Privacy Policy
TongWu Jewellery respects your privacy and is committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share your personal information when you visit tongwujewellery.com, create an account, contact us, place an order or otherwise interact with TongWu Jewellery.
1. Who We Are
TongWu Jewellery is the trading name of Tong Wu, a sole trader established in the United Kingdom.
For the purposes of UK data protection law, TongWu Jewellery is the data controller responsible for the personal information described in this Privacy Policy.
You can contact us using the following details:
Trading name: TongWu Jewellery
Legal name: Tong Wu
Email: info@tongwujewellery.com
Website: tongwujewellery.com
Postal address: 3 Sitka House, 20 Quebec Way, London, SE16 7EU
2. Personal Information We Collect
Depending on how you use our website and services, we may collect the following categories of personal information.
Identity and contact information
This may include:
Your name
Email address
Telephone number
Billing address
Delivery address
Country or region
Account username
Order and transaction information
This may include:
Products you have purchased
Order numbers
Order value
Payment status
Delivery method
Delivery tracking information
Refunds, returns or cancellations
Previous orders and customer service history
Customisation information
If you request a personalised or made-to-order item, we may collect:
Ring size or other jewellery measurements
Gemstone, material and colour choices
Engraving text
Design instructions
Reference photographs or files
Messages relating to your custom order
Please only provide photographs, names or other personal information relating to another person where you have their permission to do so.
Payment information
Payments may be processed by third-party payment providers such as PayPal and Braintree.
We do not ordinarily receive or store your complete payment card number. Your payment information is collected and processed directly by the relevant payment provider in accordance with its own privacy policy and security procedures.
We may receive limited payment-related information, such as:
The name associated with the payment
Payment confirmation
Payment method
Transaction reference
Billing location
Fraud or security status
The last digits of a payment card, where provided by the payment processor
Account information
If you create an account, we may collect:
Your username
Encrypted password information
Saved billing or delivery addresses
Order history
Account preferences
We cannot normally view your password in readable form.
Communications
We may collect information you provide when you:
Contact us by email
Submit a website contact form
Contact us through social media
Request a custom quotation
Ask a question about a product
Make a complaint
Request a refund or return
Exercise a data protection right
Technical and website information
When you visit our website, we or our service providers may automatically collect information such as:
IP address
Browser type
Device type
Operating system
Approximate location
Referring website
Pages visited
Date and time of visits
Shopping cart activity
Cookie identifiers
Website security and error logs
Marketing preferences
We may record:
Whether you have agreed to receive marketing communications
Your preferred communication method
When and how consent was obtained
Whether you have unsubscribed or objected to marketing
We do not intentionally collect special category information, such as information about health, ethnicity, religion, political beliefs or sexual orientation.
3. How We Collect Your Information
We may collect personal information:
Directly from you when you place an order, create an account or contact us
Automatically through cookies and similar website technologies
From payment providers when they confirm or process a transaction
From delivery companies in connection with a shipment
From social media platforms when you contact or interact with us through those platforms
From fraud prevention, website security or payment verification providers
4. How and Why We Use Your Information
We only use personal information where we have a lawful basis to do so.
To process and fulfil your order
We use your identity, contact, order and delivery information to:
Confirm and process your order
Take or confirm payment
Produce or customise your jewellery
Package and deliver your order
Provide order and delivery updates
Handle returns, refunds and cancellations
Provide after-sales support
Our lawful basis is that this processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
If you do not provide the information required to process an order, we may not be able to accept or fulfil your order.
To provide quotations and respond to enquiries
We use your contact details and messages to:
Respond to questions
Discuss customised jewellery
Prepare quotations
Confirm design requirements
Provide customer support
Our lawful basis is taking steps at your request before entering into a contract, performing our contract with you, or our legitimate interest in responding to customers and operating our business.
To manage customer accounts
We use account information to:
Create and maintain your account
Allow you to view previous orders
Save your account preferences
Protect your account against unauthorised access
Our lawful basis is performing our contract with you and our legitimate interest in providing a secure and convenient customer account service.
To meet legal and financial obligations
We may use and retain information to:
Maintain accounting and tax records
Respond to lawful requests from authorities
Comply with consumer protection obligations
Establish, exercise or defend legal claims
Keep records of refunds, disputes and complaints
Our lawful basis is compliance with a legal obligation and, where applicable, our legitimate interest in protecting our legal rights.
