Privacy policy
Last updated: 3 November 2026
Hello, and thank you for visiting Aimos. I'm Amy, and I design and make fine jewellery by hand in my London studio. This policy explains, as simply as I can, what personal information I collect when you browse aimos.co.uk, buy from me, commission a bespoke piece or send a ring for resizing or repair, and what I do with it.
If anything here is unclear, just email info@aimos.co.uk and I'll be happy to explain.
1. Who we are
"Aimos", "we", "us" and "our" mean Aimos Jewellery Ltd, a private limited company registered in England and Wales.
- Company number: 14657407
- Address: The Biscuit Factory Business Complex, Unit TB K404, Drummond Road, Southwark, London SE16 4DG
- Email: info@aimos.co.uk
- VAT number: 439384070
Aimos Jewellery Ltd is the "controller" of your personal information, which means we decide how and why it is used and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
We're a small business, so we haven't appointed a formal Data Protection Officer. Amy Cottee, our director, looks after data protection. Please send any privacy questions or requests to info@aimos.co.uk.
2. What we collect and why
When you buy from our online shop
Our shop and checkout are run on Squarespace Commerce. When you place an order we collect:
- your name, email address, billing and delivery addresses and (if you choose to give it) phone number;
- what you ordered, ring sizes, engraving wording or other notes you add, and your order history;
- payment details. We never see or store your full card number. Payments are handled securely by Stripe (cards, Apple Pay/Google Pay, and pay-later options such as Klarna or Clearpay where offered) or by PayPal if you choose to pay that way. We receive only limited information such as the last four digits of your card, the card type and whether the payment succeeded.
We use this to take payment, make and deliver your jewellery, send order and dispatch emails, handle returns and refunds, and keep the business and tax records the law requires.
If you sign up to be notified when a product is back in stock, we use your email address only to send that notification. After you've received an order, Squarespace may also email you once on our behalf to ask whether you'd like to leave a product review.
When you ask about a bespoke piece
Our bespoke enquiry form asks for your name, email address, the type of piece and materials you're interested in, your budget, any date you're working towards, a description of your idea, and any inspiration images you choose to upload. If we go on to work together we'll also keep our emails, sketches, CAD designs, quotes, measurements (such as finger size), and details of any stones or heirloom pieces you give us to use.
Bespoke pieces are often for engagements, weddings or other personal moments. Please don't feel you need to tell us more than is needed to design your piece.
When you send us something for resizing or repair
We record your name, contact details, return delivery address, a description and photos of the item and its condition, what work you've asked for, and payment details.
When you contact us
If you use our contact form, email us or message us on Instagram or Facebook, we'll keep your name, contact details and what you've told us so that we can reply and keep a record of our conversation.
Our mailing list
If you choose to join our mailing list (through the sign-up pop-up, a sign-up form on the site, or the tick-box at checkout), we keep your email address and, where you give them, your name and preferences, so we can send you news about new pieces, studio updates, sales and early access. The checkout tick-box is never pre-ticked. Our marketing emails are sent using our email marketing provider. You can unsubscribe at any time using the link in every email, or by emailing us.
When you browse our website
- Squarespace analytics. Squarespace (which hosts our website) uses cookies to count visitors and show us anonymised statistics such as popular pages, where visitors came from and cart abandonment. It also records technical information such as your IP address, browser and device type to deliver and secure the site.
- Meta Pixel. We use the Meta (Facebook/Instagram) Pixel to measure how well our ads on Facebook and Instagram work and to show our ads to people who have visited our site. It sends Meta information such as the pages you view, items added to your basket and purchases, together with an identifier stored in a cookie and technical details about your device. We will only use the Meta Pixel if you agree to marketing cookies (see our Cookie Policy).
- Spam and fraud protection. Our forms and checkout use Google reCAPTCHA (provided through Squarespace) and Stripe's fraud-prevention tools, which look at information such as your IP address and how you interact with the page to tell people apart from bots and protect payments.
Full details are in our Cookie Policy.
