PRIVACY NOTICE POLICY
1. Introduction
1.1 We respect your privacy and are committed to protecting your personal data. This Privacy Notice explains how we collect, use, share, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1.2 This Notice applies when you visit our website, make purchases, contact us, or otherwise interact with De Vere Brilliance Limited (Trading as De Vere Brilliance) (“we”, “us”, “our”).
2. Personal Data We Collect
We may collect and process the following types of personal data:
Identity Data – name, title, date of birth, gender.
Contact Data – billing address, delivery address, email address, telephone numbers.
Financial Data – payment card details (processed securely via third-party providers, not stored by us).
Transaction Data – details of orders, payments, and fulfilment.
Technical Data – IP address, login data, browser type/version, time zone, operating system, platform, cookies.
Profile Data – purchase history, preferences, feedback, survey responses.
Marketing Data – your consent preferences for receiving communications.
Special Category Data – we do not intentionally collect special category (sensitive) data.
3. How We Collect Your Data
Directly from you (via orders, forms, email, phone, or chat).
Automatically through cookies and analytics tools when you visit our site.
From third parties such as payment processors, delivery partners, fraud prevention services, and social media platforms (if you interact with us there).
4. Purposes & Lawful Bases for Processing
We process your data for the following purposes under these lawful bases:
To process and deliver your order – contract performance.
To manage payments, fees, and charges – contract performance, legitimate interests.
To manage customer service queries and complaints – contract performance, legitimate interests.
To provide warranty, returns, and after-sales services – legal obligation, contract.
To comply with legal and regulatory requirements – legal obligation (e.g., anti-fraud, AML/KYC checks).
For marketing communications – consent (with opt-out rights).
To improve our website, services, and customer experience – legitimate interests.
For security, fraud prevention, and to protect our business – legitimate interests, legal obligation.
5. Cookies & Tracking
We use cookies and similar technologies for site functionality, analytics, and marketing. See our separate Cookie Policy for details and how to manage preferences.
6. Sharing Your Data
We may share your data with:
Payment processors and financial institutions.
Delivery and logistics providers.
IT service providers, website hosting, and analytics tools.
Professional advisers (lawyers, accountants, auditors).
Regulatory authorities (HMRC, ICO, law enforcement if legally required).
Alternative Dispute Resolution bodies (if you pursue a complaint).
We never sell your data to third parties.
7. International Transfers
Some partners (e.g., payment processors, cloud providers) may process data outside the UK.
We ensure such transfers comply with UK GDPR through adequacy decisions, Standard Contractual Clauses, or equivalent safeguards.
8. Data Retention
We retain personal data only for as long as necessary:
Orders & contracts: 7 years (legal/accounting).
Marketing consents: until withdrawn.
Customer service correspondence: up to 3 years.
Website analytics: as per Cookie Policy.
9. Security of Your Data
We use appropriate technical and organisational security measures to protect your data, including encryption, access controls, and secure servers.
10. Your Rights
Under UK GDPR, you have the right to:
Access your data (subject access request).
Rectify inaccurate or incomplete data.
Erase your data (right to be forgotten).
Restrict or object to processing.
Request portability of your data.
Withdraw consent at any time (where processing is based on consent).
Complain to the Information Commissioner’s Office (ICO) if you believe we have breached data protection law (www.ico.org.uk).
11. Marketing Communications
11.1 We only send marketing messages where you have opted-in or where a soft opt-in applies (existing customers).
11.2 You can unsubscribe at any time via the link in our emails or by contacting us at hello@deverebrilliance.com.
12. Children’s Privacy
Our website and services are not directed at children under 16. We do not knowingly collect personal data from children.
13. Third-Party Links
Our website may include links to third-party websites. We are not responsible for their privacy practices.
14. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. Updates will be posted on our website with a revised “last updated” date.
15. Contact Us
For any questions, requests, or complaints relating to this Privacy Notice or our handling of your data, please contact:
Data Protection Officer (DPO)
De Vere Brilliance Limited
34–35 Hatton Garden, London, EC1N 8DX
Email: hello@deverebrilliance.com