Data Protection Policy - Privacy Policy
Titan Jewellery – Data Protection Policy
Last updated: 30th March 2026
Titan Jewellery Ltd is committed to handling personal data lawfully, fairly and securely. This policy explains what personal information we collect, why we collect it, how long we keep it and your rights under UK GDPR and the Data Protection Act 2018.
1. Who we are
Titan Jewellery Ltd
Data Controller: Jason Beer
Our address is shown on the “About Us” page and on all invoices.
Website: https://www.titanjewellery.co.uk
2. What this policy covers
This policy applies to:
• Customers placing orders
• People contacting us
• Suppliers
• Anyone interacting with our website
It explains:
• What personal data we collect
• How we use it
• Our lawful bases for processing
• How long we keep it
• Who we share it with
3. What data we collect
We collect the information needed to process and deliver your order:
• Name
• Billing address
• Delivery address
• Email address
• Telephone number
• Items ordered
• Payment method or reference (not full card details)
We may also store optional details you give us, such as engraving instructions or delivery notes.
If you contact us, we may store your name, email address and any information included in your message.
We do not require customers to create an online account. Accounts are optional and, if created, allow customers to view their own order history on the website.
4. Online payments
Payments are processed securely by our payment service providers:
• Clear Accept
• PayPal
• Bank of Scotland
• WooPayments
• Stripe
These providers are PCI-DSS compliant. You enter your card details directly with them. We never see your full card number or CVC. We only receive:
• Last 4 digits of the card and expiry date, or
• PayPal transaction reference
5. Why we process personal data (legal bases)
We process personal data under the following lawful bases:
• Contract – to take your order, supply goods and contact you about delivery or queries.
• Legal obligation – to keep invoice records for tax purposes (HMRC).
• Legitimate interests – limited, anonymised analysis to understand website performance and improve products and customer experience.
6. Cookies and analytics
Our website uses essential cookies so the shopping basket and checkout can work.
If you consent, we also use Google Analytics 4 (GA4) to understand how visitors use our site. Analytics cookies are non-essential under PECR and only load if you accept cookies.
Engraving preview tool
Our website offers a 3D engraving preview tool that lets you design and share an engraving on a ring. When someone opens a shared design link, we record the design content (the text and font you chose, the metal and ring orientation) along with the device type, operating system and browser used to view it (for example, iOS Safari on mobile). This is used to understand how the tool is being used and to help us support customers who contact us about a specific design.
We do not record your IP address, name, location, email address or any other identifying information. The lawful basis is legitimate interests (analytics and customer support), and no consent is required.
Records are deleted automatically after 90 days. If your design contains personal information you have entered into the engraving text, that information will form part of the record for that period. To request earlier deletion of a specific design, contact us with the share link and we will delete it within 30 days.
For full details, see our Cookie Policy on our website.
You can change or withdraw your cookie consent at any time using the cookie settings on our website.
7. How your data is stored
Personal data is stored securely:
• Electronic records are encrypted
• Printed invoices are kept in secure storage with restricted access
• Old computer hard drives are removed and destroyed before disposal
8. How long we keep your data
We keep order and invoice records for 7 years to meet HMRC requirements. After that they are securely deleted or destroyed.
If you join a mailing list (currently not active), you can unsubscribe at any time.
9. Your rights
Under the UK GDPR, you have the right to:
• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion when data is no longer needed
• Object to processing based on legitimate interests
• Withdraw consent for analytics cookies
• Complain to the Information Commissioner’s Office (ICO)
To exercise any rights, contact us using the details on our website.
10. Accessing your data
We can provide a copy of the personal data we hold. We may ask for proof of identity to ensure data is sent to the correct person.
Data protection enquiries should be made using the contact details shown on our website.
11. Who we share your data with
We share only what is necessary to fulfil your order.
Payment processors:
• Clear Accept
• PayPal
• Bank of Scotland
• WooPayments
• Stripe
Delivery services:
• Royal Mail
• Post Office Counters
• Parcel Force
Review platform (limited review information only):
• Codepath Ltd / CusRev
• Reviewer name (or anonymised)
• Reviewer location (or anonymised)
We may share information with law enforcement if required or in the event of a payment investigation such as a chargeback.
We do not sell or trade personal data.
12. CCTV
CCTV is used at our premises for security purposes. Footage is retained for approximately 30 days before being overwritten, unless there is a reason to retain it for longer. Access is restricted to directors only.
13. Data breaches
If a data breach occurs that risks your rights or freedoms, we will notify the Information Commissioner’s Office (ICO) and contact affected individuals where required.
