top of page

Privacy Policy

Twistsmith Studio Privacy Policy

1. Introduction

This Privacy Notice explains in detail the types of personal data we may collect about you when you interact with us. It also explains how we’ll store and handle that data and keep it safe.

We know that there’s a lot of information here, but we want you to be fully informed about your rights, and how Twistsmith Studio uses your data, e.g. if and when we pass on your information.

We hope the following sections will answer any questions you have but if not, please do get in touch with us. When you are using the Twistsmith Studio website, Twistsmith Studio is the data controller.


2. Who are Twistsmith Studio

Twistsmith Studio is a UK based small designer studio that makes jewellery and homewares – which we’ll refer to as ‘Twistsmith Studio’ in this document. For simplicity throughout this notice, ‘we’ and ‘us’ means Twistsmith Studio.


3. Explaining the legal basis we rely on

The law on data protection sets out a number of different reasons for which a company may collect and process your personal data, including:

  • Consent - In specific situations, we can collect and process your data with your consent. For example, when you tick a box to receive email newsletters.

  • When collecting your personal data, we’ll always make clear to you which data is necessary in connection with a particular service.

  • Contractual obligations - In certain circumstances, we need your personal data to comply with our contractual obligations. For example, if you order an item from us for home delivery, we’ll collect your address details, email and telephone number to deliver your purchase, and pass them to our courier.

  • Legal compliance - If the law requires us to, we may need to collect and process your data. For example, we can pass on details of people involved in fraud or other criminal activity affecting Twistsmith Studio to law enforcement.

  • Legitimate interest - In specific situations, we require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business, and which does not materially impact your rights, freedom or interests. For example, we combine the shopping history of many customers to identify trends and ensure we can keep up with demand or develop new products/services.


4. When do we collect your personal data?

  • When you visit our website to browse and buy products – including when you use the contact form to ask a question or make a bespoke order request.

  • When you make an online purchase through the SumUp store – you can view the privacy policy for the SumUp store by following the link:

  • When you purchase a product by phone or email directly (not via the website)

  • When you engage with us on social media.

  • When you contact us by any means with queries, complaints etc.

  • When you enter prize draws or competitions.

  • When you comment on or review our products and services.


5. What sort of personal data do we collect?

  • If you’ve placed an online order we will receive your name, billing/delivery address, email and telephone number. Your card details are only collected via the SumUp store and as such Twistsmith Studio does not see or retain this information, see the link above for the SumUp Store privacy policy.

  • When an order is placed via social media, email or telephone, we collect your name, billing/delivery address, email and telephone number. Your card details are only collected via a SumUp payment request and as such Twistsmith Studio does not see or retain this information, see the link above for the SumUp privacy policy.

  • Details of your interactions with us through events, online or by contacting us directly. For example, we collect notes from our conversations or emails with you, details of any complaints or comments you make, details of purchases you made. Your social media username, if you interact with us through those channels, to help us respond to your comments, questions or feedback.

  • Details of your visits to our website.

  • Your comments and product reviews.


6. How and why do we use your personal data?

  • To process any orders that you make by using our website, via telephone, email, social media or in person. If we don’t collect your personal data during checkout, we won’t be able to process your order and comply with our legal obligations. For example, your details may need to be passed to a courier to deliver your order, and we may keep your details for a reasonable period afterwards in order to fulfil any contractual obligations such as refunds.

  • To respond to your queries, refund requests and complaints. Handling the information you sent enables us to respond. We may also keep a record of these to inform any future communication with us and to demonstrate how we communicated with you throughout. We do this on the basis of our contractual obligations to you, our legal obligations and our legitimate interests in providing you with the best service and understanding how we can improve our service based on your experience.

  • If you’ve signed up to our newsletter, we will use your personal data, preferences and details of your transactions to keep you informed by email, web, text, telephone about relevant products and services including tailored special offers, discounts, promotions, events, competitions and so on. Of course, you are free to opt out of hearing from us by any of these channels at any time.

  • To administer any of our prize draws or competitions which you enter, based on your consent given at the time of entering.