To prevent fraud and protect our website
We may use transaction, account and technical information to:
Detect suspicious transactions
Prevent fraud or misuse
Protect customer accounts
Maintain website and payment security
Investigate security incidents
Enforce our website terms
Our lawful basis is our legitimate interest in protecting our customers, website and business from fraud, misuse and security threats. In some circumstances, processing may also be required to comply with a legal obligation.
To improve our website and services
We may use website activity and customer feedback to:
Understand how visitors use our website
Diagnose website errors
Improve website performance
Improve our products and customer service
Measure general website traffic
Our lawful basis may be our legitimate interest in operating and improving our business, or your consent where consent is required for the relevant cookie or tracking technology.
To send marketing communications
Where permitted by law, we may use your email address to send information about:
New jewellery collections
Product launches
Events
Offers
News from TongWu Jewellery
We will normally do this with your consent. In limited circumstances, we may contact existing customers about similar products where the law allows us to do so and where we gave the customer a clear opportunity to opt out.
You can unsubscribe at any time by using the unsubscribe link in a marketing email or by contacting us at info@tongwujewellery.com.
We do not sell your personal information to third parties for marketing purposes.
5. Who We Share Your Information With
We may share personal information with carefully selected service providers where this is necessary to operate our website, process orders and run our business.
These may include:
Website and ecommerce providers
Providers that host, maintain or support our website and online shop, including services associated with WordPress, WooCommerce and our website hosting provider.
Payment providers
Payment services such as PayPal and Braintree, or any other payment provider displayed at checkout.
These providers may process your information as independent data controllers under their own privacy policies.
Delivery and logistics providers
Postal services, couriers, customs agents and fulfilment providers used to deliver your order.
We normally provide them only with the information required to deliver your parcel, such as your name, delivery address, contact details and order reference.
Email and communication providers
Providers used to send transactional emails, order confirmations, customer service messages and marketing communications, such as our email delivery platform.
Website analytics and security providers
Providers used to monitor website performance, prevent fraud, protect against malicious activity or understand general website usage.
Professional advisers
Accountants, legal advisers, insurers or other professional advisers where reasonably necessary.
Government authorities
HM Revenue & Customs, courts, regulators, law enforcement agencies or other authorities where disclosure is required or permitted by law.
We may also disclose personal information where this is reasonably necessary to protect our legal rights, prevent fraud or respond to a legal claim.
We require service providers acting on our behalf to use personal information only for the agreed purpose and to protect it appropriately.
6. International Transfers
Some of our service providers may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take reasonable steps to ensure that appropriate protections are in place. Depending on the destination and provider, these protections may include:
A UK adequacy regulation
The UK International Data Transfer Agreement
The UK Addendum to approved contractual clauses
Another safeguard permitted by UK data protection law
You may contact us for further information about the safeguards used for a particular transfer.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies.
Some cookies are necessary for the website to function. These may be used to:
Keep products in your shopping cart
Remember checkout information
Maintain account sessions
Process payments
Prevent fraud
Protect website security
Remember privacy and cookie preferences
We may also use analytics, preference or marketing technologies. Where consent is required, these technologies will not be activated until you have provided consent.
Certain limited technologies may be used without consent where permitted by law, provided that the applicable legal conditions are met and users are given any required information or ability to object.
You can manage your preferences through our cookie banner or browser settings. Blocking some necessary cookies may affect the operation of the website, shopping cart or checkout.
More information about the particular cookies used on our website may be provided through our cookie preference tool or a separate Cookie Policy.
8. How Long We Keep Your Information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, security and dispute-resolution requirements.
Our usual retention periods are:
Order, payment and invoice records: normally up to six years after the relevant transaction or accounting period
Customer service and order communications: normally up to six years where connected to a purchase, complaint or legal claim
General enquiries that do not result in an order: normally up to two years after the enquiry has been resolved
Customer account information: while the account remains active, and for a reasonable period afterwards, subject to any legal retention requirements
Custom design files and instructions: for as long as required to complete the order and manage after-sales enquiries, warranties, disputes or repeat-order requests
Marketing information: until you unsubscribe, withdraw consent or object, after which we may retain limited information on a suppression list to ensure that we respect your preference
Security and technical logs: for a limited period appropriate to the relevant security and operational purpose
Cookie information: for the duration specified in our cookie preference tool or Cookie Policy
We may keep information for longer where required by law, where a dispute is ongoing or where it is reasonably necessary to establish, exercise or defend a legal claim.