3. Our lawful bases
Data protection law says we must have a valid reason ("lawful basis") for using your information. Ours are:
| What we do | Lawful basis |
|---|---|
| Taking and fulfilling orders, bespoke commissions, resizes and repairs; returns and refunds; answering your questions about an order | Contract — we need it to do what you've asked us to, or to take steps at your request before entering into a contract (for example, preparing a bespoke quote) |
| Keeping accounting, VAT and tax records | Legal obligation (UK company and tax law) |
| Replying to general enquiries; keeping the site, forms and payments secure and free of fraud and spam; improving our designs and service; keeping records in case of a dispute or claim | Legitimate interests — running and protecting a small jewellery business in a way you'd reasonably expect, balanced against your rights |
| Marketing emails and the mailing list | Consent — you can withdraw it at any time |
| Squarespace analytics cookies and the Meta Pixel (marketing cookies) | Consent, as required by PECR — you can change your mind at any time |
| Strictly necessary cookies (for example, your basket and checkout) | No consent needed under PECR because the site can't work without them; our lawful basis for the related data is legitimate interests / contract |
We don't use your information to make automated decisions that have legal or similarly significant effects on you.
4. Who we share it with
We never sell your personal information. We share it only with trusted service providers who help us run the business, and only as much as they need:
- Squarespace — hosts our website, online shop, checkout, forms and analytics.
- Stripe — card and other payment processing, including fraud checks (and pay-later providers such as Klarna or Clearpay if you choose them; they will also handle your information under their own privacy policies).
- PayPal — if you choose to pay with PayPal.
- Meta Platforms (Facebook and Instagram) — for the Meta Pixel, if you consent to marketing cookies, and when you message us on Instagram or Facebook.
- Google — reCAPTCHA spam protection on our forms and checkout.
- Our email marketing provider — to store our mailing list and send our marketing emails.
- Our email hosting provider — to host our email account, info@aimos.co.uk.
- Royal Mail, DHL and other couriers — your name, delivery address and sometimes your email or phone number, so they can deliver your parcel and send tracking updates.
- Our accountant and accounting software (Intuit QuickBooks), for bookkeeping, VAT and tax.
- Specialist jewellery workshops — we sometimes work with trusted specialist jewellery workshops (such as casting houses, CAD designers and stone setters). We share only the information they need to make your piece.
- Professional advisers, insurers and authorities — where needed to take advice, deal with a claim or dispute, or where the law requires it (for example HMRC, the police or a court).
If the business is ever sold or restructured, your information may be passed to the new owner so that they can continue to look after your orders, under the same protections.
5. International transfers
Some of our service providers (including Squarespace, Stripe, PayPal, Meta and Google) are based in, or use servers in, the United States or other countries outside the UK. Where your information is transferred outside the UK, we rely on the protections required by UK law, such as the UK–US "Data Bridge" for certified US companies, the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, which these providers build into their terms. You can ask us for more information about this.
6. How long we keep it
We keep personal information only for as long as we need it:
| Information | How long |
|---|---|
| Orders, invoices, payments, returns and refunds | Six years from the end of the financial year they relate to, because HMRC requires us to keep company and VAT records for that long |
| Bespoke commissions (designs, CAD files, quotes, correspondence) | Six years after the piece is delivered, to match our tax records and so we can help with future resizes, repairs or remakes |
| Bespoke enquiries that don't go ahead | Two years after our last contact |
| Resizing and repair records | Six years, as they are part of our sales records |
| General enquiries and messages | Two years after our last contact |
| Mailing list | Until you unsubscribe; we then keep your email address on a suppression list so we don't email you again |
| Back-in-stock notification requests | Until the notification is sent or the product is removed |
| Cookies | See our Cookie Policy |
7. Your rights
You have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that's wrong or incomplete;
- ask us to delete your information (we may need to keep some records, such as order and tax records, for legal reasons);
- ask us to restrict how we use your information;
- object to us using your information where we rely on legitimate interests, and to stop direct marketing at any time;
- withdraw consent at any time, for example by unsubscribing from emails or changing your cookie settings (this doesn't affect anything we did before you withdrew it);
- data portability — ask us to send information you gave us to you or another organisation in a common electronic format, where we rely on contract or consent.
To use any of these rights, email info@aimos.co.uk. There's no charge, and we'll reply within one month. We may need to ask you for proof of identity first.
8. Keeping your information safe
We use reputable providers with strong security, keep access to customer information to the people who need it, use secure (HTTPS) connections across our website, and never store full card details ourselves.
9. Links and social media
Our site links to our Instagram and Facebook pages. If you follow those links, or interact with us there, Meta's own privacy policy applies to what Meta collects.
10. Complaints
If you're unhappy with how we've handled your information, please tell us first and we'll do our best to put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO):
- Website: ico.org.uk/make-a-complaint
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
11. Changes to this policy
We may update this policy from time to time, for example if we start using a new service. We'll post the latest version on this page with the date it was last updated, and if a change is significant we'll let you know by email or with a notice on the site.