Privacy Policy
Last updated: 10/09/2026
PEARLUNE Ltd. (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit or make a purchase from www.pearlune.co.uk (the “Site”), in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, please contact us using the details in the “Contact Us” section below.
1. Who We Are
Pearlune Ltd. is a jewellery retailer based in the United Kingdom, specialising in pearl and sterling silver jewellery.
Registered/contact address: C/O Crawley Accountants, 3 Churchill Court, Manor Royal, RH10 9LU, UK Contact email: care@pearlune.co.uk
We are the “data controller” of the personal data we collect from you, meaning we decide how and why your data is processed.
2. What Personal Data We Collect
Depending on how you interact with our Site, we may collect the following:
- Identity data — name, title
- Contact data — billing address, delivery address, email address, phone number
- Order data — details of products purchased, order value, order history
- Payment data — processed securely by our payment providers (we do not store full card details ourselves — see Section 5)
- Account data — username, password (encrypted), account preferences, if you create an account
- Technical data — IP address, browser type, device information, pages visited (collected via cookies — see our Cookie Policy)
- Marketing preferences — whether you’ve opted in to receive marketing emails
We do not knowingly collect any special category data (e.g. health, religion) and we do not knowingly collect data from anyone under the age of 18.
3. How We Use Your Data and Our Legal Basis
We only use your personal data where we have a lawful basis to do so:
| Purpose | Legal Basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Managing your account | Performance of a contract |
| Responding to customer service enquiries | Performance of a contract / Legitimate interest |
| Sending order confirmations, shipping and delivery updates | Performance of a contract |
| Sending marketing emails (only if you’ve opted in) | Consent |
| Preventing fraud and securing our Site | Legitimate interest |
| Complying with tax, accounting, and legal obligations | Legal obligation |
| Improving our Site and products | Legitimate interest |
You can withdraw consent for marketing communications at any time by clicking “unsubscribe” in any email, or by contacting us directly.
4. How Long We Keep Your Data
We only keep personal data for as long as necessary for the purposes it was collected, or as required by law:
- Pending orders: retained for 3 days
- Failed orders: retained for 3 days
- Cancelled orders: retained for 30 days
- Completed and refunded orders: retained for 6 years, in accordance with UK HMRC requirements for financial and tax record-keeping
- Inactive customer accounts: retained for up to 24 months, after which associated personal data may be anonymised or deleted
Order and payment records that must be kept for legal or tax purposes will be retained for the required statutory period even where other data has been deleted.
5. Sharing Your Data with Third Parties
We share your data only where necessary to fulfil your order or operate our Site, including with:
- Payment providers (e.g. Stripe, PayPal, WooPayments) — to securely process your payment. We do not store your full card details.
- Delivery/courier providers (e.g. Royal Mail, Parcelforce) — to deliver your order and provide tracking.
- Website hosting and IT service providers — to operate and maintain our Site securely.
- Email/marketing platforms — only if you’ve opted in to receive marketing communications.
- HMRC and other authorities — where we are legally required to do so.
We do not sell your personal data to third parties.
Where we use service providers based outside the UK/EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data in line with UK GDPR requirements.
6. Cookies
Our Site uses cookies to improve your browsing experience, remember your cart, and understand how visitors use our Site. You can control or disable cookies through your browser settings. For more detail, see our [Cookie Policy] (if you have a separate one; otherwise this section can be expanded here).
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Erasure (“right to be forgotten”) — request deletion of your data, subject to our legal retention obligations
- Restrict processing of your data in certain circumstances
- Object to processing based on legitimate interests, including direct marketing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
To exercise any of these rights, contact us at care@pearlune.co.uk. We will respond within one month, as required by law.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk if you believe we have not handled your data properly.
8. How We Protect Your Data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including secure (SSL-encrypted) checkout, restricted access to customer data, and secure payment processing through PCI-DSS compliant providers.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated “Last updated” date.
10. Contact Us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:
PEARLUNE Ltd. Email: care@pearlune.co.uk Address: C/O Crawley Accountants, 3 Churchill Court, Manor Royal, RH10 9LU, UK
