Privacy Policy

Last updated: 8 September 2026

Knightley is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use and protect your personal information when you visit our website, create or use a customer account, place an order, subscribe to our marketing communications, contact us or otherwise interact with Knightley.

For the purposes of UK data protection law, Knightley is the data controller of the personal information described in this policy.

Our website and online store are powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services to you.

1. Information we collect

Personal information means information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised so that you can no longer be identified.

Depending on how you interact with Knightley, we may collect and process the following types of personal information:

Identity Data — including your name and other identifying information you provide to us.

Contact Data — including your billing address, delivery address, email address and telephone number where provided.

Transaction Data — including details of products you purchase, payments, orders, returns and refunds.

Financial Data — including information required to process payments. Payments made through our website are processed by our payment providers and we do not ordinarily receive or store your complete payment card details ourselves.

Account Data — including information associated with your Knightley customer account, such as your contact information, saved addresses, order history and account preferences.

Technical Data — including your IP address, browser type, device information and other technical information relating to your use of our website.

Usage Data — including information about how you browse and interact with our website, pages and products.

Marketing and Communications Data — including your marketing preferences, whether you have subscribed to or unsubscribed from our marketing communications, and information relating to communications we send to you.

Correspondence Data — including information you provide when you contact us, make an enquiry, complete a contact form or communicate with our customer care team.

2. How we collect your information

We collect personal information in a number of ways, including:

• directly from you when you place an order, create or use a customer account, subscribe to marketing communications, complete a form, contact us or otherwise provide information to us;
• automatically when you visit and use our website, including through cookies and similar technologies; and
• from service providers and other third parties that help us operate our website, process payments, fulfil and deliver orders, prevent fraud and provide our services.

3. How and why we use your information

We will only use your personal information where we have a lawful basis for doing so.

To process and fulfil your orders

We use Identity Data, Contact Data, Transaction Data and relevant Financial Data to process your payment, fulfil your order, arrange delivery and deal with returns, refunds and other matters relating to your purchase.

Lawful basis: Performance of a contract with you.

To create and manage your customer account

Where you choose to use a Knightley customer account, we use your Identity Data, Contact Data, Account Data and Transaction Data to provide and manage your account, enable you to access relevant account features and view information relating to your orders.

Lawful basis: Performance of a contract with you and our legitimate interests in providing a convenient and personalised customer experience.

To provide customer care

We use Identity Data, Contact Data, Transaction Data and Correspondence Data to respond to enquiries, assist with orders, resolve problems and provide customer support.

Lawful basis: Performance of a contract with you and, where appropriate, our legitimate interests in providing effective customer service.

To meet our legal and regulatory obligations

We may retain and use personal information where necessary to comply with legal, accounting, tax, regulatory or other obligations that apply to us.

Lawful basis: Legal obligation.

To operate, understand and improve our website and business

We may use Technical Data and Usage Data to operate and maintain our website, understand how visitors use it, measure its performance, improve our website, products and customer experience and understand the effectiveness of our marketing.

Lawful basis: Our legitimate interests in operating, understanding and improving our business and, where consent is required for cookies or similar technologies, consent.

To protect Knightley and our customers

We may use Identity Data, Contact Data, Transaction Data and Technical Data where reasonably necessary to maintain the security of our website, protect our customers and detect, investigate or prevent fraudulent, unauthorised or unlawful activity.

Lawful basis: Our legitimate interests in protecting our business and customers and, where applicable, legal obligation.

4. Marketing

Where you have chosen to receive marketing communications from Knightley, we may use your Identity Data, Contact Data, Marketing and Communications Data and information about your interactions with Knightley to send you news about our products, collections and other updates that we think may interest you.

Where required by law, we will obtain your consent before sending electronic marketing communications.

You can unsubscribe from marketing emails at any time by selecting the unsubscribe link contained within our emails.

Unsubscribing from marketing will not prevent us from sending you service communications that are necessary in connection with your purchases or customer account, such as order confirmations, delivery updates or information about a return.

