Who We Are
Forget Me Not By Emma is based at Ash Tree House, Little Bampton, Wigton, Cumbria CA7 0JQ, United Kingdom. You can reach us at welcome@forgetmenotbyemma.co.uk.
We are the "data controller" of your personal data for the purposes of UK data protection law. This means we are responsible for deciding how and why your personal data is used.
Personal Data We Collect
We may collect and process the following types of personal data:
- Contact details — name, billing and delivery address, email address, telephone number.
- Order information — details of products ordered, pricing, payment method (but not full card details), delivery instructions.
- Special instructions and inclusions — information you provide about ashes, hair, breastmilk or other inclusions for memorial jewellery, including any personal messages you include.
- Communication data — emails, messages and any other communications you send to us, for example enquiries, complaints or bespoke design requests.
- Website usage data — IP address, browser type, device information, pages visited, and how you interact with our website via cookies and similar technologies.
- Social media data — if you contact us or interact with us via social media, we may see your profile name and any information you choose to share with us there.
We do not intentionally collect children's data. If you believe a child has provided us with personal data, please contact us so we can delete it.
How We Use Your Personal Data
We process your personal data only where we have a lawful basis under UK data protection law.
To process and fulfil your orders
Creating and managing your order, taking payment, producing bespoke jewellery, and arranging delivery.
Performance of a contract & legal obligationsTo provide customer service
Responding to enquiries, aftercare questions, complaints and requests for information.
Performance of a contract & legitimate interestsTo personalise and create memorial jewellery
Using the inclusions and information you supply (such as ashes, hair or other materials) to design and create your jewellery.
Performance of a contract & explicit consentFor record-keeping and legal compliance
Keeping records of orders, payments, correspondence and any consents you give.
Legal obligations & legitimate interestsTo improve our website and services
Analysing how visitors use our website and services, for example which pages are most visited.
Legitimate interests & consent for cookiesMarketing (optional)
Sending you email updates about new products, news or special offers. You can opt out at any time.
Your consent or legitimate interestsWe do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
Cookies and Website Tracking
Our website may use cookies and similar technologies to:
- Make the site work properly — for example, remembering items in your basket.
- Help us understand how the website is used — for example, number of visitors and popular pages.
- Support basic marketing and performance analytics.
Where required by law, we will ask for your consent before setting non-essential cookies. You can usually disable cookies in your browser settings, but some parts of the website may not function correctly without them.
Sharing Your Personal Data
We only share your personal data with third parties where necessary and appropriate:
- Payment providers — to process your payments securely.
- Delivery and postal services — to deliver your orders and return inclusions or finished pieces.
- Professional service providers — such as accountants, IT and website support, email or hosting providers who help us run our business.
- Law enforcement, regulators or legal advisors — where we are required to do so by law or to protect our rights or those of others.
We do not sell your personal data to third parties. All third parties who process your data on our behalf are required to keep it secure and to use it only for the purposes we specify.
International Transfers
Our core operations are based in the UK, but some of our service providers may be located outside the UK/EEA. Where personal data is transferred internationally, we will ensure that appropriate safeguards are in place — for example, using standard contractual clauses or ensuring the recipient is in a country that provides an adequate level of data protection.
How Long We Keep Your Data
We keep your personal data only for as long as reasonably necessary for the purposes described in this policy:
- Order and accounting records — generally up to 6 years after the end of the relevant financial year, to meet tax and legal obligations.
- Customer communications and aftercare information — for as long as needed to manage your relationship with us and provide aftercare, then securely deleted or anonymised.
- Marketing data — until you withdraw your consent or opt out, or after a reasonable period of inactivity.
When we no longer need your data, we will delete or anonymise it safely.
How We Protect Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse or disclosure. These measures may include:
- Limiting access to personal data to those who need it to perform their role.
- Using passwords and, where appropriate, encryption or secure systems.
- Keeping our systems and software updated and protected.
No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Your Rights
Under UK data protection law, you have the following rights in relation to your personal data:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete data we hold.
Right to Erasure
Ask us to delete your personal data in certain circumstances.
Right to Restrict Processing
Ask us to limit how we use your data in certain situations.
Right to Data Portability
Receive your data in a structured, machine-readable format where applicable.
Right to Object
Object to processing based on our legitimate interests or for direct marketing.
Rights Regarding Consent
Withdraw consent at any time where we rely on it to process your data.
Right to Complain
Lodge a complaint with the ICO at www.ico.org.uk.
To exercise any of these rights, please contact us at welcome@forgetmenotbyemma.co.uk
Memorial Inclusions and Sensitive Information
Because we create memorial jewellery using ashes, hair, breastmilk or other inclusions you provide, you may share sensitive or emotional information with us relating to you and your family.
- Please only provide the personal information that is necessary for us to complete your order.
- We will treat all inclusions and any accompanying information with care and respect.
- We will only use this information to create and deliver your jewellery and to handle any related customer service or aftercare.
- We recommend that you do not include unnecessary personal details about third parties (for example, full names or contact details of family members) unless required for the order.