Privacy Policy

Last updated: 20 July 2026

At Symbol & Stone ("we", "our", or "us"), we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights under UK data protection law.

By using our website, you agree to the practices described in this Privacy Policy.

1. Information We Collect

When you visit our website or place an order, we may collect the following information:

Information you provide

Name
Billing and delivery address
Email address
Telephone number (if provided)
Order details
Gift message information (where applicable)
Any information you provide when contacting us

Information collected automatically

When you browse our website, we may automatically collect:

IP address
Device type
Browser type
Pages viewed
Time spent on pages
Referral source
General location (country or region)
Cookies and similar technologies

2. How We Use Your Information

We use your information to:

Process and fulfil your orders
Arrange delivery
Process payments securely
Communicate about your order
Respond to enquiries
Provide customer support
Improve our website and services
Detect fraud and maintain website security
Comply with legal and tax obligations
Send marketing emails where you have chosen to receive them

We only collect information that is necessary for these purposes.

3. Marketing Emails

If you choose to subscribe to our newsletter, we may send you occasional emails featuring:

New jewellery collections
Product launches
Special offers
Inspiration and journal updates
Seasonal promotions

You can unsubscribe at any time by clicking the unsubscribe link in any marketing email or by contacting us directly.

We will never send marketing emails without your consent where consent is required by law.

4. Cookies

Our website uses cookies to improve your browsing experience.

Cookies help us:

Remember your preferences
Keep your shopping basket active
Understand how visitors use our website
Improve website performance
Measure marketing effectiveness
Deliver relevant advertising where applicable

You can manage or disable cookies through your browser settings. Please note that disabling some cookies may affect the functionality of the website.

5. Third-Party Services

To operate our business, we use trusted third-party service providers who process personal information on our behalf.

These may include:

Shopify (website hosting and ecommerce platform)
Shopify Payments
Stripe
PayPal
Google Analytics
Google Search Console
Meta (Facebook and Instagram)
Pinterest
Email marketing providers
Shipping and delivery partners
Payment processors

These providers only receive the information necessary to perform their services and are required to protect your data in accordance with applicable data protection laws.

Some providers may process information outside the United Kingdom. Where this happens, appropriate safeguards are used to protect your personal information.

6. Payment Information

We do not store or have access to your full payment card details.

Payments are processed securely through trusted payment providers such as Shopify Payments, Stripe and PayPal, who handle your payment information in accordance with their own privacy and security policies.

7. Data Retention

We keep personal information only for as long as necessary to:

Fulfil your order
Meet legal and accounting obligations
Resolve disputes
Enforce our agreements

When information is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under the UK General Data Protection Regulation (UK GDPR), you have the right to:

Request access to your personal information
Request correction of inaccurate information
Request deletion of your information where appropriate
Restrict or object to certain processing
Withdraw consent for marketing at any time
Request a copy of your information in a portable format
Lodge a complaint with the Information Commissioner's Office (ICO)

We aim to respond to privacy requests within one month.

9. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration or destruction.

While no internet transmission is completely secure, we use trusted providers and industry-standard security practices to help protect your information.