Privacy Policy

Last updated: August 10, 2026

Welcome to TOR Jewellery at The Silver Atelier (“we”, “us”, “our”). We respect your privacy and are committed to protecting the personal data of our website visitors and customers (“you”, “your”).

This Privacy Policy informs you about how we handle your personal data, your privacy rights and how the law protects you under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Important Information and Who We Are

Data Controller

TOR Jewellery at The Silver Atelier is the data controller responsible for your personal data.

• Business Name: TOR Jewellery at The Silver Atelier

• Postal Address: The Silver Atelier Studio, Loft Workshops, 23 Badger Sett, Blandford Forum DT11 9QL, UK (or insert alternative registered virtual address)

• Email Address: thesilverateliertor@gmail.com

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer the following types of personal data:

• Identity Data: First name, last name, title and bespoke sizing details (e.g. ring sizes or custom engraving text).

• Contact Data: Billing address, delivery address, email address and telephone numbers.

• Financial Data: Payment card details (processed securely via our third-party payment gateways; we do not store full card numbers directly on our servers).

• Transaction Data: Details about payments to and from you and order details of jewellery items purchased from us.

• Technical Data: IP address, browser type and version, time zone setting, location, operating system and platform.

• Profile Data: Your purchases or orders, custom design enquiries, preferences and feedback.

• Usage Data: Information about how you use our website, products and services.

• Marketing and Communications Data: Your preferences in receiving marketing from us.

3. How We Collect Your Personal Data

We collect data through:

• Direct Interactions: You provide Identity, Contact, and Financial Data when filling in website forms, making a jewellery purchase, requesting custom commissions or signing up for updates.

• Automated Technologies: As you browse our site, technical data regarding your browsing actions and device setup is automatically collected via cookies and analytical tools.

• Third Parties: We receive data from trusted partners, including payment gateways (e.g., Stripe, PayPal, Klarna), platform providers (e.g. Shopify, WooCommerce, Etsy) and postal services (e.g. Royal Mail, DPD).

4. How We Use Your Personal Data and Lawful Basis

We only use personal data where allowed under UK GDPR:

1. Performance of a Contract: Fulfilling and shipping your jewellery orders, managing custom commissions and processing payments.

2. Legitimate Interests: Fraud prevention, site security, customer support and business improvement.

3. Legal Obligation: Retaining mandatory sales and tax records for HM Revenue & Customs (HMRC).

4. Consent: Direct newsletter marketing and non-essential analytical cookies (where you explicitly opt-in).

5. Disclosures of Your Personal Data

We share personal data with selected external service providers solely for essential operations:

• E-commerce & Web Hosting: Platform host services (e.g., Shopify, Squarespace, WooCommerce).

• Payment Gateways: Secure payment service providers (e.g., Stripe, PayPal).

• Courier & Shipping Services: Postal providers (e.g., Royal Mail, DPD) to ensure secure order dispatch.

• Marketing Services: Email distribution platforms (e.g., Klaviyo, Mailchimp) if you consent to newsletters.

• Legal & Tax Authorities: HM Revenue & Customs (HMRC) or regulatory bodies where mandated by UK legislation.

6. International Data Transfers

When third-party service providers host data outside the UK or European Economic Area (EEA), we verify that standard safeguards—such as UK International Data Transfer Agreements (IDTA) or adequacy decisions—are maintained by those providers.

7. Data Security

Given the high value of jewellery transactions, appropriate physical, technical, and organizational security measures are maintained to protect personal data from unauthorized access, loss, or alteration. Access is restricted exclusively to authorized personnel needing data for business operations.

8. Data Retention

Personal data is held only as long as necessary for the purpose collected:

• Sales & Order Records: Kept for 6 to 7 years to satisfy UK statutory accounting and HMRC requirements.

• Customer Enquiries & Custom Commission Quotes: Retained for 2 years post-resolution.

• Marketing Subscriptions: Retained until you opt out or request removal.

9. Your Legal Rights

Under UK data protection laws, you possess the right to:

• Request Access to your personal data (Subject Access Request).

• Request Rectification of inaccurate or incomplete information.

• Request Erasure (“Right to be forgotten”) where data processing lacks valid justification.

• Object to Processing or request restriction of data processing.

• Request Data Portability to another service provider.

• Withdraw Consent at any time where processing relies on consent.

To exercise these rights, email: thesilverateliertor@gmail.com.

Complaints

You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at www.ico.org.uk. We would appreciate addressing any concerns directly prior to ICO involvement.

10. Cookies

Our site utilizes essential cookies to maintain shopping cart functionality and operational features, along with non-essential cookies for site analytics. Cookie options can be adjusted via your browser settings or our website consent banner.

11. Contact Details

For inquiries regarding this policy or data practices, contact:

• Business Name: TOR Jewellery at The Silver Atelier

• Email: thesilverateliertor@gmail.com

• Postal Address: The Silver Atelier Studio, Loft Workshops, 23 Badger Sett, Blandford Forum DT11 9QL, UK

HTML Table Generator
Purpose/Activity Type of Data Lawful Basis for Processing
Processing and delivering jewellery orders  Identity, Contact, Financial, Transaction  Performance of a Contract 
Bespoke jewellery designs & sizing requests  Identity, Contact, Commission Details  Performance of a Contract 
Customer relations and query handling  Identity, Contact, Profile, Communications  Performance of a Contract / Legitimate Interests 
Marketing newsletters & promotions  Identity, Contact, Marketing Preferences   Consent (can be withdrawn anytime)
Fraud detection and order security  Identity, Contact, Technical, Financial  Legitimate Interests / Legal Obligation 
 Tax and accounting compliance  Identity, Contact, Transaction Legal Obligation