Privacy Policy

Little Miss London is a handcrafted jewellery brand based in London, United Kingdom. For privacy questions or requests, write to us at hello@littlemisslondonjewellery.com.

Depending on how you interact with us, we may collect:

• Account details — your email address, and if you choose to provide them, your first and last name, phone number, and shipping address.
• Order information — items purchased, the shipping address you give at checkout, and payment confirmation (we never see your card details — see below).
• Communications — anything you send us via email or our contact form.
• Site usage— basic analytics such as page views, referring source, and approximate location, used to understand what’s working on the site.
• Cookies — small files stored in your browser that keep you signed in, remember your wishlist when signed out, and measure traffic.

We process your information only to:

• Fulfil and ship your orders.
• Keep your account secure and let you sign in by magic link.
• Respond to questions you send us.
• Send you transactional emails (order confirmations, shipping updates).
• Send marketing emails only if you have explicitly opted in — and you can unsubscribe at any time from the link at the bottom of any marketing email.
• Understand how the site is used so we can improve it.

Our legal bases under UK GDPR are: contract (to fulfil orders you place), legitimate interest (to operate and improve the site), and consent (for marketing emails).

We never sell your personal information. We share it only with the service providers we need to run the shop:

• Stripe — handles payment processing. Your card details go directly to Stripe; we never see or store them.
• Supabase — hosts our account database and authentication.
• Resend — sends our transactional and marketing emails on our behalf.
• Vercel — hosts the website itself.
• Shipping carriers — receive the name and address needed to deliver your parcel.

Each of these providers has its own privacy policy and is bound by UK GDPR-compatible data-processing terms.

We keep your account and order information for as long as your account is active, and after closure for up to seven years to meet our UK tax and accounting obligations. Marketing-email opt-ins are kept until you unsubscribe.

Under UK GDPR, you have the right to:

• Ask us what personal information we hold about you.
• Ask us to correct anything that’s wrong.
• Ask us to delete your account and data (subject to legal retention requirements).
• Ask for your data in a portable format.
• Withdraw consent to marketing emails at any time.
• Complain to the UK Information Commissioner’s Office (ico.org.uk) if you believe we’ve mishandled your data.

To exercise any of these rights, email us at hello@littlemisslondonjewellery.com.

We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encrypted database storage, and authentication tokens that expire automatically. No system is perfectly secure, but we take it seriously.

We may update this policy from time to time. Material changes will be reflected by updating the “last updated” date at the top of this page.