Privacy Policy

We may collect the following information from you:

• Name, email address, phone number, and postal address
• Order history and purchase details
• Payment information (processed securely — we never store card details)
• Ring size, engraving preferences, and bespoke design requirements
• Browsing behaviour, IP address, device type, and cookies (see our Cookie Policy)
• Communications sent to us via email, telephone, or contact forms

We use your personal data to:

• Process and fulfil your orders and send order confirmations
• Provide customer support and respond to your enquiries
• Send transactional emails (order updates, shipping notifications)
• Send marketing emails where you have given your consent (you may opt out at any time)
• Improve our website and personalise your experience
• Comply with legal obligations including tax records and HMRC requirements
• Detect and prevent fraud

We process your data under the following lawful bases:

• Contract: to fulfil orders you have placed with us
• Legitimate interests: to improve our services and detect fraud
• Consent: for marketing communications and non-essential cookies
• Legal obligation: to comply with applicable UK law

We do not sell, rent, or trade your personal data. We share it only with trusted third parties who assist us in operating our business:

• Payment processors (Stripe) — for secure payment handling
• Delivery partners (Royal Mail, FedEx, DPD) — for shipping your order
• Email service providers (Resend / AWS SES) — for transactional communications
• Analytics providers (Google Analytics) — for website performance insights
• Where required by law or to protect our legal rights (e.g. HMRC, courts)

All third-party processors are contractually bound to process your data only as instructed and in compliance with UK GDPR.

Some of our service providers operate outside the UK/EEA. Where we transfer data internationally, we ensure appropriate safeguards are in place — including Standard Contractual Clauses or adequacy decisions — to protect your data to the same standard required by UK GDPR.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Typically:

• Order records: 7 years (HMRC requirement)
• Account data: until account deletion + 12 months
• Marketing consent records: 3 years from last interaction
• Cookie data: see Cookie Policy for individual retention periods

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ('right to be forgotten')
• Restriction — request we limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests or for direct marketing
• Withdraw consent — at any time where consent is the lawful basis

To exercise any of these rights, visit our Privacy & Data Rights page or email us at privacy@mohlondon.com. We will respond within 30 days.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All data is transmitted over encrypted HTTPS connections. Payment details are processed via PCI-DSS compliant providers — we never store card numbers on our systems.

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) — the UK supervisory authority for data protection:

ico.org.uk — Helpline: 0303 123 1113

For any questions about this Privacy Policy or your personal data, please contact: