Privacy Policy

Who I Am

Ghost Root is a small UK jewellery business run by a single maker. I'm responsible for the personal information collected through this website. If you have any questions about this policy or your information, email me at ghostroot.chains@gmail.com.

What I Collect and Why

Orders. When you buy something I collect your name, email address, delivery address and what you ordered, so I can make, send and support your order. Payments are handled by Stripe ✧ I never see or store your card details.

Your account. If you log in, I keep your email address and link your orders to it so you can see your order history and track deliveries.

Your basket.Your basket is saved in your browser so it's still there when you come back. A copy of what's in it (the products and quantities, with a random basket ID) is also saved on the website's server, so I can see which pieces people are interested in but don't go on to buy. If you're logged in, the basket is linked to your account email; if you're not, it's anonymous. I don't send reminder emails about unfinished baskets.

Emails you sign up for. If you sign up for restock alerts and new drops, or ask to be told when a sold-out piece is back, I keep your email address to send you those emails. Every one of them has an unsubscribe link, and you can stop them at any time.

Messages and reviews. If you use the contact form, I receive your name, email address and message so I can reply. If you leave a review, your star rating and comment are shown on the reviews page once approved ✧ your name and email are not shown.

Legal Basis

I use your information to fulfil your order or provide your account (contract), to send emails you've signed up for (consent), to keep records the law requires, such as for tax (legal obligation), and to reply to messages and understand how the shop is used, like the basket information above (legitimate interests).

Cookies and Browser Storage

This website doesn't use advertising or analytics cookies. It only uses a cookie to keep you logged in, and your browser's storage to remember your basket, your light or dark theme, and whether you've already seen the sign-up popup. These are needed for the site to work the way you'd expect.

Who Your Information Is Shared With

I never sell your information. It's only shared with the services that run the shop: Stripe (payments), Vercel (website hosting), Neon (database, hosted in London) and Resend (sending emails), plus the postal service delivering your order. Some of these companies may process information outside the UK, in which case they're required to protect it to UK standards.

How Long It's Kept

Order records are kept for six years, as required for tax purposes. Basket copies are deleted after 30 days. Your account and email sign-ups are kept until you ask me to delete them.

Your Rights

You can ask for a copy of the information I hold about you, and ask me to correct it, delete it, or stop using it. Just get in touch or email me directly. If you're unhappy with how your information has been handled, you can also complain to the Information Commissioner's Office (ico.org.uk).