When information is no longer required, we will delete it, anonymise it or securely dispose of it.
9. How We Protect Your Information
We use reasonable technical and organisational measures designed to protect personal information against:
Unauthorised access
Accidental loss
Misuse
Alteration
Disclosure
Destruction
These measures may include access controls, encrypted connections, secure payment providers, software updates, password protection, backups and website security monitoring.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
You are responsible for keeping your account password confidential and should not share it with anyone.
10. Your Data Protection Rights
Depending on the circumstances, you may have the right to:
Access your information
You may request confirmation of whether we hold personal information about you and ask for a copy of that information.
Correct inaccurate information
You may ask us to correct or complete information that is inaccurate or incomplete.
Request deletion
You may ask us to delete your personal information in certain circumstances.
We may need to retain some information where it is required for legal, accounting, fraud prevention or legal claims purposes.
Restrict processing
You may ask us to temporarily limit how we use your personal information in certain circumstances.
Object to processing
You may object where we rely on legitimate interests as our lawful basis.
You have an absolute right to object to the use of your personal information for direct marketing.
Data portability
Where the legal requirements are met, you may ask us to provide certain information in a structured, commonly used and machine-readable format or to transfer it to another organisation.
Withdraw consent
Where we rely on your consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Complain about our use of your information
You may make a data protection complaint directly to us using the contact details below.
These rights are not absolute and may be subject to legal exemptions.
We will normally respond to a valid data protection rights request within one calendar month. We may ask for information reasonably necessary to confirm your identity or understand your request.
We do not normally charge a fee for exercising a data protection right, although the law may allow a reasonable fee or refusal in certain circumstances, including where a request is manifestly unfounded or excessive.
To exercise a right, contact:
Email: info@tongwujewellery.com
Subject line: Data Protection Request
11. Data Protection Complaints
If you are concerned about how we have collected, used or protected your personal information, please contact us first so that we can investigate.
You may submit a complaint by emailing:
Email: info@tongwujewellery.com
Subject line: Data Protection Complaint
Please include:
Your name and contact details
A clear description of your concern
Relevant order or account details, where applicable
Copies of any relevant correspondence or supporting information
We will:
Provide a clear way for you to submit a complaint
Acknowledge receipt within 30 days
Take appropriate steps to investigate without undue delay
Keep you informed where appropriate
Explain the outcome of our investigation
We may ask for proportionate evidence of identity before disclosing personal information or investigating a complaint made on another person’s behalf.
You also have the right to complain to the UK Information Commissioner’s Office, commonly known as the ICO.
We would appreciate the opportunity to address your concern directly, but you are not required to contact us before approaching the ICO.
12. Marketing Preferences
You can stop receiving marketing communications at any time by:
Clicking the unsubscribe link in a marketing email
Adjusting your account preferences, where available
Emailing info@tongwujewellery.com
Stopping marketing communications will not prevent us from sending essential service messages, such as:
Order confirmations
Payment receipts
Delivery updates
Product safety information
Responses to customer service enquiries
Changes that materially affect an existing order or contract
We may retain your email address on a suppression list so that we do not accidentally send marketing communications after you have opted out.
13. Third-Party Websites and Services
Our website may contain links to third-party websites, social media platforms or services.
We are not responsible for how those third parties collect or use personal information. You should review their privacy policies before submitting personal information to them.
Third-party payment providers, social media platforms and delivery providers may act as independent data controllers and may use your information in accordance with their own privacy policies.
14. Automated Decision-Making
TongWu Jewellery does not currently make solely automated decisions about customers that produce legal or similarly significant effects.
Payment and fraud-prevention providers may use automated systems to assess transactions. Those providers are responsible for explaining their own processing practices in their privacy policies.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect:
Changes to our services
Changes to our website or payment methods
Changes to the service providers we use
Changes in legal or regulatory requirements
Changes to how we use personal information
The latest version will be published on this page with an updated revision date.
Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected customers before the new use begins.
16. Contact Us
For questions about this Privacy Policy, requests to exercise your rights or data protection complaints, please contact:
TongWu Jewellery
Operated by: Tong wu
Email: info@tongwujewellery.com
Postal address: 3 Sitka House, 20 Quebec Way, London, SE16 7EU