Privacy Policy

1. Introduction

This privacy notice explains how A C Silver Unlimited (“we”, “us”, or “our”) collects and processes your personal data when you use our websites, including:

• acsilver.co.uk (trading as AC Silver)
• antiquejewellery.store (trading as Antique Jewellery Store)

This includes any information you provide when purchasing a product or service, signing up to our newsletter, or taking part in a prize draw, competition, or survey.

By providing us with your personal data, you confirm that you are over 13 years of age. We do not knowingly collect data relating to children under 13.

Data Controller
The legal entity responsible for your personal data is:

A C Silver Unlimited
Trading as AC Silver and Antique Jewellery Store

Contact Details

• Email: enquiries@antiquejewellery.store
• Address: 35b St. Georges Terrace, Jesmond, Newcastle-Upon-Tyne, Tyne and Wear, United Kingdom, NE2 2SU
• Telephone: +44 (0) 191 240 2645

If you are unhappy with how we collect or use your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk).

We would, however, appreciate the chance to resolve your concerns before you contact the ICO, so please contact us in the first instance.

It is important that the information we hold about you is accurate and up to date. Please let us know if your personal details change by emailing us at enquiries@antiquejewellery.store.

---

2. What Data Do We Collect About You

Personal data means any information capable of identifying an individual. It does not include anonymised data.

We may process the following categories of personal data:

• Identity Data: first name, maiden name, last name, username, marital status, title, date of birth, gender.
• Contact Data: billing address, delivery address, email address, telephone numbers.
• Financial Data: bank account details, payment card details.
• Transaction Data: details of payments between us, details of purchases made by you.
• Technical Data: login data, internet protocol (IP) address, browser type and version, browser plug-in types and versions, time zone setting and location, operating system and platform, and other technology used to access this website.
• Profile Data: username and password, purchases or orders made by you, your interests, preferences, feedback, survey responses.
• Usage Data: information about how you use our website, products, and services.
• Marketing and Communications Data: preferences in receiving marketing communications from us and from third parties, communication preferences.

We may also process Aggregated Data derived from your personal data. Aggregated Data does not directly or indirectly reveal your identity and therefore does not constitute personal data. For example, we may aggregate Usage Data to calculate the percentage of website users accessing a specific feature. If Aggregated Data is combined with personal data so that an individual can be identified, it will be treated as personal data.

Sensitive Data

We do not intentionally collect or process Sensitive Data about you. Sensitive Data includes data concerning race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, genetic and biometric data, health data, sex life, or sexual orientation. We also do not collect information about criminal convictions or offences.

In limited circumstances, we may be required to verify your identity by checking official identification documents such as a passport or driving licence. This process may involve incidental processing of data that could reveal Sensitive Data (for example, a photograph or nationality). Such processing will only take place where it is necessary to comply with legal obligations, including age verification, anti-money laundering requirements, or fraud prevention.

Failure to Provide Data

Where we are required to collect personal data by law, or under the terms of a contract with you, and you do not provide that data when requested, we may be unable to perform the contract. For example, we may not be able to deliver goods or services. In such circumstances, we may have to cancel a product or service you have ordered, but we will notify you if this is the case.

---

3. How We Collect Your Personal Data

We collect personal data about you through a variety of methods, including:

Direct Interactions

You may provide data by filling in forms on our website or on other marketplaces, or by communicating with us by post, telephone, email, social media channels, live chat, or otherwise. This includes situations where you:

• order our products or services;
• create an account on our website;
• subscribe to our services or publications;
• request resources or marketing communications to be sent to you;
• enter a competition, prize draw, promotion, or survey;
• provide feedback.

Automated Technologies or Interactions

As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and usage patterns. We collect this data through cookies, server logs, and similar technologies. We may also receive Technical Data about you if you visit other websites that use our cookies. Please see our cookie policy for further details.

Third Parties or Publicly Available Sources

We may receive personal data about you from the following categories of third parties:

• Analytics providers (for example, to understand how users interact with our website);
• Advertising networks (for example, to deliver targeted advertisements);
• Search information providers (for example, to help direct you to our website);
• Online marketplaces (for example, where you make a purchase through third-party platforms);
• Payment service providers and delivery companies (for example, to process payments and fulfil orders);
• Identity and data verification providers (for example, to assist with anti-fraud, anti-money laundering, or age verification checks);
• Public sources such as Companies House and the Electoral Register.

---

4. How We Use Your Personal Data

We will only use your personal data where legally permitted. The most common uses of your personal data are:

• where we need to perform the contract between us;
• where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
• where we need to comply with a legal or regulatory obligation.

We generally do not rely on consent as a legal ground for processing your personal data, other than in relation to sending marketing communications to you by email or text message. You have the right to withdraw consent to marketing at any time by contacting us at enquiries@antiquejewellery.store.