Lawful basis: Consent where required by law. In circumstances where consent is not required, we may rely on our legitimate interests where permitted by applicable law.

We will respect your marketing preferences and your right to object to direct marketing.

This wording gives you flexibility without saying that every customer will automatically receive marketing. ICO guidance recognises both consent and legitimate interests as potential lawful bases for direct marketing depending on the circumstances, while PECR can specifically require consent for electronic marketing.

5. Cookies and similar technologies

Our website uses cookies and similar technologies to operate the website, remember preferences, understand how the website is used and, where applicable, support analytics, personalisation and marketing.

Some cookies are necessary for our website to function. Other cookies and similar technologies may be used to help us understand how visitors interact with our website, measure performance or support marketing and advertising.

Where consent is required by law, these technologies will only be used after you have provided the appropriate consent.

You can manage your cookie preferences using the cookie controls available on our website.

6. Who we share your information with

We may share personal information with trusted third parties where necessary to operate Knightley and provide our products and services, including:

• Shopify, which hosts and powers our online store and customer account functionality;
• payment providers;
• delivery and fulfilment providers;
• technology, website hosting and IT service providers;
• analytics and marketing providers, where applicable;
• professional advisers such as accountants or legal advisers where necessary; and
• government authorities, regulators or law enforcement bodies where we are legally required to do so.

We only share personal information where necessary and appropriate for the relevant purpose.

We may also disclose personal information in connection with a sale, transfer or restructuring of all or part of our business, subject to appropriate safeguards.

7. Shopify

Our online store is hosted and powered by Shopify.

Shopify processes certain personal information when you visit our website, use a customer account or make a purchase in order to provide its ecommerce services to us and to you.

Information submitted through our website may therefore be processed by Shopify and its service providers.

You can find further information about how Shopify processes personal information in the Shopify Consumer Privacy Policy.

8. International transfers

Some of the service providers we use, including Shopify and its service providers, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law to ensure that your information receives an appropriate level of protection.

These safeguards may include transfers to countries covered by UK adequacy regulations or the use of approved contractual safeguards.

9. How long we keep your information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, maintaining customer accounts, providing customer service and satisfying legal, accounting, tax and regulatory requirements.

The length of time we retain information will depend on the nature of the information and the reason we hold it.

Where you unsubscribe from marketing communications, we may retain limited information necessary to record your preference and ensure that we respect your request.

10. Security

We take appropriate technical and organisational measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

If you have a Knightley customer account, you should take reasonable steps to protect access to your account and should not allow anyone else to access it without your permission.

11. Your rights

Under UK data protection law, you may have a number of rights in relation to your personal information, including the right to:

• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request deletion of your personal information in certain circumstances;
• request restriction of the way we process your personal information in certain circumstances;
• object to certain processing of your personal information;
• request the transfer of certain personal information to you or another organisation;
• withdraw your consent at any time where we rely on consent to process your information; and
• object to the use of your personal information for direct marketing.

These rights are subject to certain legal conditions and exemptions.

If you would like to exercise any of these rights, please contact us at customercare@knightleyjewellery.co.uk.

We may need to request information from you to confirm your identity before responding to your request.

12. Children's privacy

Our website is not intended for children and we do not knowingly collect personal information from children.

13. Third-party websites

Our website may contain links to websites operated by third parties.

Knightley is not responsible for the privacy practices of websites that we do not control. We recommend reviewing the privacy information provided by those websites before providing them with personal information.

14. Complaints

If you have a concern about the way we collect or use your personal information, please contact us in the first instance and we will do our best to resolve it.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Information Commissioner's Office – make a data protection complaint

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, our website, the services we use or applicable law.

When we make changes, we will publish the updated Privacy Policy on our website and update the date shown at the top of this page.

16. Contact us

If you have any questions about this Privacy Policy, our privacy practices or the personal information we hold about you, or if you would like to exercise your data protection rights, please contact us at:

Email: customercare@knightleyjewellery.co.uk

For the purposes of applicable UK data protection law, Knightley is the data controller of your personal information.