Legal
Privacy, data and cookies
We hold as little as we can and delete it when it has done its job. The unusual part of our work — print images, handwriting, audio — has its own section, because it deserves one.
Written for UK GDPR and the Data Protection Act 2018. Plain English throughout; where a legal term matters, it is named.
Version 2026-08-12 · PRIVATE JEWELLER LIMITED · Governing law: England and Wales
Who we are
PRIVATE JEWELLER LIMITED, trading as Onepiece Atelier, is the data controller for everything described here. We are a private limited company registered in England and Wales.
- Post: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
- Email: support@privatejewelleruk.shop
- Telephone: +44 7290832493
Data protection questions go to the same email address and reach a person, not a queue. We answer within one working day and always inside the statutory month.
What we collect, and why
| Data | Where it comes from | What we do with it |
|---|---|---|
| Name, email, telephone, delivery address | Checkout, contact form, commission enquiry | Make and deliver your order; answer you; keep the sale record |
| Order contents — blank, metal, size, method, the text you asked us to cut | The studio | Manufacture, quality checks, remakes and repairs |
| Uploaded artwork — handwriting, print images, audio | You, in the studio | Traced and cut. Nothing else. See the two sections below |
| Consent records — what you ticked, when, and which policy version | Automatic, at the moment you tick | Proving we asked properly, which is a legal obligation of ours |
| Payment confirmation — the fact of payment, the amount, the last four digits | Our payment provider | Reconciliation and refunds. We never see or hold your full card number |
| Correspondence | Email and telephone | Answering you, and knowing what was said if there is a dispute |
We do not buy personal data, we do not enrich what you give us from third-party sources, and we do not profile you.
Print images: special category data
A fingerprint or palm print image is capable of identifying a person. Where it is used for the purpose of identifying someone, UK GDPR treats it as biometric data and therefore special category data under Article 9. We take the strict view and treat every print image you send us as special category data regardless of our purpose.
What we do with a print image
- Look at it, once, to check it is sharp enough to trace.
- Convert it into a line drawing.
- Cut that drawing into your piece.
What we never do with it
- Use it to identify or verify anyone.
- Extract features, minutiae, templates or any other biometric representation.
- Add it to a database, an index or a searchable store of prints.
- Compare it against another print, ours or anyone else's.
- Share it with a third party, including law enforcement, unless a court orders us to.
- Use it in marketing, published examples, or to train any model.
The legal basis
Your explicit consent, under Article 9(2)(a). That is why the upload field in the studio stays closed until you tick the consent box, and why our server refuses a print image that arrives without a consent record attached. We store what you consented to, the time, and the version of this policy that was current.
You can withdraw that consent at any time by emailing us. If the piece has not been cut we stop and refund it; if it has, we delete the image immediately, though we cannot un-cut the metal. Withdrawing consent does not affect the lawfulness of what we did while it was in force.
Deletion
Print images are deleted 90 days after your order completes. We keep them that long for one reason only: if the piece is lost in the post or has to be remade, we would otherwise have to ask you to take the print again. Ask us to delete it sooner and we will, the same working day.
Handwriting and audio
Handwriting is personal data — often about someone other than you. Upload it only if it is your writing, or you have the permission of whoever wrote it. We treat it exactly as we treat artwork: private storage, random filename, metadata stripped, deleted 90 days after the order completes.
Audio is treated differently and more strictly. We render the waveform as a drawing and delete the source audio file immediately afterwards — within minutes, not at the end of the retention period. We keep the drawing, not the recording. A voice recording is a great deal more revealing than a picture of a waveform, and we have no reason to hold one.
Lawful bases
- Contract — making your piece, taking payment, delivering it, handling returns.
- Legal obligation — keeping sales and VAT records for six years, and hallmarking records where they apply.
- Legitimate interests — answering enquiries, preventing fraud, keeping the site working and secure. We have weighed these against your interests and they are narrow.
- Consent — the newsletter, non-essential cookies, and any use of your piece as an example.
- Explicit consent — print images, as above.
How long we keep things
| What | How long | Why |
|---|---|---|
| Order and sale records | 6 years after the tax year | Companies Act and VAT obligations |
| Uploaded artwork — handwriting, print images | 90 days after the order completes | Remakes and replacements |
| Source audio | Deleted as soon as the waveform is rendered | We only need the drawing |
| Consent records | 6 years | Demonstrating we asked properly |
| Enquiries that do not become orders | 12 months | Following up a quotation |
| Newsletter subscription | Until you unsubscribe | Consent |
Security
- The whole site is served over HTTPS.
- Uploads go to private storage. They are not publicly addressable and are reachable only through short-lived signed links issued to the bench.
- Every uploaded file is renamed to a random string on arrival, so the filename tells nobody anything, and embedded metadata — including location and camera details — is stripped before storage.
- Uploaded files are never written into your browser's local storage. Your configuration is saved locally so you can come back to it; the file is not.
- Access to order data and the review queue is limited to the people who make the work.
- Card details are handled entirely by our payment provider and never reach our servers.
If a breach ever put your rights at risk, we would tell the ICO within 72 hours and tell you without undue delay.
Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; limit what we do with it; port it elsewhere in a machine-readable form; stop processing based on legitimate interests; and withdraw any consent you have given.
Email support@privatejewelleruk.shop. It is free, we do not require a particular form, and we answer within one month. Two honest limits: we cannot delete a sale record we are legally required to keep for six years, and we cannot remove an engraving that has already been cut into metal.
Marketing, and your piece
Our newsletter is occasional, about engraving methods and looking after silver, and it is consent only with an unsubscribe link in every message. Buying from us does not sign you up.
We do not photograph or publish customers' pieces without asking. Uploaded artwork is never used in marketing or as an example, and never used to train any model — that setting is off by default and only you can turn it on, separately and in writing.
Age
Orders are for adults. We do not knowingly collect data from anyone under 18, and where a piece is a gift for a child, the personal data we hold is the adult's. The christening bangle in our range is sold as a keepsake to be kept, not as an infant's wearable — see that product page.
Complaints, and the ICO
Tell us first if you can — support@privatejewelleruk.shop — because most of it we can fix the same day.
You also have the right to complain to the Information Commissioner's Office at any time, without going through us: ico.org.uk, 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
This notice is version 2026-08-12. When it changes materially we email anyone with an open order and note the change here.