Privacy Policy

At Deneb London, we are committed to protecting your privacy and ensuring your personal information is handled with the utmost care. This Privacy Policy explains how we collect, use, store, share, and protect the personal information you provide when interacting with our website, shopping with us, subscribing to communications, or otherwise engaging with our brand.

By visiting our website or making a purchase, you acknowledge that you have read and agree to this Privacy Policy.

1. About Us

Deneb London is an online-only UK-based jewellery brand. In this Privacy Policy, "we," "us," or "our" refers to Deneb London, and "you" or "your" refers to any individual using our website or purchasing our products.

Deneb London Ltd is a company registered in England and Wales with company registration number 16894740. Our registered office is located at 45 Albemarle Street, London, England, W1S 4JL.

We act as the data controller for your personal information under the UK General Data Protection Regulation (UK GDPR). All data handling practices described in this policy comply with UK law.

2. Personal Data We Collect

2.1 Information You Provide

• Name, title, and date of birth (where necessary for verification)
• Delivery and billing addresses
• Email address and phone number
• Payment information (processed securely via third-party providers)
• Account login credentials if you create an account
• Order history, preferences, and purchase details
• Communication and marketing preferences

2.2 Information Collected Automatically

• IP address and geographical location
• Browser and operating system details
• Pages visited, links clicked, time spent on pages
• Referring URLs and search terms
• Device identifiers and screen resolution

2.3 Cookies and Tracking Technologies

We use cookies, pixels, and similar tracking technologies to enhance functionality, analyse performance, and personalise your experience.

3. How We Use Your Personal Data

• Processing and fulfilling orders, including payment authorisation and delivery coordination
• Communicating order updates, account information, or responding to enquiries
• Personalising website content and product recommendations
• Administering newsletters, promotional emails, or marketing campaigns where consent is given
• Analysing trends, improving website performance, and performing market research
• Detecting, preventing, and investigating fraud, security breaches, or illegal activity
• Complying with legal obligations or responding to regulatory requests
• Maintaining accurate records for business and accounting purposes

4. Legal Basis for Processing

• Performance of a contract: necessary to process and deliver your orders
• Compliance with a legal obligation: for accounting, tax, and regulatory reporting
• Legitimate interests: for website security, fraud prevention, business improvement, and analytics
• Consent: where you have explicitly agreed (e.g., marketing communications)

5. Payment Information

All payments are processed securely via third-party providers, including Shopify Payments, PayPal, Klarna, Clearpay, and direct bank debit. Deneb London does not store full card numbers or bank account information.

6. Sharing Your Personal Data

We may share your data with:

• Delivery providers for order fulfilment
• Payment processors for transaction authorisation and fraud prevention
• IT, hosting, or cloud service providers for website maintenance and functionality
• Marketing service providers where you have consented
• Legal or regulatory authorities if required by law

All third parties are contractually obligated to use your data solely for the purposes specified and to maintain security measures consistent with UK GDPR.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above. Retention periods may vary depending on the type of data and applicable legal requirements, including:

• Transaction records and invoices: typically retained for 6–7 years
• Account information: retained until you request deletion or close your account
• Marketing data: retained until consent is withdrawn

8. Your Rights

• Right of access: request a copy of the personal data we hold about you
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of personal data where permitted
• Right to restrict processing: limit processing in specific circumstances
• Right to object: object to certain types of processing, including marketing
• Right to data portability: request your data in a structured, commonly used format

You may exercise these rights by contacting us. You may also lodge a complaint with the Information Commissioner's Office (ICO).

9. Security of Your Data

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of sensitive data
• Secure servers and access controls
• Regular security monitoring and audits
• Employee training on data protection

10. Children

Our website and services are not directed at individuals under 18, and we do not knowingly collect personal data from children.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in laws, regulations, business practices, or website functionality. Changes will be published on our website, with the "last updated" date revised. Continued use of the website constitutes acceptance of the updated policy.

12. Contact Us

For privacy queries, please contact us via email.