The Jaybird Collection

Beautiful antique & vintage jewellery

Who we are

The Jaybird Collection is a vintage and antique jewellery business run by Reuben Jay as a sole trader. The data controller responsible for your personal data is Reuben Jay, trading as The Jaybird Collection, 19 Ridgeway Green, High Bickington, Umberleigh, Devon EX37 9EL, United Kingdom. When we say “we”, “us” or “our” in this policy, we mean The Jaybird Collection.

We are registered with the Information Commissioner’s Office, registration number ZC288147.

For anything about your data, email hello@thejaybirdcollection.co.uk or get in touch.

Data we collect

We collect the following personal data:

  • Order data: name, email address, phone number, and postal address when you place an order or make an enquiry
  • Account data: email address, name, and communication preferences if you create a customer account
  • Payment data: payments are processed by Stripe. We never see or store your full card details. If you choose to save a card, Stripe keeps it with your account and we only see its brand, last four digits and expiry date. You can remove saved cards from your account at any time
  • Communication data: messages you send us via our contact form or email
  • Returns and cancellations: requests you send from your account, with the pieces, your reason and any details you give
  • Account credit: if we hold money for you as account credit, or you have goodwill credit from us, a record of each amount added, spent, refunded or expired
  • Layaway history: your plans and payments and, if we cancel a plan because payments stopped, a note that we may not offer you layaway again
  • Instagram: if you message us or claim a piece in a Story Sale, your handle and messages are handled in Instagram, and we note your handle against your order
  • Technical data: IP address and basic browser information, collected automatically when you use the site. To stop abuse of checkout and our forms we keep a one-way scrambled (hashed) form of your IP address for up to a day
  • Analytics data: only if you accept analytics or marketing cookies, which pages you visit and what you do on them (see our cookie policy)
  • Totals, not about you: how many times a word is searched for and a piece is added to a wishlist, to help us choose what to buy. These use no cookies and don’t record who did it

How we use your data

We use your personal data to:

  • Process and fulfil your order, including shipping and tracking
  • Manage layaway instalment plans
  • Decide whether to offer layaway again if we cancelled a plan because payments stopped. A person makes that decision, and you can ask us to look at it again
  • Handle cancellations, returns and refunds, and keep your account credit
  • Respond to your enquiries and provide customer service
  • Send you marketing emails, only if you have given us explicit consent. That includes one reminder if you leave a checkout unfinished, which we only send if you ticked the box to hear about new pieces and anything you leave in your bag, or are already subscribed
  • A week or so after an order, email you once to ask for a review on Trustpilot. You can say no when you order (“Don’t ask me” at checkout, under the Apple Pay and Google Pay buttons, or on the payment page), and every request has a “Don’t send me these” link. If you say no, we keep your email address on a do-not-send list so we never ask again. Trustpilot only gets what you choose to write there
  • See how the shop is used, only if you accept analytics cookies; and measure and target our adverts, only if you accept marketing cookies (see Meta below)
  • Comply with our legal obligations, including HMRC record-keeping requirements

Who we share data with

We share data only with the services we need to run and advertise the business. Most act only on our instructions (processors); the ones marked independent decide for themselves how they use what they receive, under their own privacy policies.

  • Supabase: our database and sign-in, hosted in London
  • Vercel: hosts the website; its servers run in London
  • Stripe: card, Apple Pay and Google Pay payments and saved cards (also independent, for fraud prevention): stripe.com/gb/privacy
  • Klarna (independent): only if you choose to pay with Klarna
  • Resend: sends our emails
  • Royal Mail (independent): delivers your order. For international orders, the carrier and customs in your country also receive delivery and customs details
  • Xero: our accounts (your name, email, address, what you bought, and any costs we pay back to you)
  • Our accountant (independent chartered accountants, bound by professional confidentiality): our accounts and tax. They see our sales records, which can include your name, contact and delivery details and what you bought
  • Google: Analytics, only if you accept analytics cookies; Ads (measuring visits and purchases from our adverts), only if you accept marketing cookies (if you accept analytics only, a purchase reaches Analytics marked as not for advertising); Customer Reviews (independent), if you accept marketing cookies: Google receives your email and order details on the order page, where it offers you a short survey; and Sign in with Google (independent), only if you use it
  • Meta (Facebook, Instagram): measuring and targeting adverts, only if you accept marketing cookies (see Meta below); and Instagram (independent) for messages and Story Sales
  • Hostinger: our hello@ email inbox, so it holds whatever you write to us there, and our old website, with its customer and order records, until that closes
  • Cloudinary: serves our product photos (no customer data)
  • Cloudflare: plays our product videos (no customer data)

PayPal, Wise and our bank (all independent) see your name and reference if you pay that way. We do not sell, rent or trade your personal data.

Meta

If you accept marketing cookies, we use Meta’s Pixel on our public pages. We and Meta Platforms, Inc. are joint controllers for collecting that information and sending it to Meta. Meta’s details are in its Privacy Policy. If you live in the EU, the joint controller is Meta Platforms Ireland Limited instead, and the rest of this section is the same under Meta’s Controller Addendum.

What’s collected: the pages you view and what you do on them, your browser details, your IP address and identifiers Meta uses to recognise you.

Outside the UK and EU: Meta’s Pixel may also match an advert you saw to a purchase on your own device, using details you’ve already given us, such as your email address, and temporary information about your device. Meta says those details aren’t shared with it: it only learns that a purchase happened and which advert to credit.

Why: aiming our adverts at people who’ve visited us; helping us reach people with messages on Meta’s services; and letting Meta improve how it delivers adverts, personalise what it shows people on and off its services (including adverts and recommendations), and provide, improve and secure its products. Meta also measures our adverts and visits for us.

Our legal basis is your consent, which you can withdraw at any time on our cookie policy. Withdrawing stops anything more going to Meta and removes its cookies from this site. It doesn’t recall what Meta already has: Meta says it may keep that for up to two years, and advert audiences until they’re deleted.

We and Meta have agreed a UK Controller Addendum setting out who does what. We’re responsible for giving you this information. Meta is responsible for your rights to access, correct, erase, restrict or move what it stores once it has received it. From then on Meta decides how it uses it, as an independent controller. How it does, its legal basis and how to use your rights with it are in its Privacy Policy. You can also ask us, and we’ll pass your request on to Meta.

When you buy, if you’ve accepted marketing cookies, our server also tells Meta the invoice or order reference, value, pieces, your browser details and Meta’s cookies, so our adverts can be measured and targeted. Meta may use it for its own purposes too, as above. It never gets your name, email, phone, address or IP address this way.

Data outside the UK

Our database and website servers are in the UK. Some of the services above are based in, or support their service from, the United States or elsewhere (Stripe, Resend, Xero, Google, Meta, Cloudinary and Cloudflare). Where your data leaves the UK, it is protected by the UK–US data bridge for certified companies, or by the contract clauses approved by the Information Commissioner. Sending an international order to you needs your details to travel with it.

Retention

  • Order records: kept for at least six years, as UK tax law requires. If you have an account, your order history stays available to you for as long as the account is open. Once records are no longer needed for tax, accounting or legal claims (and you no longer have an account), we review and delete or anonymise them.
  • Account data: retained while your account is active. You can request deletion at any time.
  • Marketing preferences: retained until you unsubscribe or request deletion. If you’ve asked us not to send you review requests, we keep just your email address on a do-not-send list so we can honour that, even after your account is deleted.
  • Our providers’ own records: our email provider (Resend) and our payment provider (Stripe) keep their own logs of the emails and payments they handle, for the periods set out in their own policies. Deleting your account here doesn’t remove those.
  • Account credit and refunds: kept with our financial records. If you ask us to delete your account while you have credit of your own, we refund it to you first. Goodwill credit (a gift from us) can’t be paid out, so any left ends when the account is deleted.

Your rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your data (subject to legal obligations; see Retention above)
  • Restrict processing in certain circumstances
  • Portability: receive your data in a machine-readable format
  • Object to processing based on legitimate interests or for direct marketing
  • Withdraw consent at any time, where we rely on it (marketing emails, analytics and marketing cookies)

We don’t make decisions about you by automated means alone. You can download your data or delete your account from your account settings. For anything else, email hello@thejaybirdcollection.co.uk. We will respond within one month.

If you are unhappy with how we handle your data, please tell us first: email hello@thejaybirdcollection.co.uk or get in touch. We will acknowledge your complaint within 30 days, look into it, keep you updated and tell you the outcome. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Cookies

Essential cookies keep the site, your bag and checkout working, and a few more remember preferences such as dark mode. Analytics and marketing cookies are only used if you accept them. Full details, and a way to change your choice, are in our cookie policy.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be communicated via email if you have an account with us.