Privacy policy
# PRIVACY POLICY
Last updated: 15 September 2026
KIM N KIM JEWELLERY (WOKING) LIMITED, trading as KIM N KIM Jewellery ("KIM N KIM Jewellery", "we", "us" or "our"), operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services").
KIM N KIM Jewellery is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy explains how we collect, use, disclose and otherwise process your personal information when you visit or use the Services, make a purchase or other transaction, create or use a customer account, request personalisation, or otherwise communicate with us.
If there is a conflict between our Terms of Service and this Privacy Policy concerning the collection, use or disclosure of personal information, this Privacy Policy will apply to those privacy matters.
Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood how your personal information is handled as described in this Privacy Policy.
## Personal Information We Collect or Process
When we use the term "personal information", we mean information that identifies you or can reasonably be linked to you or another identifiable person.
Personal information does not include information that has been anonymised or de-identified so that it can no longer reasonably identify or be linked to an individual.
Depending on how you interact with the Services, where you live and what products or services you request, we may collect or process the following categories of personal information:
- **Contact details**, including your name, billing address, shipping address, email address and telephone number.
- **Payment and transaction information**, including your payment method, transaction details, payment status and payment confirmation. Payment-card information is processed by Shopify and/or the applicable payment provider, and we do not generally receive or retain your full payment-card number.
- **Account information**, including your email address, customer profile, saved addresses, preferences, settings, order history and authentication-related information made available through Shopify Customer Accounts.
- **Transaction information**, including products you view, place in your basket, purchase, return, exchange or cancel, together with your previous transactions with us.
- **Personalisation information**, including names, dates, initials, messages, sizing instructions, engraving details and other information you choose to provide when requesting a personalised, bespoke or made-to-specification product.
- **Communications with us**, including information contained in customer-service enquiries, return requests, reviews, complaints or other communications.
- **Device information**, including information about your device, browser, network connection, IP address and other technical or unique identifiers.
- **Usage information**, including information about how and when you interact with, navigate or use the Services.
- **Sensitive or special category information.** In limited circumstances, you may choose to provide information concerning your health, for example when ordering personalised medical alert jewellery. We process such information only where necessary to provide the product or service you have specifically requested and where an appropriate lawful basis and special-category processing condition applies. Where required, we will request your explicit consent separately before processing such information.
## Personal Information Sources
We may collect personal information:
- **Directly from you**, including when you make a purchase, create or use a customer account, request personalisation, submit a form, contact us or otherwise provide information to us.
- **Automatically through the Services**, including through your device, browser, cookies, pixels and similar technologies, subject to your privacy choices and applicable law.
- **From Shopify and our service providers**, where they provide technology, payment, fulfilment, delivery, analytics, marketing, customer-support or other services used in operating our store.
- **From business partners or other third parties**, where permitted by applicable law and relevant to providing, securing, measuring or improving the Services.
## How We Use Your Personal Information
Depending on how you interact with us, we may use personal information for the following purposes:
### Providing and Fulfilling the Services
We use personal information to provide the Services and perform our contract with you, including to:
- process and fulfil purchases;
- process payments;
- personalise or modify products according to your instructions;
- arrange delivery;
- communicate about your order;
- manage customer accounts;
- facilitate returns, cancellations, refunds or exchanges;
- provide customer support;
- enable product reviews and other customer-service functions; and
- remember relevant preferences associated with your use of the Services.
### Improving and Personalising the Services
We may use information to understand how customers use our store, improve our products and Services, improve website functionality, measure performance and provide a more relevant shopping experience.
### Marketing and Advertising
Where you have opted in, we may use your personal information to send marketing and promotional communications by email.
We may also use information to provide, personalise or measure advertising where permitted by applicable law.
Where consent is required for non-essential cookies, tracking technologies, personalised advertising or similar processing, we rely on your consent and provide controls that allow you to reject, withdraw or change your preferences.
You may unsubscribe from marketing emails at any time using the unsubscribe option included in those emails.
### Security and Fraud Prevention
We may use personal information to authenticate access, provide a secure shopping experience, prevent, detect and investigate fraud, misuse, illegal activity, security incidents or other harmful activity, and protect our customers, business and Services.
If you use Shopify Customer Accounts, you are responsible for keeping email verification codes or other account access details secure.
### Communicating with You
We use personal information to respond to enquiries, provide customer support, communicate about orders and Services, and maintain our customer relationship with you.
### Legal and Regulatory Purposes
We may process personal information where necessary to comply with legal, regulatory, tax, accounting, customs, consumer-protection or product-safety obligations; respond to lawful requests from regulators, courts or law-enforcement authorities; establish, exercise or defend legal claims; resolve disputes; or investigate potential violations of our terms and policies.
