Privacy Policy
Last updated: 7 August 2026. This policy is under legal review and may be updated before launch.
Who we are
Moyoni is a jewellery brand selling directly to customers through this website. For the purposes of UK data protection law we are the data controller for the personal data described below.
Contact for any privacy question or request: see our contact page.
[TO BE COMPLETED BEFORE LAUNCH: registered company name, company number, registered address, and ICO registration number if applicable.]
What we collect, and why
We only collect what we need to run the shop. We do not sell your data to anyone.
- Order information — your name, email address, delivery address and phone number (if you give one). We need this to take payment, deliver your order and handle returns.
- Account information — if you create an account, your email address and a securely hashed password. We never store your password itself.
- Basket and wishlist — the items you add, so they are still there when you come back.
- Messages you send us — anything you write through the contact form, so we can reply.
- Newsletter — your email address, only if you ask to receive marketing.
- Technical data — your IP address and browser information, recorded briefly to keep the site secure (for example to limit repeated failed logins).
Our lawful bases
- Performance of a contract — processing and delivering your order, and handling returns.
- Legal obligation — keeping sales and tax records for the period required by law.
- Legitimate interests — keeping the site secure and preventing fraud and abuse.
- Consent — analytics and marketing cookies, and marketing emails. You can withdraw consent at any time, and withdrawing it is as easy as giving it.
Cookies
Some cookies are strictly necessary and cannot be turned off, because the site cannot work without them: your login session, your basket, and the cookie that remembers your cookie choice.
Analytics and marketing cookies are only set if you agree. They are not loaded at all until you choose — refusing costs you nothing and the site works exactly the same. You can change your mind at any time by clearing this site's cookies in your browser, which will bring the choice back.
Who we share it with
We share personal data only with the service providers we need to run the shop, and only what they need:
- our payment provider, to take payment (we never see or store your full card details);
- our delivery partners, to deliver your order;
- our email provider, to send order confirmations and password resets;
- our hosting provider, which stores the site and its database.
Some of these providers may process data outside the UK. Where they do, the transfer is covered by the safeguards required under UK data protection law.
How long we keep it
Order and transaction records are kept for the period required by UK tax law. Account data is kept while your account is open. Contact messages are kept while we deal with your query and for a short period afterwards.
[TO BE COMPLETED BEFORE LAUNCH: exact retention periods per category, confirmed against the business's accounting practice.]
Your rights
Under UK GDPR you have the right to ask us to: give you a copy of your data; correct it; delete it; restrict or object to how we use it; and provide it in a portable format. Where we rely on consent, you can withdraw it at any time.
To make a request, contact us. We will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
Security
Passwords are stored using a modern one-way hashing algorithm and cannot be read by us or recovered. Access to the store's admin area is restricted to the owner.
Children
This site is not intended for children and we do not knowingly collect data from anyone under 16.
Changes
If we change this policy we will update the date at the top of this page.