Privacy policy

Who we are

We are the UK business that operates this service and acts as the data controller for the personal data described below. If you have any questions about your data or this policy, please contact our data protection contact using the details on our contact page.

What we collect

Depending on how far you go through the process, we may collect:

• Contact details — your name, email address, phone number and postal address so we can send a pack, keep you updated and arrange your payout.
• Photos and item information — images and descriptions of your items (such as carat, weight estimates and notes) so we can give you a guide price and prepare an offer.
• Payout details — your bank account details to pay you, and identity documents where we need to verify who you are.
• Identity and verification data — proof of identity and related checks (KYC) carried out to meet our anti-money-laundering obligations.
• Service data — records of your orders, messages with us, and technical information needed to run and secure the website.

Why we use your data — our lawful bases

We only use your data where the law allows. The bases we rely on are:

• Performance of a contract — to provide an estimate, process your items, make an offer and pay you.
• Legitimate interests — to operate, secure and improve our service, prevent fraud, and keep records of our dealings with you, balanced against your rights.
• Consent — for any marketing messages. We only send these if you have opted in.
• Legal obligation — to carry out identity and anti-money-laundering (AML) checks and to keep the records the law requires.

Marketing

We will only send you marketing if you have given us explicit, opt-in consent — it is never bundled in with getting a quote or selling to us. You can withdraw your consent at any time, with no effect on the service you receive, by using the unsubscribe link in any message or by contacting us. Withdrawing consent does not affect any messaging we are legally required to send about an order you have already placed.

How long we keep your data

We keep personal data only for as long as we need it. Retention periods are configurable and are set to no longer than necessary for the purpose, except where a longer period is required by law — for example, the records we must keep for anti-money-laundering and tax purposes.

You can ask us to delete data we hold about you (your right to erasure). Where we are legally required to keep certain records, we will tell you and retain only what the law requires before deleting the rest.

How we keep your data secure

• Bank and identity details are encrypted at rest.
• Access to personal data is restricted and logged so we can monitor who views what.
• Location data is stripped from your photos — EXIF and GPS metadata are removed when images are uploaded.
• Your data is stored within the UK or EU (UK/EU data residency).

Third parties we share data with

We use trusted providers to deliver the service. We share only the data each provider needs, under contracts that require them to protect it. These include:

• Payment providers — to process your payout.
• Identity verification (KYC) providers — to carry out the checks the law requires.
• Shipping and courier partners — to send and return packs and items.
• Email and SMS providers — to send service updates and, where you have opted in, marketing.

We do not sell your personal data. Testing and returns of your items are always free.

Your rights

Under UK data protection law you have the right to:

• be informed about how your data is used;
• access a copy of the data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to how we use your data;
• data portability;
• withdraw consent for marketing at any time.

To exercise any of these rights, please contact us using the details on our contact page. We will respond within the time limits set by law.

How to complain

If you have a concern, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk.