Your visit to Lynottjewellery.com and your access to this website and its services are governed by the following conditions. By accessing and using Lynottjewellery.com, you agree to comply with all of the terms and conditions hereof. Any person(s) who purchase from or visit the to Lynottjewellery.com website accepts and agrees to these conditions.

Lynott Jewellery Ltd (“Lynott”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store and protect your personal data in
accordance with:

● General Data Protection Regulation (EU) 2016/679 (“GDPR”)
● Data Protection Act 2018 (Ireland)

1. Data Controller Information

Company Name: Lynott Jewellery Ltd

Company Registration Number: 668605

Registered Office: Unit K8, Drinan Enterprise Centre, Feltrim Road, Ireland

Email: info@lynottjewellery.com
Website: www.lynott-jewellery.com
Lynott Jewellery Ltd is the data controller for personal data collected through our website and retail concession operations.

We have not appointed a Data Protection Officer as we are not legally required to do so. All data protection enquiries should be directed to the email address above.

We may collect and process the following categories of personal data:
Identity & Contact Data
● Name

● Email address
● Telephone number
● Billing and shipping addresses
Transaction Data
● Order history
● Payment confirmation details (payments are processed securely by third-party providers;
we do not store full card details)
● Refund and return records
Account Data
● Login credentials
● Wishlist or saved items
● Customer service history
Booking & Service Data
● Welding appointment details
● Engraving instructions
● Gift messages
● Communications relating to custom or personalised orders
Biometric Data (Fingerprint Engraving Only)
● Fingerprint image files submitted for engraving purposes
Fingerprint images are processed solely for engraving and are not converted into biometric
templates or used for identification, authentication, profiling or verification purposes.
Technical & Usage Data
● IP address
● Browser type
● Device information
● Website usage data
● Cookie data
● Marketing engagement data
Marketing Data
● Newsletter subscriptions
● Email engagement metrics
● Advertising interaction data

We process personal data under the following lawful bases:
● Performance of Contract – To fulfil orders, process payments, manage bookings and
provide customer service.
● Legal Obligation – To comply with accounting, tax and regulatory requirements.
● Legitimate Interests – Fraud prevention, website optimisation, business analytics and
security.
● Consent – Marketing communications, cookies and fingerprint engraving (explicit
consent).
Where processing is based on consent, you may withdraw consent at any time.

Fingerprint images submitted for engraving may constitute special category personal data under
GDPR.
By submitting a fingerprint image, you provide explicit consent for us to process that data for
the sole purpose of engraving your jewellery.
We confirm:
● Fingerprints are stored only as image files.
● We do not create biometric templates.
● We do not use fingerprint data for identification or authentication.
● Fingerprints are not used for marketing or profiling.
● Fingerprint files are deleted or permanently anonymised within 30 days after order
fulfilment, unless legally required to retain them longer.
If consent is withdrawn prior to engraving, the order may be cancelled.
We do not knowingly process fingerprint data of children under 16 without parental consent.

If you opt in to receive marketing communications:

● We may send promotional emails, product updates and offers.
● You may unsubscribe at any time via the link included in our emails.
● Withdrawal of marketing consent does not affect order-related communications.
We use marketing platforms including Klaviyo and advertising platforms such as Meta and
Google.

We use cookies and similar technologies to:

● Operate and secure our website
● Analyse performance
● Improve user experience
● Deliver personalised advertising

Where required by law, we obtain consent before placing non-essential cookies.
You can manage cookie preferences through your browser settings or our cookie banner.

We share personal data only with trusted third-party service providers necessary to operate our business, including:

● Shopify (website hosting and ecommerce platform)
● Payment processors (such as Stripe or PayPal)
● Courier and logistics partners
● Email marketing providers (such as Klaviyo)
● Advertising platforms (such as Meta and Google)
● Analytics providers
● IT and secure cloud storage providers
We do not sell personal data.

All third-party processors are contractually required to process data in accordance with GDPR.

Some service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, we ensure appropriate safeguards are in place, including Standard
Contractual Clauses or equivalent legal mechanisms.

We retain personal data only as long as necessary:

● Order & transaction data: 6 years (Irish Revenue compliance)
● Marketing data: Until consent is withdrawn
● Customer service records: Up to 3 years
● Fingerprint images: Deleted within 30 days post fulfilment
● Analytics data: In line with platform retention settings

When data is no longer required, it is securely deleted or anonymised.

You have the right to:

● Access your personal data
● Rectify inaccurate data
● Request erasure (where applicable)
● Restrict processing
● Object to processing
● Data portability
● Withdraw consent at any time
You also have the right to lodge a complaint with:
Data Protection Commission (Ireland)
Website: www.dataprotection.ie

We encourage you to contact us first so we can resolve any concerns.

We may use automated processing for:

● Fraud detection
● Personalised advertising
● Marketing segmentation

This does not produce legal or similarly significant effects on you.

We implement appropriate technical and organisational measures to protect personal data, including:

● Encrypted payment processing
● Secure hosting environments
● Restricted staff access
● Secure cloud storage systems

However, no online transmission method is completely secure.

Our website and services are not directed at children under 16.

We do not knowingly collect personal data from children without parental consent.

Lynott operates retail concessions within third-party department stores.

For security systems (including CCTV), the host retailer acts as the data controller.

Lynott is responsible only for customer data collected directly by us.

We may update this Privacy Policy periodically.

Updated versions will be published on our website with a revised effective date.

We use cookies and similar tracking technologies to operate our website, improve performance and deliver personalised advertising.

Cookies may include:
● Strictly necessary cookies required for cart functionality and security.
● Performance and analytics cookies (such as Google Analytics and Shopify analytics).
● Functional cookies to remember preferences.
● Marketing and advertising cookies (including Meta Pixel, Google Ads Pixel, Klaviyo
tracking and similar technologies).

Marketing and advertising cookies may track browsing behaviour to:

● Send abandoned cart reminders.
● Recommend products based on website interaction.
● Deliver personalised advertising across platforms.
● Measure advertising effectiveness.

Non-essential cookies are placed only with your consent via our cookie banner.
You may adjust cookie preferences at any time through your browser settings or our cookie management tool.

We use behavioural tracking tools to enhance your shopping experience.

This may include:
● Abandoned cart email reminders.
● Product recommendations based on browsing history.
● Retargeting advertisements across social media and search platforms.
● Email engagement tracking through marketing platforms such as Klaviyo.

This processing is carried out under legitimate interest and/or consent (where required).

You may unsubscribe from marketing communications at any time.

To protect our customers and our business from fraud, we may use automated fraud detection and risk analysis tools.

This may include:
● Payment verification checks.
● Automated risk scoring.
● Manual review of high-risk transactions.
● Order cancellation where fraud risk is identified.

If a transaction is disputed or a chargeback is initiated, we may share relevant order data
(including shipping confirmation, transaction details and customer communication records) with
payment processors and financial institutions for dispute resolution.

This processing is conducted under legitimate interest and legal obligation.

If you submit a product review, tag Lynott Jewellery on social media, or provide content directly to us:

● You grant us permission to repost or feature that content (with credit where appropriate).
● Reviews may be published on our website or marketing materials.
● We reserve the right to moderate or remove inappropriate content.

We may use third-party review platforms to collect and display customer feedback.

If you opt in to SMS marketing communications:

● You consent to receive promotional text messages from Lynott Jewellery Ltd.
● Message frequency may vary.
● You may opt out at any time by replying STOP.
● Standard carrier message and data rates may apply.

SMS data is processed in accordance with this Privacy Policy.