Last updated: 10 September 2026
1. Who we are
This website is operated by Ovadia (trading as Ovadia Jewellery), 20 Hatton Garden, Holborn, London EC1N 8BA, United Kingdom, VAT registration number GB 223657020 (“we”, “us”). We are the data controller for the personal data described in this policy. You can reach us through the contact form or by phone on +44 7903 181008.
2. What we collect and why
| When | Data | Purpose and legal basis | Kept for |
|---|---|---|---|
| You send an enquiry (contact form, phone, WhatsApp, showroom) | Name, email, phone number, budget range, your message, the date you accepted our terms | To answer you and, if you go ahead, to design and make your jewellery – performance of a contract / steps before a contract | Up to 3 years after our last contact, or as long as you are a customer plus 6 years for tax records |
| You subscribe to the newsletter | Email address, date of consent | To send you our newsletter – your consent, which you can withdraw at any time using the unsubscribe link | Until you unsubscribe |
| You buy from us | Name, address, contact details, order and payment references (we never store card numbers) | To fulfil the order, provide certificates and valuations and meet legal obligations | 6 years after the purchase (tax law) |
| You browse the site | Anonymised analytics (pages viewed, device, approximate location) – only if you accept optional cookies | To understand how the site is used and improve it – your consent | Up to 1 year; see the Cookie Policy |
3. Who processes your data for us
- LegoTechApps – operates the customer-enquiry system that receives contact-form submissions on our behalf and hosts this website. LegoTechApps acts as our processor under a data-processing agreement; its own privacy policy and terms describe how it protects data.
- Clicky (Roxr Software Ltd) – website analytics, only with your cookie consent.
- Vimeo – hosts our workshop video; loaded with Vimeo’s Do Not Track setting.
- Our email and accounting providers – to reply to you and keep the records the law requires.
We do not sell your data and we do not use it for automated decision-making. Where a provider stores data outside the UK, transfers are protected by the UK International Data Transfer Agreement or an adequacy decision.
4. Cookies
Essential cookies keep the site working; optional analytics cookies are set only if you accept them, and you can change your choice at any time from “Cookie preferences” at the bottom of every page. Full details are in our Cookie Policy.
5. Your rights
Under UK GDPR you can ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; move it to another provider; and withdraw consent at any time. To exercise a right, contact us through the contact form or by phone. We respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
6. Security
The site is served over HTTPS. Enquiries are stored in access-controlled systems, and only the people who need to answer you can see them. We never ask for card details by email or through the website.
7. Children
Our services are for adults. We do not knowingly collect data from anyone under 18.
8. Changes
We will post any changes on this page and update the date at the top. Significant changes will be highlighted on the website.