  • To protect our business from fraud and other illegal activities. We’ll monitor your browsing activity with us to quickly identify and resolve any problems and protect the integrity of our websites. We’ll do all of this as part of our legitimate interest. For example, using automated monitoring of IP addresses to identify possible fraudulent log-ins from unexpected locations

  • To comply with our contractual or legal obligations to share data with law enforcement. For example, when a court order is submitted to share data with law enforcement agencies or a court of law


7. How we protect your personal data

We know how much data security matters to all our customers. We will treat your data with the utmost care and take all appropriate steps to protect it. Access to your personal data is password-protected. Sensitive data, such as payment card information, is secured and encrypted to ensure it is protected, this is done by our shop and payment service provider, SumUp. Twistsmith Studio never sees or stores this information.


8. How long will we keep your personal data?

Whenever we collect or process your personal data, we’ll only keep it for as long as is necessary for the purpose for which it was collected. At the end of that retention period, your data will either be deleted completely or anonymised, for example by aggregation with other data so that it can be used in a non-identifiable way for statistical analysis and business planning.


9. Who do we share your personal data with?

  • We use SumUp to power our online store and take payments.

  • To fulfil your orders, we may use a courier and as such would pass on the following details to complete the delivery: Name, address, email and telephone number. The latter are to allow the courier to send you delivery updates.

  • We use Wix Analytics to help us understand how our customers use the Site.

  • We use Google Analytics to help us understand how our customers use the Site -- you can read more about how Google uses your Personal Information here: You can also opt-out of Google Analytics here:

  • We may share information with service providers under contract who help with parts of our business operations. Our contracts dictate that these service providers only use your information in connection with the services they perform for us and not for their own or any additional benefit.

  • Finally, we may also share your Personal Information to comply with applicable laws and regulations, to respond to a subpoena, search warrant and/or other lawful request for information we receive, or to otherwise protect our rights.

11. Cookies

  • We collect Device Information using the following technologies:

  • “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit

  • “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

  • “Web beacons”, “tags”, and “pixels” are electronic files used to record information about how you browse the Site.

The following links explain how to access cookie settings in various browsers:

Cookie settings in Google Chrome

Cookie settings in Firefox

Cookie settings in Internet Explorer

Cookie settings in Safari (OS X)

Cookie settings in Safari (iOS)

Cookie settings in Android

To opt out of being tracked by Google Analytics across all websites, visit this link:

For more information about cookies go to All About Cookies.


11. Transferring Information Internationally

We may transfer information collected about you to third parties acting on our behalf that may be located in countries outside of the European Economic Area (“EEA”) or countries deemed by the European Commission to have satisfactory data protection. These other countries may not offer the same level of protection for the information collected about you, although we will at all times continue to collect, store and use your information in accordance with this Privacy Policy and the applicable data protection legislation. We will ensure we share data only with those organizations that satisfy an adequate level of data protection in line with applicable data protection legislation and that satisfactory contractual agreements are in place with any such parties.


12. Your rights

If GDPR is applicable to you, you have the right to access personal information we hold about you and to ask that your personal information be amended, updated, or deleted, you have the right to ask for the ceasing of processing of your data, object to profiling activities and solely automated processing, request that we restrict the processing of your personal data, and/or request that your data be transferred to a third party (data portability) under certain circumstances. If you would like to exercise this right, please contact us through the contact information below.

You have the right to withdraw your consent to the processing of your data at any time if the processing is based on your consent and can do so by contacting the DPO at the address provided.

If you would like to exercise any of your rights set out above, you can contact us using the contact form.

You also have a right to lodge a complaint with the relevant data protection authority. The relevant authority for each country can be found on the European Commission website:


19. Any questions?

We hope this Privacy Notice has been helpful in setting out the way we handle your personal data and your rights to control it.

If you have any questions that haven’t been covered, please contact our Data Protection Officer who will be pleased to help you:

Email us at

Or write to us at Data Protection Officer, 12 King Street, Leek, Staffordshire, ST13 5NW


20. Changes

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons. You will be automatically prompted to re-accept when significant changes are made.

This notice was last updated on 23/04/2023

bottom of page