Privacy Policy

This policy explains what happens to personal data in connection with this website. It is written to the UK GDPR and the Data Protection Act 2018, and to the EU GDPR, because we offer to deliver worldwide and expect visitors from the EU as well as the UK.

The short version: this website has no forms, no accounts and no cookies. It does not ask you for anything and there is nothing for you to submit. The only personal data it generates is what is unavoidable in serving a web page, plus privacy-preserving analytics. Anything you choose to tell us happens elsewhere — in a WhatsApp message, an email or a phone call.

Who is responsible

The data controller is JB Jewellers LTD, a company registered in England and Wales.

Company

JB Jewellers LTD

Company no.

12174701

VAT no.

518 4958 54

Address

The Maylands Building, Hemel Hempstead HP2 7TG

Email

contact@jbjewellers.com

What this website collects

Nothing you type

There is no contact form, no newsletter signup, no account and no checkout. The website does not receive, transmit or store anything you enter, because there is nothing to enter.

Analytics

We use Vercel Web Analytics to understand which pages are read and which pieces are enquired about. It is deliberately chosen because it is cookieless: it sets no cookies, stores nothing on your device, and does not build a profile of you or follow you to other websites.

For each page view it processes:

• the page path you viewed, and the referring page if there was one
• your approximate location, at country level only
• your browser and device type, and the screen size bracket
• a one-way hash derived from your IP address and browser, used to count a repeat visit within the same day

Your IP address is not stored. It is used to generate that daily hash and then discarded. The value that makes the hash is rotated every 24 hours, so the same visitor on two different days cannot be connected.

We also record a small number of events so we can tell which pieces generate interest: a click on “Enquire about this piece” (recorded with the model and reference number of the watch), clicks on the main calls to action, and clicks through to our Chrono24 dealer page. These record that a click happened and on what — never who made it.

Hosting and security

The site is hosted by Vercel. As with any website, their servers process your IP address and request headers for the time it takes to deliver the page, and retain short-lived logs to keep the service running and defend against attacks and abuse.

Cookies

This website sets no cookies at all — not essential ones, not analytics ones, not advertising ones. That is why you were not shown a consent banner: there is nothing to consent to. There is no separate cookie policy for the same reason.

Why we are allowed to do this

Our lawful basis for analytics, and for the server logs that keep the site available, is legitimate interests (Article 6(1)(f)): we need to understand whether the site works and which stock draws interest in order to run the business. We have weighed that against your privacy and concluded it is proportionate, because the analytics are cookieless, aggregated, contain no identifier that persists beyond a day, and are never used to target you.

Because no cookies or similar technologies are stored on or read from your device, the Privacy and Electronic Communications Regulations (PECR) consent requirement is not engaged.

If you contact us, our basis for replying is legitimate interests, or the steps taken at your request before entering a contract (Article 6(1)(b)) where you are enquiring about a purchase or sale.

If you contact us

The enquiry links on this site open WhatsApp, your email client, or Instagram. Those are not part of this website.

In particular: when you message us on WhatsApp, your phone number, your message and associated metadata are handled by Meta Platforms, Inc. under Meta’s own terms and privacy policy, not ours. We have no control over what Meta collects or how long it keeps it. The same applies to Instagram. If you would rather not involve Meta, email or telephone us instead — both reach the same person.

Whatever you send us directly, we use only to answer you and to carry out any transaction that follows. We do not sell it, share it for marketing, or add you to a mailing list.

Who else sees your data

• Vercel Inc. — hosting and analytics, acting as our processor under a data processing agreement
• Meta Platforms, Inc. — only if you choose to contact us through WhatsApp or Instagram, and as an independent controller rather than our processor
• Our accountants, insurers and professional advisers, and HMRC, where a completed transaction requires it
• Law enforcement or a regulator, where we are legally required to disclose

We do not sell personal data. We have never done so.

Where your data goes

Vercel is established in the United States and its infrastructure is global, so analytics and log data may be processed outside the UK and the EEA. Those transfers rely on the UK International Data Transfer Addendum and the European Commission’s Standard Contractual Clauses, together with the additional safeguards in Vercel’s data processing agreement.

How long it is kept

• Analytics — retained in aggregate by Vercel according to our plan’s retention period. No identifier within it survives longer than 24 hours.
• Server logs — short-lived, and kept only for operational and security purposes.
• Correspondence — kept while we are dealing with your enquiry and for a reasonable period afterwards. Where an enquiry becomes a transaction, records are kept for six years to meet HMRC and Companies Act requirements.

Your rights

Under the UK and EU GDPR you have the right to ask us for a copy of the personal data we hold about you, to have it corrected or erased, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on legitimate interests — as we do for analytics — you have the right to object, and we will stop unless we have compelling grounds not to.

In practice, the cookieless analytics described above contain no identifier that we could use to find “your” data, so for those we may be unable to act on a request without additional information that identifies you. That is a consequence of the data being genuinely non-identifying, not a refusal.

To exercise any right, email contact@jbjewellers.com. We will respond within one month. Exercising these rights is free.

Complaints

If you are unhappy with how we have handled your data, please tell us first and we will try to put it right. You also have the right to complain to a supervisory authority.

In the UK that is the Information Commissioner’s Office — ico.org.uk, helpline 0303 123 1113. If you are in the EU, you may complain to the supervisory authority in your own country of residence or workplace.

Children

This site is aimed at adult buyers and collectors. We do not knowingly collect data relating to children.

Changes

If this policy changes we will update the date at the top of the page. The version you are reading is the one in force.