The house
What we keep,
and why
We hold what we need to sell, value and make jewellery for you, and nothing for its own sake. You can see all of it, correct it, or have it deleted from your account at any time.
Who we are
The controller
Yasmin Diamonds decides how your information is used, and is responsible for it under UK data protection law. Questions about it come to us, at the address opposite.
- Business
- Yasmin Diamonds
- Address
- Hatton Garden, London EC1N, United Kingdom
- Contact
- clients@yasmindiamonds.com · +44 20 0000 0000
- ICO registration
- Being registered
What and why
What we hold
We do not sell your information, we do not buy lists, and we do not use advertising trackers. The only cookies this site sets keep you signed in to your account.
- When you enquire, book or sell to us
- Your name, email, telephone and what you told us. We need it to answer you — that is the lawful basis.
- When you buy
- The same, plus your delivery address and what you bought. Payment is taken by Stripe; we never see or store your card.
- When we buy from you
- Your identity and what we bought. We keep it as the record of the purchase in our accounts, and to guard against buying stolen goods.
- If you tell us
- Your ring size, birthday or anniversary, so we can size a ring correctly and remember an occasion. Ask and we will remove them.
- Your account
- Your sign-in email and the pieces you saved.
- A valuation for insurance
- A description and photographs of your piece, and the figure we put on it. Kept for you until you ask us to delete it or delete your account.
- New arrivals
- Only if you ask — by ticking a box, or by entering your email in the footer and then confirming from the link we send. Until you confirm, nothing is kept. Stop at any time from the link in every note, your account, or by replying.
How long
Kept no longer than needed
When you delete your account we remove everything except the two records the law makes us keep, and those are no longer linked to you.
- Enquiries and valuations that went nowhere
- Deleted two years after we last heard from you.
- Purchases
- Six years from the sale — HMRC requires it for VAT.
- Anything we bought from you
- Six years — the record of the purchase in our accounts, as HMRC requires.
- Your account
- Until you delete it.
Who helps us
The services we use
Each acts only on our instructions, under a contract that requires them to protect your information. Where any of them handles it outside the UK, it is under the safeguards UK law requires.
- Supabase
- Where our records are kept — in the European Union (Sweden).
- Vercel
- Runs this website.
- Stripe
- Takes card payments. It holds your card details; we never do.
- Resend
- Sends our emails — confirmations, receipts and reminders.
- Our appointment calendar, if we have booked you in.
- Twilio
- Appointment reminders by text, if you gave us a mobile number.
Your rights
See it, correct it, delete it
You do not need to give a reason for any of these, and none of them costs anything.
- A copy
- Download everything your account shows from your account page. For everything we hold, including our own notes, email us — we reply within one month.
- Correct it
- Change your name, telephone and new-arrival preference in your account. For anything else, tell us.
- Delete it
- Delete your account from your account page, or ask us to.
- Complain
- To us first, please. You can also complain to the Information Commissioner's Office, ico.org.uk.