Data Protection Policy

Introduction

ANNIE KÈKI respects your privacy and is committed to protecting the personal information you provide.

This policy explains how personal data is collected, used, stored and protected when you contact ANNIE KÈKI, commission or purchase jewellery, use this website, make an enquiry, or otherwise provide personal information.

ANNIE KÈKI processes personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable UK data protection legislation.

Who is responsible for your information?

ANNIE KÈKI is responsible for the personal data it collects and processes.

The person responsible for data protection is:

Annie Keki
ANNIE KÈKI
Woodend Mill One
Manchester Road
Mossley
OL5 9FQ

Email: annie@anniekeki.co.uk
Telephone: 07583 457849

Information I may collect

The personal information collected will depend upon your relationship with ANNIE KÈKI and may include:

  • your name and contact details;

  • your billing and delivery information;

  • details relating to an enquiry, order, purchase or commission;

  • correspondence between us;

  • information necessary to produce, alter, repair or deliver a piece of jewellery;

  • payment and transaction information;

  • information you choose to provide in connection with a bespoke commission; and

  • information generated through your use of this website where applicable.

Only information that is reasonably necessary for the relevant purpose will be collected.

How your information is used

Personal information may be used to:

  • respond to enquiries;

  • discuss, design and manage commissions;

  • process and fulfil orders;

  • issue quotations and invoices;

  • arrange collection or delivery;

  • provide information about the care, alteration or repair of jewellery;

  • maintain appropriate financial and business records;

  • communicate with you about work you have commissioned or purchased;

  • administer and maintain the website; and

  • meet legal, accounting and regulatory obligations.

Your personal information will not be used for purposes that are incompatible with the reason it was originally collected.

Lawful basis for processing

Depending upon the circumstances, personal data may be processed because:

  • it is necessary to take steps at your request before entering into a contract;

  • it is necessary to perform a contract with you, for example when making a commissioned piece or fulfilling an order;

  • there is a legal obligation to retain or process certain information;

  • there is a legitimate business interest in processing the information and that interest does not override your rights and interests; or

  • you have given your consent where consent is required.

Where processing is based upon consent, you may withdraw that consent at any time.

Sharing your information

ANNIE KÈKI does not sell your personal information.

Information may be shared with trusted third parties where this is reasonably necessary to provide a service, fulfil an order or operate the business. This may include payment providers, delivery services, website and email service providers, professional advisers and other service providers.

Only the information necessary for them to perform the relevant service will be shared.

Information may also be disclosed where required by law or where necessary to establish, exercise or defend legal rights.

Keeping your information secure

Reasonable technical and organisational measures are used to protect personal information against unauthorised access, alteration, disclosure, accidental loss or destruction.

Access to personal information is limited to those who genuinely require it for the purposes for which it is being processed.

While appropriate steps are taken to protect information, no method of electronic transmission or storage can be guaranteed to be completely secure.

How long your information is kept

Personal information is kept only for as long as it is reasonably required for the purpose for which it was collected or where it must be retained to meet legal, accounting or regulatory requirements.

Different types of information may therefore be retained for different periods.

When personal information is no longer required, it will be securely deleted or otherwise disposed of where appropriate.

Your data protection rights

Depending upon the circumstances, UK data protection law gives you a number of rights concerning your personal information.

These may include:

Right of access
You may ask whether your personal information is being processed and request a copy of the personal information held about you.

Right to rectification
You may ask for inaccurate or incomplete personal information to be corrected.

Right to erasure
In certain circumstances, you may ask for your personal information to be deleted. This right does not apply where there is a legal or other legitimate reason for the information to be retained.

Right to restrict processing
In certain circumstances, you may ask for the use of your personal information to be restricted.

Right to data portability
Where applicable, you may have the right to receive personal information you have provided in a structured, commonly used and machine-readable format or ask for it to be transferred to another organisation.

Right to object
In certain circumstances, you may object to the processing of your personal information, including processing based upon legitimate interests.

Rights relating to consent
Where your personal information is processed on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing undertaken before consent was withdrawn.

Requests relating to your personal information will be dealt with without undue delay and normally within one month, in accordance with data protection law.

Marketing

ANNIE KÈKI will only send electronic marketing communications where there is an appropriate lawful basis for doing so.

Where you have consented to receive marketing communications, you can withdraw your consent or unsubscribe at any time.

You will still receive communications that are necessary in connection with an enquiry, purchase or commission.

Website and cookies

This website may use cookies and similar technologies that are necessary for the website to function or that help understand how the website is being used.

Where consent is required for non-essential cookies, these will only be used in accordance with the choices you make through the website's cookie controls.

Third-party services used by the website may process limited technical information in order to provide their services.

Links to other websites

This website may contain links to websites operated by third parties. ANNIE KÈKI is not responsible for the privacy practices or content of those websites, and you should refer to their own privacy information when visiting them.

International transfers

Some service providers used to operate the website, email, payment or other business services may process information outside the United Kingdom.

Where personal data is transferred internationally, appropriate safeguards will be used where required by UK data protection law.

Complaints

If you have a concern about how your personal information has been handled, please contact me in the first instance so that I have an opportunity to address it.

You also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection.

Information about your rights and how to make a complaint is available from the Information Commissioner's Office.

Changes to this policy

This policy may be updated from time to time to reflect changes in the way ANNIE KÈKI operates or changes to legal requirements.

Last reviewed: 31 August 2026