

Order and booking messages are different from promotional messages. Marketing is sent in line with the permissions or other specific legal basis that applies. You can unsubscribe using the link in a marketing email or by emailing us. We may retain the minimum suppression information needed to respect an opt-out.

The store uses technologies needed for functions such as the basket, checkout, security and saved preferences. Other technologies may support measurement, recommendations or advertising. Where the law requires consent for optional storage, access or tracking, that consent is required separately; a purchase is not blanket permission.

Use the cookie or privacy controls offered on the site to change the choices they cover. Browser settings can also manage cookies and local storage, although disabling necessary storage may affect features such as a saved design or checkout. Contact us if you need information about a particular technology or a choice you cannot find.

Events, images and automated assistance

Where we arrange event photography, we explain the intended use through the relevant booking information or event notice and use an appropriate lawful basis. Tell the team if you prefer not to be included. For identifiable promotional portraits, children’s images or other uses requiring consent, the relevant permission must be obtained.

If an image concerning you raises a privacy issue, contact us with enough detail to identify it. We will consider your request and the applicable rights rather than treating event attendance as an unlimited image release.

Chat or support tools may use automated assistance to answer routine questions. Avoid sharing unnecessary sensitive information. You can ask our team to review a response or decision; any applicable rights concerning automated processing continue to apply.

Retention, security and overseas processing

We keep information for the time reasonably needed for the purpose for which it is held, including supplying and supporting purchases, tax and accounting requirements and applicable legal claims. Retention depends on the record: a financial record, a marketing preference and a workshop arrangement do not necessarily need the same period. Information no longer needed should be deleted or anonymised, subject to lawful record-keeping requirements.

We use appropriate organisational and technical measures to protect information. No internet service can promise absolute security. Contact us promptly if you believe account or customer information has been compromised.

Providers, including Shopify, may process information outside the UK. Where a restricted transfer is made, the relevant adequacy decision, approved contractual safeguards or another lawful mechanism must apply. You can contact us for information about the safeguards relevant to your data.

Your rights and complaints

Depending on the circumstances, UK data protection law gives you rights to access and correct information, request erasure or restriction, receive certain data in a portable form, object to processing and withdraw consent. Some rights have legal exceptions; for example, a request to erase data does not always override required accounting records.

To exercise a right, email info@mytrovejewels.com. We may ask for proportionate information to verify identity. We normally respond within one month; where a lawful extension is needed, we explain it. You can object to direct marketing at any time.

You may complain to the Information Commissioner’s Office. Please also tell us about the concern so we can investigate. You do not have to waive your right to complain to the ICO while we do so.

Updates and contact

We update this notice when practices or legal requirements change and give any additional notice or request any new consent required. A revised notice is not a way to apply a new purpose retrospectively without the basis required by law.

Privacy contact: info@mytrovejewels.com. Postal contact: My Trove Jewels Ltd, Unit 36, Orbital 25 Business Park, Dwight Road, Watford, WD18 9DA, United Kingdom.