Purposes for Processing Your Personal Data

Set out below is a description of the purposes for which we may process your personal data, together with the types of data involved and the lawful basis for processing. In some cases, we may process your personal data for more than one lawful ground.

Purpose/Activity	Type of Data	Lawful Basis for Processing
To register you as a new customer	(a) Identity (b) Contact	Performance of a contract with you
To process and deliver your order, including: (a) managing payments, fees and charges, and (b) collecting and recovering money owed to us	(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications	(a) Performance of a contract with you (b) Necessary for our legitimate interests to recover debts owed to us
To manage our relationship with you, including: (a) notifying you about changes to our terms or privacy policy, (b) asking you to leave a review or take a survey, (c) notifying you about changes to your service or product	(a) Identity (b) Contact (c) Profile (d) Marketing and Communications	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests to keep our records updated and to study how customers use our products and services
To enable you to participate in a prize draw, competition, or survey	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications	(a) Performance of a contract with you (b) Necessary for our legitimate interests to study how customers use our products and services, to develop them, and to grow our business
To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting, and hosting of data)	(a) Identity (b) Contact (c) Technical	(a) Necessary for our legitimate interests in running our business, providing administration and IT services, ensuring network security, preventing fraud, and in the context of a business reorganisation or restructuring (b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and to measure or understand the effectiveness of our advertising	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical	Necessary for our legitimate interests to study how customers use our products and services, to develop them, to grow our business, and to inform our marketing strategy
To use data analytics to improve our website, products, services, marketing, customer relationships, and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests to define customer types, keep our site updated and relevant, develop our business, and inform our marketing strategy
To make suggestions and recommendations to you about goods or services that may be of interest to you	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile	Necessary for our legitimate interests to develop our products and services and to grow our business
To respond to general enquiries or career enquiries	(a) Identity (b) Contact	(a) Consent (b) Necessary for our legitimate interests (recruitment and to communicate with our customers, partners, and third parties)

Marketing Communications

You will receive marketing communications from us if:

• you have requested information from us or purchased goods or services from us; or
• you provided your details and opted in to receive marketing communications;
• and in each case, you have not opted out of receiving such communications.

We will obtain your express opt-in consent before sharing your personal data with any third party for marketing purposes.

You may withdraw consent or opt out of marketing communications at any time by:

• logging into your account and adjusting your preferences;
• following the opt-out link in any marketing message; or
• contacting us at enquiries@antiquejewellery.store.

Opting out of marketing communications will not apply to personal data provided to us as part of a purchase, warranty registration, service experience, or other transaction.

Change of Purpose

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another purpose and that purpose is compatible with the original purpose. If you would like more information on compatibility, please contact us at enquiries@antiquejewellery.store.

If we need to use your personal data for a purpose unrelated to the original purpose, we will notify you and explain the legal basis for processing.

We may process your personal data without your knowledge or consent where this is required or permitted by law.

---

5. Disclosures of Your Personal Data

We may have to share your personal data with third parties for the purposes set out in Section 4 above. These third parties may include:

• Service providers who provide IT, system administration, hosting, and communication services;
• Payment processors, fraud prevention providers, and credit reference agencies;
• Delivery and courier companies engaged to fulfil customer orders;
• Professional advisers including lawyers, bankers, auditors, and insurers who provide consultancy, banking, legal, insurance, and accounting services;
• Regulators, tax authorities (including HM Revenue & Customs), and other public authorities who require reporting of processing activities in certain circumstances;
• Market research and advertising providers who help us improve our products and services and deliver relevant communications.

We require all third parties to whom we disclose your personal data to respect its security and to process it in accordance with the law. We only permit such third parties to process your personal data for specified purposes and in accordance with our documented instructions.

---

6. International Transfers

Countries outside of the United Kingdom and the European Economic Area (EEA) do not always offer the same levels of protection to your personal data. For this reason, transfers of personal data outside of the UK and EEA are only permitted where appropriate safeguards are in place.

Some of our third-party service providers are located outside the UK and EEA, which means their processing of your personal data will involve a transfer of data internationally.

Whenever we transfer your personal data out of the UK and EEA, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

• We will only transfer your personal data to countries which have been granted an adequacy decision by the UK government or the European Commission, confirming that they provide an adequate level of protection for personal data; or
• Where we use service providers based in countries without an adequacy decision, we put in place legally binding agreements such as the UK International Data Transfer Agreement (IDTA) or the Standard Contractual Clauses (SCCs) approved by the UK or EU, together with supplementary measures where required, to ensure that your personal data is given equivalent protection; or
• In limited circumstances, where no other safeguard is available, we may obtain your explicit consent to the transfer. You may withdraw this consent at any time.