## Legal Bases for Processing
Where UK, EEA or other applicable data-protection law requires us to identify a lawful basis for processing personal information, we rely on one or more of the following bases depending on the purpose and circumstances.
### Performance of a Contract
We process personal information where necessary to process and fulfil your order, personalise or modify a product according to your instructions, arrange delivery, manage returns or cancellations, maintain your customer account or provide customer support in connection with your purchase.
### Legal Obligation
We process personal information where necessary to comply with applicable tax, accounting, customs, consumer-protection, product-safety or other legal and regulatory requirements.
### Legitimate Interests
We may process personal information where necessary for our legitimate interests in operating, securing and improving our business and Services, preventing and investigating fraud, maintaining appropriate business records, protecting our legal rights and resolving disputes, provided that those interests are not overridden by your rights, freedoms and interests.
### Consent
We rely on consent where you have given consent for a specific purpose, including email marketing, non-essential cookies, certain tracking technologies, personalised advertising or other processing for which consent is required.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
### Special Category Personal Information
Where we process special category personal information, such as health information voluntarily provided for the personalisation of medical alert jewellery, we also identify an appropriate condition under applicable data-protection law.
Where explicit consent is the appropriate condition, we will ask you to provide a clear and separate explicit consent for the processing of that information.
## How We Disclose Personal Information
We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy, including:
- **Shopify**, which hosts and supports our online store and provides technology used to deliver the Services.
- **Service providers**, including payment processors, hosting and technology providers, analytics providers, customer-service providers, marketing and email-service providers, review services and other suppliers that process information in connection with services they provide to us.
- **Delivery and fulfilment providers**, where information is needed to dispatch, deliver, track or return an order.
- **Business and marketing partners**, where permitted by applicable law, to provide, measure or personalise marketing and advertising.
- **Third parties you direct us to use**, or where you otherwise request or consent to disclosure.
- **Professional advisers**, including accountants, legal advisers, insurers and other professional advisers where reasonably necessary.
- **Government authorities, regulators, law-enforcement agencies, courts or other parties**, where disclosure is required by law, valid legal process or reasonably necessary to protect our legal rights or the rights of others.
- **Parties involved in a business transaction**, such as a reorganisation, merger, sale, financing, insolvency or transfer of all or part of our business, subject to applicable legal requirements.
## Relationship with Shopify
The Services are hosted by Shopify.
Shopify collects and processes personal information about your access to and use of the Services in order to provide and improve the Services.
Information submitted through the Services may be transmitted to and shared with Shopify and relevant service providers, including providers located outside the country in which you live, where necessary to provide and improve the Services.
To help protect, grow and improve our business, we use certain Shopify enhanced services that may incorporate data and information obtained from your interactions with our store, Shopify and other merchants using Shopify.
For certain enhanced services, including where Shopify uses information across merchants to provide services such as personalised advertising or related functionality, Shopify may act as an independent controller and is responsible for its own processing of personal information.
Further information about Shopify's processing of personal information is available in the Shopify Consumer Privacy Policy:
https://www.shopify.com/legal/privacy/app-users
You may also be able to exercise rights relating to information processed by Shopify through the Shopify Privacy Portal:
https://privacy.shopify.com/en
## Data Sharing and Targeted Advertising Choices
Depending on where you live, you may have the right to opt out of certain uses of your personal information that applicable law defines as a "sale", "sharing", targeted advertising or similar activity.
Where applicable, you can exercise these choices through our data-sharing opt-out page:
https://kimnkim.co.uk/pages/data-sharing-opt-out
If you visit our website with a recognised Global Privacy Control preference signal enabled, Shopify may automatically treat that signal as an opt-out request for the relevant browser or device where applicable.
If Shopify can associate the device with a Shopify account, the preference may also be applied to that account in accordance with Shopify's privacy functionality.
Other browser "Do Not Track" signals may not be recognised unless required by applicable law.
## Cookies and Similar Technologies
We and our service providers, including Shopify, use cookies, pixels and similar technologies to operate the Services, remember preferences, understand website usage, provide functionality, maintain security and, where permitted, measure or personalise advertising.
Where applicable law requires consent for non-essential cookies or similar technologies, those technologies are subject to the choices made through our cookie consent tools.
You can use the cookie banner and its preference controls to accept, decline or manage relevant categories of cookies where those controls are available.
## Third-Party Websites and Links
The Services may contain links to websites, services or online platforms operated by third parties.
If you follow a link to a third-party service that is not controlled by us, that third party's privacy notice, security practices and terms will apply.
We are not responsible for the privacy, security, accuracy or content of websites and services that we do not control.
