Privacy policy
Last updated: 21st August 2026
Exuma Blue Jewellery Ltd ("Exuma Blue", "we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use and safeguard your personal information when you visit or purchase from www.exuma-blue.com. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Who we are
Exuma Blue Jewellery Ltd is a company registered in England and Wales (Company Number 16701704). Our registered office is 20 Wenlock Road, London N1 7GU, England.
Information we collect
- Contact and identity information your name, email address, postal address and telephone number.
- Order information purchase history, delivery details, and order-related communications.
- Payment information processed securely by our payment providers. We do not store full payment card details.
- Technical information IP address, browser type, device information, and browsing behaviour, collected via cookies and similar technologies.
- Marketing preferences your preferences on receiving marketing communications from us.
How we use your information
- Processing and fulfilling your orders, including delivery and after-sales support.
- Managing your account and responding to your enquiries.
- Sending you marketing communications where you have consented to receive them.
- Improving our website, products and services.
- Complying with our legal and regulatory obligations.
Legal bases for processing
- Contract to fulfil orders and provide the services you have requested.
- Consent for marketing communications and non-essential cookies.
- Legitimate interests for running our business, improving our services, and maintaining security.
- Legal obligation for tax, accounting and regulatory compliance.
Who we share your information with
We share your information with trusted service providers who help us operate our business, including our e-commerce platform (Shopify), payment providers, delivery couriers, our email marketing platform, and analytics providers.
Where these providers process personal information solely on our behalf, they act as data processors and process your information only on our documented instructions. Some providers for example payment processors, analytics services and advertising platforms may act as independent data controllers for parts of their service (for example fraud prevention, aggregated performance analytics, or regulatory reporting); in those cases their own privacy notices will apply to that processing.
We do not sell your personal information to any third party.
International transfers
Some of our service providers may process your data outside the United Kingdom. Where this is the case, we ensure appropriate safeguards are in place, including standard contractual clauses and, where applicable, adequacy decisions.
How long we keep your information
We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected. Order and transaction records are retained for a minimum of six years from the end of the financial year to which they relate, in line with HMRC record-keeping requirements. We may retain records for longer where required by law or where reasonably necessary for the establishment, exercise or defence of legal claims.
Your rights
Under UK GDPR you have the following rights:
- Access to request a copy of the personal information we hold about you.
- Rectification to correct any inaccurate information.
- Erasure to request deletion of your information, where applicable.
- Restriction to request that we restrict processing of your information.
- Portability to receive your information in a machine-readable format.
- Objection to object to certain types of processing, including direct marketing.
- Withdrawal of consent where consent is the basis of processing.
To exercise any of these rights, please contact admin@exuma-blue.com.
Cookies
Our website uses cookies to enhance your experience and analyse how the site is used. Please see our Cookie Policy for more information.
Security
We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.
Complaints
You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection, at www.ico.org.uk.
Changes to this policy
We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page.
Contact
Exuma Blue Jewellery Ltd
20 Wenlock Road, London N1 7GU, England
admin@exuma-blue.com