---

7. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered, or disclosed.

We also restrict access to your personal data to employees, agents, contractors, and other third parties who have a business need to know such data. They will only process your personal data on our documented instructions and are subject to duties of confidentiality and contractual obligations.

We have established procedures to deal with any suspected personal data breach. Where legally required, we will notify the applicable supervisory authority, and where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

---

8. Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. This is in line with the storage limitation principle under Article 5(1)(e) UK GDPR.

When determining the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process the data and whether those purposes can be achieved by other means, and applicable legal and regulatory requirements.

By law, we are required to keep basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for six years after they cease being customers for tax purposes.

In certain circumstances, you may ask us to delete your data. Further information about your rights is set out in Section 9 below.

In some cases, we may anonymise your personal data (so that it can no longer be associated with you). Anonymised data is not considered personal data under UK GDPR, and we may use such information indefinitely without further notice to you.

---

9. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data. These rights include the right to:

1. Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
2. Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data corrected, subject to verification of the accuracy of the new data you provide.
3. Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us to continue processing it.
4. Object to processing of your personal data where we rely on a legitimate interest (or those of a third party) and you wish to object because you believe it impacts your fundamental rights and freedoms. You also have the right to object where we process your personal data for direct marketing purposes.
5. Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in certain scenarios, for example if you want us to establish its accuracy or the reason for processing it.
6. Request the transfer of your personal data to you or to a third party. We will provide your personal data in a structured, commonly used, machine-readable format. This right applies only to automated information where you initially provided consent for us to use it or where we used the information to perform a contract with you.
7. Withdraw consent at any time where we are relying on consent to process your personal data. This will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw consent, we may not be able to provide certain products or services to you. We will inform you if this is the case when you withdraw consent.

If you wish to exercise any of the rights set out above, please contact us at enquiries@antiquejewellery.store.

You will not have to pay a fee to access your personal data or to exercise any of your other rights. However, in accordance with Article 12(5) UK GDPR, we may charge a reasonable fee, or refuse to act on the request, if your request is manifestly unfounded, repetitive, or excessive.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to request further information in relation to your request to assist us in responding.

We aim to respond to all legitimate requests within one month. In some circumstances, in accordance with Article 12(3) UK GDPR, this period may be extended by up to two further months if your request is particularly complex or if you have made a number of requests. In such cases, we will notify you of the extension and keep you informed of progress.

No Detriment

You will not be disadvantaged or discriminated against for exercising any of your rights under data protection law.

---

10. Third-Party Links

Our website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you.

We do not control these third-party websites and are not responsible for their privacy notices or policies. When you leave our website, we encourage you to read the privacy notice or policy of every website you visit.

This privacy notice does not apply to sales made through third-party marketplaces. If you purchase goods from us via such platforms, your personal data will also be processed in accordance with the privacy policy of that marketplace in addition to this notice.

---

11. Cookies

You can configure your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies. Please note that if you disable or refuse cookies, some parts of this website may become inaccessible or may not function properly.

We use cookies and similar technologies to distinguish you from other users of our website. This helps us to provide you with a better browsing experience and also allows us to improve our website, products, and services.

For detailed information about the cookies we use, the purposes for which we use them, and how you can manage your cookie preferences, please refer to our Cookie Policy [insert link].

---

12. Lawful Basis

Under UK GDPR, we must have a lawful basis to process your personal data. The lawful bases we rely on are as follows:

Legitimate Interests

This means the interests of our business in conducting and managing our operations to enable us to provide you with the best products and services and to ensure a secure and efficient experience. Before processing personal data on this basis, we carry out a balancing test to ensure that our legitimate interests are not overridden by your interests, rights, or freedoms. We do not use your personal data for activities where our interests are overridden, unless we have your consent or are otherwise required or permitted to by law. You may request further information about our legitimate interest assessments by contacting us.

Performance of a Contract

This means processing your personal data where it is necessary to perform a contract to which you are a party, or to take steps at your request before entering into such a contract.

Compliance with a Legal or Regulatory Obligation

This means processing your personal data where it is necessary for compliance with a legal or regulatory obligation that we are subject to.

Consent

This means where you have voluntarily provided your consent for us to process your personal data for a specific purpose, such as receiving marketing communications. Consent must be freely given, specific, informed, and unambiguous. You may withdraw your consent at any time by contacting us. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

---

13. Changes to This Notice and Contact Details

We may update this privacy notice from time to time. Any changes we make will be posted on this page, and where appropriate we will notify you by email. We encourage you to review this notice regularly to stay informed about how we process your personal data.

If you have any questions about this privacy notice, including any requests to exercise your legal rights, please contact us at enquiries@antiquejewellery.store