Information you choose to make public or semi-public through third-party social-media services or similar platforms may also be visible to other users of those services.
## Children's Data
The Services are not intended for children to make purchases independently where they are not legally able to do so.
We do not knowingly seek to collect personal information directly from children in circumstances where parental or guardian consent is required by applicable law.
If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact us using the details below so that we can review and, where appropriate, delete the information.
## Security of Your Information
We use reasonable organisational, technical and administrative measures designed to protect personal information.
However, no method of transmission or storage can be guaranteed to be completely secure.
We recommend that you do not send highly sensitive or confidential information through insecure communication channels unless necessary and appropriate safeguards are available.
## Retention of Your Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to provide the Services, maintain customer accounts, comply with legal and regulatory obligations, resolve disputes and enforce agreements.
Certain order, transaction, VAT, tax and accounting records are generally retained for approximately six years, or for another period required by applicable UK tax, VAT or accounting rules.
Records may be retained for longer where required because of an investigation, dispute, legal claim, regulatory requirement or another lawful reason.
Other personal information is deleted or anonymised when it is no longer reasonably required for the purposes for which it was collected, subject to applicable legal requirements.
## Your Rights and Choices
Depending on where you live, you may have some or all of the following rights in relation to your personal information.
These rights are not absolute and may be subject to legal limitations or exceptions.
### Right of Access / Right to Know
You may have the right to request access to personal information we hold about you and information about how it is processed.
### Right to Correction
You may have the right to ask us to correct inaccurate or incomplete personal information.
### Right to Erasure / Deletion
You may have the right to request deletion of personal information in circumstances where applicable law provides that right.
### Right to Data Portability
You may have the right to receive certain personal information in a structured, commonly used and machine-readable format and, where applicable, request transfer of that information to another organisation.
### Right to Restrict Processing
Where applicable, you may have the right to ask us to restrict the processing of your personal information in certain circumstances.
### Right to Object
Where we rely on legitimate interests as a lawful basis, you may have the right to object to that processing.
You also have the right to object at any time to the use of your personal information for direct marketing.
### Withdrawal of Consent
Where we rely on consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing that took place before consent was withdrawn.
### Marketing Preferences
You may unsubscribe from promotional emails at any time using the unsubscribe option included in our marketing emails.
You may still receive non-promotional communications that are necessary to manage an order, account, transaction, security matter or customer-service request.
### Sale, Sharing and Targeted Advertising
Depending on where you live, you may have the right to opt out of uses of personal information defined by applicable law as sale, sharing or targeted advertising.
Where available, you may exercise those rights through:
https://kimnkim.co.uk/pages/data-sharing-opt-out
### Exercising Your Rights
You may exercise applicable privacy rights by contacting us using the details below or by using privacy controls made available through the Services.
We may need to verify your identity before processing a request where permitted or required by law.
Where applicable law permits an authorised agent to submit a request on your behalf, we may require evidence of that authority and may also ask you to verify your identity directly.
We will respond within the timeframe required by applicable law.
We will not discriminate against you for exercising applicable privacy rights.
## Complaints
If you have a concern or complaint about how we process your personal information, please contact us first using the details below so that we can investigate and respond.
If you are in the United Kingdom and remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection.
If another data-protection authority has jurisdiction over you, you may also have the right to lodge a complaint with that authority.
## International Transfers
Your personal information may be transferred to, stored in or processed in countries outside the country in which you live, including through Shopify and other service providers that support the Services.
Where we are responsible for a restricted transfer under UK data-protection law, we use an applicable lawful transfer mechanism.
This may include UK adequacy regulations or, where appropriate, safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses.
Where the EU GDPR applies, transfers may rely on an applicable adequacy decision, the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, as appropriate.
Further information about Shopify's international processing practices is available through Shopify's privacy documentation.
## Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Services, technology, service providers, privacy settings, legal obligations or regulatory requirements.
When we make changes, we will publish the revised Privacy Policy on this website and update the "Last updated" date.
Where required by applicable law, we will provide additional notice of material changes.
## Contact
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise any applicable privacy rights, please contact us:
**Data Controller:**
KIM N KIM JEWELLERY (WOKING) LIMITED
Trading as KIM N KIM Jewellery
**Correspondence address:**
7 Osier Way
Mitcham
London
CR4 4NF
United Kingdom
**Email:**
info@kimnkim.co.uk
For the purposes of applicable data-protection law, KIM N KIM JEWELLERY (WOKING) LIMITED is the controller of personal information for which it determines the purposes and means of processing, except where another organisation, such as Shopify, acts as an independent controller for particular processing as described in its own privacy documentation.