Privacy Policy

Last updated: September 2, 2026

Button & Bloom Jewels ("we", "us", "our") operates this website to sell handmade button jewellery directly to customers. This Privacy Policy explains what personal information we collect when you visit or use this website, why we collect it, and what rights you have over it.

This site is built and run entirely in-house — we do not use Shopify or any other e-commerce platform to operate the store. The only third parties involved in processing your information are described below.

Who we are

Button & Bloom Jewels is a small, independent handmade jewellery business based in Norfolk, England. For the purposes of data protection law, we are the "data controller" of the personal information described in this policy. You can contact us at buttonandbloomjewels@outlook.com.

Personal Information We Collect

We only collect information that you give us directly, through the forms on this website. We do not use tracking cookies, advertising pixels, or analytics services, and we do not buy or sell personal information.

• Contact form. If you send us a message, we collect your name, email address, and the content of your message. This is delivered to our inbox by FormSubmit, a third-party form processing service (see "Third parties" below).
• Reviews. If you leave a review, we collect your name, your rating and comment, and, if you provide one, your email address and a photo. Your email address is used only to match your review to an order and to say thank you — it is never shown publicly. Your name, rating, comment, and any photo are shown publicly on our Reviews page once approved.
• Orders. If you buy something, we collect your name, email address, and delivery address, so that we can fulfil and post your order. This information is stored securely on our website so we know what to send and where.
• Payment details. We do not collect or store your card details ourselves. Card payments are handled directly by SumUp inside a secure payment window on our checkout page — your card number and other payment details go straight to SumUp and never pass through or get stored on our own server. See "Third parties" below.
• Shopping basket. While you're browsing, the items in your basket are stored in your own browser (not on our server) so they're still there if you come back later. This is automatically cleared when you place an order or clear your browser's site data.

Cookies

This website uses one strictly necessary session cookie, which allows the website to function correctly (for example, keeping our admin area secure). We do not use any cookies for advertising, tracking, or analytics purposes.

How We Use Your Personal Information

• To respond to your enquiries sent through the contact form.
• To process, dispatch, and provide customer support for your order.
• To display your review (and photo, if provided) on our Reviews page, once approved.
• To let you know once your order has been dispatched, including tracking information where available.
• To invite you, after your order has been dispatched, to leave a review if you haven't already — this is sent to you directly by us, not automatically, and only ever once per order.
• To comply with our legal obligations, for example keeping records for tax purposes.

Third Parties

We use a small number of trusted third-party services to run this website. Each only receives the information it needs to do its job:

• FormSubmit — delivers messages from our contact form to our email inbox. FormSubmit processes the name, email, and message you enter; we don't control their servers directly. You can read more at formsubmit.co/privacy-policy.
• SumUp — processes card payments made at checkout. When you pay, your card details are entered directly into a secure payment window provided by SumUp; we only ever receive confirmation of whether the payment succeeded, never your card details themselves. You can read SumUp's own privacy policy at sumup.com/en-gb/privacy-policy.
• Our hosting provider — our website and the information described in this policy (orders, reviews, messages) are stored securely on servers provided by our web hosting company.

We do not share your personal information with anyone else, and we never sell your information to third parties.

How Long We Keep Your Information

We keep order information for as long as needed to fulfil your order, handle any returns or queries, and meet our legal and accounting obligations. We keep reviews for as long as they remain relevant and helpful to other customers, unless you ask us to remove one. You can ask us to delete your information at any time using the contact details below, and we will do so unless we're legally required to keep it (for example, financial records).

Security

We take reasonable steps to keep your information secure, including restricting access to our order and review records behind a password-protected admin area. However, no method of storing or transmitting information online is ever completely secure, and we cannot guarantee absolute security.

Children's Data

This website is not directed at children, and we do not knowingly collect personal information from children. Some of our jewellery contains small parts and is not suitable for children under 3 years, as noted on our product packaging.

Your Rights

If you are in the UK, you have a number of rights under UK data protection law in relation to your personal information, including the right to:

• Access the personal information we hold about you.
• Correct any information that is inaccurate or incomplete.
• Delete your personal information, in certain circumstances.
• Object to or restrict how we use your information.
• Receive a copy of your information in a portable format.

To exercise any of these rights, please contact us at buttonandbloomjewels@outlook.com. We will respond as quickly as we can, and in any event within one month.

Complaints

If you have a concern about how we've handled your personal information, please contact us first so we can try to put things right. You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.

Changes to This Privacy Policy

We may update this policy from time to time, for example if we start using a new service or change how the website works. We'll update the "Last updated" date at the top of this page whenever we do.

Contact

If you have any questions about this Privacy Policy or how we handle your information, please email us at buttonandbloomjewels@outlook.com.