Last updated 14 November 2026

This page explains what personal information Moonsalt Jewellery ("we", "us") collects when you use this website, why, who we share it with, how long we keep it and your rights. We're a small independent business and we only collect what we need to make, sell and post your jewellery.

If you have any questions, or want to use any of your rights, email us at moonsaltjewellery@gmail.com.

What we collect and why

When you place an order we collect your name, email address, phone number, delivery address and what you bought. We use it to take payment, post your order, send you order and delivery emails and deal with any returns or questions. We need it to fulfil our contract with you, and we keep order records because the law requires us to (tax and accounting).

Your card details are entered on Stripe's secure checkout page. We never see or store your full card number.

When you use the contact form we collect your name, email address, phone number (if you give it) and your message, so we can reply. Messages are automatically checked for spam. If you ask us to make a custom piece, we'll also keep the details you send us about it.

When you sign up to our newsletter we collect your email address so we can send you occasional emails about new pieces, sales and offers. We only do this with your consent and you can unsubscribe at any time, using the link in any of our emails or by emailing us.

When you visit the website our server records your IP address and the pages you request. We use this only to keep the website secure and working (for example, blocking attacks).

Cookies

We only use cookies that the website needs to work:

• a session cookie that remembers what's in your basket
• Cloudflare Turnstile, on the contact form, to check you're a person and not a spam bot

Stripe also uses cookies on its checkout page to process your payment safely and prevent fraud. We don't use any analytics, advertising or tracking cookies.

Who we share it with

We never sell your information. We share only what's needed with the companies that help us run the shop:

• Stripe: takes your payment
• Twilio SendGrid: sends our emails (order confirmations, delivery updates)
• Cloudflare: spam protection on the contact form
• DigitalOcean: hosts this website, on servers in London
• Google (Gmail): our email inbox, if you email us or we reply to you
• Royal Mail or our courier: your name and address, to deliver your order

Some of these companies are based in the United States. Where your information leaves the UK it is protected by UK-approved safeguards, such as the UK–US Data Bridge or the standard contract terms approved by the UK government.

We may also share information if the law requires us to, for example with HMRC.

How long we keep it

• Orders: six years after the end of the financial year the order was placed in, as required for tax records. After that the customer details are removed automatically.
• Contact form messages: up to two years, then deleted automatically. Spam is deleted after 30 days.
• Newsletter: until you unsubscribe.
• Server logs: around two weeks.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the information we hold about you
• ask us to correct anything that's wrong
• ask us to delete your information (we may need to keep order records for tax purposes)
• object to, or ask us to limit, how we use it
• ask for your information in a format you can take elsewhere
• withdraw your consent at any time, for example by unsubscribing from the newsletter

Email us at moonsaltjewellery@gmail.com and we'll reply within one month. It's free.

If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use your information, we'll update this page and the date at the top.