Privacy Policy
Last updated: August 2026
Exuma Blue Jewellery Ltd (“Exuma Blue”, “we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and safeguard your personal information when you visit or purchase from www.exuma-blue.com. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Exuma Blue Jewellery Ltd is a company registered in England and Wales (Company No. 16701704). Our registered office is 20 Wenlock Road, London N1 7GU, England.
Information we collect
- Contact and identity information — name, email address, postal address, telephone number.
- Order information — purchase history, delivery details, order-related communications.
- Payment information — processed securely by our payment providers. We do not store full payment card details.
- Technical information — IP address, browser type, device information, and browsing behaviour collected via cookies and similar technologies.
- Marketing preferences — your preferences in receiving marketing from us.
How we use your information
- Processing and fulfilling your orders, including delivery and after-sales support.
- Managing your account and responding to your enquiries.
- Sending you marketing communications where you have consented to receive them.
- Improving our website, products and services.
- Complying with our legal and regulatory obligations.
Legal bases for processing
- Contract — to fulfil orders and provide requested services.
- Consent — for marketing communications and non-essential cookies.
- Legitimate interests — for running our business, improving our services, and maintaining security.
- Legal obligation — for tax, accounting and regulatory compliance.
Who we share your information with
We share your information only with trusted partners: our hosting and e-commerce platform (Shopify), payment providers, delivery partners, our email marketing platform, and analytics providers. We do not sell your personal information to any third party.
International transfers
Some service providers may process your data outside the United Kingdom. Where this is the case, we ensure appropriate safeguards are in place, including standard contractual clauses and adequacy decisions.
How long we keep your information
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, and to comply with legal and accounting obligations. Order and transaction records are typically retained for seven years.
Your rights
- Access — to request a copy of the personal information we hold about you.
- Rectification — to correct any inaccurate information.
- Erasure — to request deletion of your information, where applicable.
- Restriction — to request that we restrict processing of your information.
- Portability — to receive your information in a machine-readable format.
- Objection — to object to certain types of processing, including direct marketing.
- Withdrawal of consent — where consent is the basis of processing.
To exercise any of these rights, please contact admin@exuma-blue.com.
Cookies
Our website uses cookies to enhance your experience and analyse how the site is used. Please see our Cookie Policy for more information.
Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.
Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at www.ico.org.uk.
Changes to this policy
We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page.
Contact
Exuma Blue Jewellery Ltd
20 Wenlock Road, London N1 7GU, England
admin@exuma-blue.com