Privacy policy

Privacy Policy
Last Updated: 24/06/2025

At Moonstone & Sage, we are committed to protecting and respecting your privacy. This policy outlines how we collect, use, store, and share your personal information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy applies to our website: https://moonstone-and-sage.co.uk

1. Who We Are

Moonstone & Sage is a UK-based online business selling jewellery and accessories.

If you have any questions about this policy or how we use your data, contact:

Email: info@moonstone-and-sage.co.uk
Website: https://moonstone-and-sage.co.uk

2. What Personal Data We Collect

We may collect and process the following information:

  • Identity data: your name and contact details

  • Order data: billing address, delivery address, order details

  • Payment data: processed securely through third-party providers (e.g. Shopify Payments, PayPal) – we do not store payment card details

  • Technical data: IP address, browser type, time zone, and device type (used for analytics and performance improvements)

  • Marketing data: your preferences if you opt-in to receive updates

3. How We Use Your Information

We use your personal data for the following purposes:

  • To fulfil and deliver your orders

  • To process payments securely

  • To communicate with you about your order

  • To improve and personalise your experience on our website

  • To comply with legal obligations (e.g. tax records, fraud prevention)

  • To send you marketing emails (only if you opt in – and you can opt out at any time)

We rely on the following lawful bases under the UK GDPR:

  • Contractual necessity – to fulfil your order

  • Legal obligation – for accounting and regulatory compliance

  • Consent – for marketing communications

  • Legitimate interest – for business improvement and security

4. How We Share Your Information

We may share your data with trusted third parties to help run our business:

  • Payment processors (e.g. Shopify Payments, PayPal)

  • Delivery services (e.g. Royal Mail or couriers)

  • Website hosting and technical services (e.g. Shopify)

  • Email marketing platforms (only if you opt in)

All third parties are required to respect your data and comply with the UK GDPR. We do not sell or rent your data to any third parties.

5. How Long We Keep Your Data
We retain your personal data only as long as necessary to:

  • Fulfil the purpose it was collected for (e.g. processing an order)

  • Comply with legal or regulatory requirements (e.g. tax law)

After this period, your data is securely deleted or anonymised.

6. Your Rights Under UK GDPR
You have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Request deletion of your data (where legally permitted)

  • Object to or restrict the processing of your data

  • Withdraw consent for marketing at any time

  • Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise your rights, email us at info@moonstone-and-sage.co.uk

7. Cookies and Tracking Technologies
Our website uses cookies to:

  • Improve user experience

  • Track performance and analytics

  • Remember items in your cart

By using our site, you agree to our use of cookies. You can disable cookies through your browser settings at any time.

8. Marketing Preferences

You will only receive marketing communications from us if you have opted in. You can unsubscribe at any time by clicking the link in our emails or by contacting us directly.

9. Changes to This Privacy Policy

We may update this policy occasionally to comply with law or reflect changes in our business. Any updates will be posted on this page.

10. Contact Us

If you have any questions or wish to exercise your rights, contact us at:

Moonstone & Sage

Email: info@moonstone-and-sage.co.uk
Website: https://moonstone-and-sage.co.uk