Privacy Policy

Privacy Policy

Last updated: 3 September 2026

Tonsai respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains what information we collect, why we collect it, how we use it, who we may share it with and the rights available to you.

1. Who we are

Tonsai is a jewellery business based in the United Kingdom.

Business name: Tonsai
Email: Tonsai.Jewellery@outlook.com
Business address: 239 Kings Road Arches, Brighton, East Sussex, BN1 1NB

For UK data-protection purposes, Tonsai is responsible for the personal information we process through this website and in connection with your orders.

2. Information we collect

Depending on how you interact with Tonsai, we may collect:

  • Your name;

  • Billing address;

  • Delivery address;

  • Email address;

  • Telephone number, where provided;

  • Order and purchase information;

  • Payment and transaction information;

  • Communications you send to us;

  • Information relating to returns, refunds or customer-service enquiries;

  • Website usage information;

  • Cookie and similar technology information; and

  • Marketing preferences.

We do not generally receive or store your complete payment-card details when you make a purchase through our website.

3. How we use your information

We may use your information to:

  • Process and fulfil orders;

  • Take and process payments;

  • Arrange delivery;

  • Communicate with you about your order;

  • Respond to enquiries;

  • Process returns and refunds;

  • Deal with complaints;

  • Prevent fraud and protect website security;

  • Maintain business, accounting and tax records;

  • Improve our products, website and services;

  • Analyse website usage;

  • Send marketing communications where legally permitted and, where required, where you have consented; and

  • Comply with legal obligations.

4. Lawful bases for processing

Depending on the circumstances, we may rely on:

Contract

Where processing is necessary to provide products or services you have purchased.

Legal obligation

Where we need to process information to comply with a legal obligation, such as accounting, tax or consumer-law requirements.

Legitimate interests

Where processing is necessary for legitimate business purposes, such as website security, fraud prevention, responding to enquiries or improving our services, provided those interests are not overridden by your rights and interests.

Consent

Where you have given consent for a specific use of your information, such as certain marketing communications or non-essential cookies.

Where processing is based on consent, you can withdraw that consent at any time.

5. Marketing

If you choose to receive marketing communications, we may contact you about:

  • New products;

  • Product launches;

  • Offers;

  • Promotions; and

  • Tonsai news.

You can unsubscribe from marketing communications at any time using the unsubscribe option provided in the communication or by contacting us.

We will comply with applicable direct-marketing and electronic-communications laws.

6. Who we share information with

We may share relevant information with trusted third parties where necessary to operate our business and provide our services.

These may include:

  • Our website and e-commerce provider;

  • Payment processors;

  • Postal and delivery companies;

  • Accounting or bookkeeping providers;

  • IT and website service providers;

  • Analytics providers;

  • Marketing and advertising platforms, where applicable;

  • Professional advisers; and

  • Government authorities or law-enforcement bodies where required or permitted by law.

We only share personal information where we have a lawful basis for doing so.

7. Payment providers

Payments may be processed by third-party payment providers.

Payment provider(s):
SquareSpace Payments

We do not generally store complete payment-card details ourselves.

The relevant payment provider may process your information according to its own privacy policy and applicable legal requirements.

8. International transfers

Because Tonsai sells and ships internationally, some service providers may process personal information outside the United Kingdom or your country of residence.

Where applicable, we will use appropriate safeguards required by relevant data-protection law when transferring personal information internationally.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected.

Certain information may need to be retained for longer because of accounting, tax, legal or regulatory requirements.

When information is no longer required, we will securely delete or anonymise it where appropriate.

10. Your privacy rights

Depending on where you live and the law applicable to you, you may have rights including the right to:

  • Request access to personal information we hold about you;

  • Request correction of inaccurate information;

  • Request deletion of information in certain circumstances;

  • Request restriction of processing in certain circumstances;

  • Object to certain processing;

  • Withdraw consent where processing is based on consent; and

  • Request certain information in a portable format.

Some rights are subject to legal exceptions.

To exercise your rights, contact us using the details below.

11. Complaints

If you have concerns about how Tonsai handles your personal information, please contact us first.

Email: Tonsai.Jewellery@outlook.com

We will consider and respond to your complaint in accordance with applicable data-protection requirements.

If you are in the UK and remain dissatisfied, you can also contact the Information Commissioner's Office (ICO).

If you are outside the UK, you may also have the right to complain to the relevant data-protection authority in your country.

12. Cookies

Our website uses cookies and similar technologies.

Please see our Cookie Policy for further information.

13. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Children

Our website is not specifically directed towards children and we do not knowingly collect personal information from children for marketing purposes.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our practices, services or legal requirements change.

The latest version will be published on this page.

16. Contact

Tonsai
Email: Tonsai.Jewellery@outlook.com
Business address: 239 Kings Road Arches, Brighton, East Sussex, BN1 1NB