How we look after your details.

Who we are

Gemlea is the trading name of GemLea Limited, registered in England & Wales (company no. 14958016). We are the controller of the personal data described here. Contact us athello@gemlea.co.uk.

What we collect, and why

A consultation request

Your name, email address, brand (if you give it), your message, the studios and times you choose, and your time zone. We use them only to reply to you and arrange the consultation you asked for: steps taken at your request before any agreement (UK GDPR Article 6(1)(b)).

The Gemlea Jewellery Gallery list

Your email address, and only once you confirm it from the email we send. We use it to write to you once, when the Gallery opens. The basis is your consent (Article 6(1)(a)); you can withdraw it at any time by writing to us.

Protecting the forms

To stop automated abuse we keep a one-way hash of your internet address (never the address itself) with a request, and short-lived counters keyed by hashes. This is our legitimate interest in keeping the service working (Article 6(1)(f)).

What we do not do

This site sets no cookies, uses no analytics or advertising tags and loads nothing from third parties. We do not sell or share your details for marketing.

Where it is kept, and who helps us

Your details are stored in a Cloudflare database located in Western Europe. Cloudflare also hosts this website. Emails are delivered by Resend. Both act only on our instructions. Where a provider processes data outside the UK, we rely on the safeguards UK law requires, such as the International Data Transfer Agreement or Addendum.

How long we keep it

• The internet address hash on a request is erased automatically after 30 days.
• A Gallery sign-up that is never confirmed is deleted automatically after 30 days.
• Consultation requests are kept only as long as we need them to work with you, and then deleted.
• Gallery list addresses are kept until the Gallery opens and we have written to you, or until you ask us to remove you.

Your rights

You can ask to see the personal data we hold about you, to correct it, to delete it, to restrict or object to how we use it, or to receive a copy. Write to hello@gemlea.co.uk; we will reply within one month. If you are unhappy with how we handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk.