Privacy

Duygu SARIDENIZ SEYHAN, trading as Sarideniz Jewellery, is the data controller responsible for your personal information. Our business and postal contact address is 22/3 Glen Street, Edinburgh, EH3 9JE, Scotland, United Kingdom. For privacy questions or to exercise your information rights, email support@sarideniz.co.uk.

If you email us directly, your message and contact details are real personal information.

We receive the name, email address, telephone number, delivery address, items and order details that you provide. We use these to prepare an order, arrange delivery, handle returns and answer enquiries about a purchase. The lawful basis is taking steps at your request before a contract, or performing that contract. For general enquiries and feedback unrelated to a purchase, we rely on our legitimate interest in responding to people who contact our shop.

We use necessary technical information, including connection and request data, to protect checkout, prevent abuse and resolve errors. Our lawful basis is our legitimate interest in running a reliable and secure shop. Where records must be kept for tax or other legal duties, we rely on legal obligation.

Card details are entered on SumUp’s hosted payment page. We receive payment references and status; Sarideniz does not collect or store your full card number or security code. An order email is a service message, not a newsletter subscription.

Our service providers include Vercel for hosting, Supabase for our database and Admin sign-in, SumUp for hosted payments, Resend for order emails, and ImprovMX and Gmail for business email. Royal Mail, or another carrier selected for an order, receives the details needed to deliver it.

Messages sent to our business email addresses are forwarded by ImprovMX to our Gmail inbox, where we keep correspondence and send replies. Automated order emails are sent separately through Resend. Payment and postal providers may also process information under their own legal obligations and privacy notices.

Our current Gmail inbox uses Google’s consumer service terms and privacy policy. Google does not offer a data-processing agreement or act as our data processor for consumer Gmail.

We share only what is needed for the relevant task. We do not sell customer information or use it to build advertising profiles.

Our providers may process information outside the UK, including in the European Economic Area, the United States and Singapore. A regional hosting or email-sending setting does not keep all support, delivery and account processing in that region.

UK adequacy regulations cover transfers to the European Economic Area. For other transfers, Vercel, Supabase and Resend publish data-processing terms incorporating Standard Contractual Clauses and the UK Addendum. These provide contractual protections for personal information and rights. Google describes its use of the UK Extension to the EU–US Data Privacy Framework for covered transfers to Google LLC, and contractual clauses where required.

Resend stores email content and delivery records in the United States, even when emails are sent from its Ireland region. Business email passes through ImprovMX to Gmail: ImprovMX receives messages in France and may use US infrastructure for onward delivery; Google processes information on servers around the world.

ImprovMX publishes a data-processing agreement containing Standard Contractual Clauses and the UK Addendum. We are confirming its contractual coverage for our current free forwarding account. Please avoid sending sensitive personal information by email. We will update this notice if the email arrangement changes.

For more information about the safeguards relevant to your information, or to request a copy, email support@sarideniz.co.uk. We may redact unrelated confidential information from a copy.

General enquiries and feedback: we normally delete correspondence within 12 months of the last substantive contact, unless it forms part of an order, complaint or legal matter that still needs to be retained.

Completed sales and necessary tax records: we keep the minimum order, payment, refund and related correspondence records until 5 years after the 31 January Self Assessment submission deadline for the relevant tax year. For example, records for the tax year ending 5 April 2027 would normally be kept until 31 January 2033. A late return, HMRC enquiry or other legal requirement may require longer retention.

Unsuccessful checkout: where no payment was taken, we normally remove or anonymise personal checkout details within 90 days after the attempt is closed. We first resolve any uncertain payment status; a paid or refunded transaction follows the sales-record rule instead.

Technical records: Resend’s standard email-content and delivery-log retention is 30 days on our current plan. Other providers apply their own service and security retention periods. Any additional troubleshooting copies we keep are normally removed within 90 days after the issue is resolved. Payment providers may retain their own records for legal obligations independently of our shop records.

We review records monthly and delete or anonymise information that is no longer needed. If a specific complaint, claim, fraud investigation or legal duty requires longer retention, we keep only the relevant information, restrict its use and review it again when that matter ends. Unnecessary delivery notes and contact details need not be kept for the full tax-record period.

These are manual review rules, not an automatic deletion timer. Deleted information may remain in restricted recovery backups until those backups are replaced or expire. Backup copies are not used for routine business, and relevant deletions must be reapplied if a backup is restored.

The shopping bag uses storage on your device to remember item identifiers and quantities between visits. It remains until you clear it or your browser removes it. Guest-order cookies normally last up to 30 days and link your browser to its order. Admin sign-in uses session cookies for authorised shop operators.

These functions support the service you request. The shop currently has no advertising or optional analytics code. Hosting and payment providers may use their own necessary security cookies. You can clear browser storage or block cookies, although the bag, checkout or sign-in may then stop working.

Depending on the lawful basis and circumstances, you can ask to access, correct or erase your information, restrict its use, object to processing, or receive a portable copy. Some information must be kept to meet legal duties. Contact us and we will explain what applies to your request.

You can also raise a concern with the UK Information Commissioner’s Office at ico.org.uk. Please contact us if you would like help resolving a concern first.

Last updated: 23 October 2026.