Privacy policy

Privacy Policy

Last updated: May 9, 2026

Draft for legal review. Substantive language follows Shopify's auto-generated Privacy Policy template, adapted for Singapore PDPA compliance. No legal commitments have been invented or removed. Clauses referencing services GU does not currently use are flagged inline. Review with a Singapore-qualified solicitor before publishing.

This policy is written plainly, because the people who read it deserve plain language. It covers what personal information GU Jewellery collects when you visit this site, place an order, or write to us — and how that information is held, used, and protected. If you have a question this page does not answer, write to hello@gujewellery.com.

What we hold, and why

When you visit gujewellery.com, certain information is collected automatically. This includes your browser type, IP address, the pages you visited, the time of your visit, and the site that referred you here. This information helps us understand how the site is being used and maintain its operation. It is collected through Shopify, our e-commerce platform, and is governed by Shopify's Privacy Policy.

When you make a purchase or attempt to make one, we collect the information needed to complete the transaction: your name, billing and shipping address, email address, phone number, and payment details. Payment card information is processed securely and is never stored on our servers.

When you subscribe to Field Notes or seasonal drop announcements, we hold your email address for that purpose only.

When you write to us

When you submit an inquiry through the site or write to us directly, we hold the content of that message and the contact details you provide. This information is used to respond to your inquiry and, where a commission follows, to manage that project. We do not use inquiry messages for any other purpose.

How we use what we hold

The personal information we collect is used to:

  • Fulfil orders and communicate about them
  • Process payments and prevent fraud
  • Respond to inquiries and support requests
  • Send Field Notes and seasonal drop announcements, where you have opted in
  • Comply with applicable laws and regulations

We do not sell personal information. We do not use it for purposes beyond those listed here without informing you first.

Who we share it with

To operate the atelier, we work with a small number of third-party services. These are the parties with whom your information may be shared.

Shopify. Our store is built on Shopify. Shopify stores and processes the data necessary to run the platform. You can read their privacy policy at shopify.com/legal/privacy.

Payment processors. Payments are processed by Shopify Payments or other payment providers made available through Shopify's platform. Your card details are handled by these processors directly and are subject to their privacy policies and security standards.

Shipping and fulfilment. When an order is shipped, your name and delivery address are shared with the relevant courier or shipping partner to fulfil the delivery.

Email. Where you have opted in to receive Field Notes or drop announcements, your email address is managed through Shopify's email tools. Shopify's privacy policy applies: shopify.com/legal/privacy.

Analytics. We use Google Analytics to understand how visitors use this site. Google Analytics collects anonymous usage data — pages visited, time on site, general location — and does not identify you personally. Google's privacy policy is available at policies.google.com/privacy. You can opt out of Google Analytics tracking across all sites by installing the Google Analytics Opt-out Browser Add-on.

Google Ads. We use Google's advertising tools to show GU content to people who have previously visited this site. Google may use cookies and your browsing activity to serve these ads across Google's network. You can manage your Google ad preferences at adssettings.google.com. Google's privacy policy is at policies.google.com/privacy.

Meta (Facebook and Instagram). We use Meta's advertising tools to show GU content to people who have previously visited this site, on Facebook and Instagram. Meta may use cookies and browsing data for this purpose. You can manage your Meta ad preferences in your Facebook or Instagram account settings. Meta's privacy policy is at facebook.com/privacy/policy.

[Flag: these clauses should be activated in the published policy only once the Google Ads and Meta pixels are live on the site. Remove this note before publishing.]

We do not share personal information with any party not listed here, except where required by law.

How long we hold it

When you place an order through the site, we retain your order information for our records unless and until you ask us to delete it. The length of time we retain data is subject to any legal or regulatory obligations that require us to hold it for a minimum period.

If you have opted in to email communications and later opt out, your email address is removed from active sending lists. Residual data held in system logs may persist for a limited period in line with our service providers' standard retention practices.

Cookies

Our website uses cookies — small data files placed on your device when you visit the site. Cookies are used to keep track of your session, remember your cart, and understand how the site is being used.

You can instruct your browser to refuse all cookies or to alert you when cookies are being sent. If you do this, some parts of the site may not function as intended.

We use the following types of cookies:

  • Necessary cookies. Required for the site to function. These cannot be switched off.
  • Performance cookies. Used by Google Analytics to help us understand how visitors interact with the site. No personally identifying information is collected.
  • Advertising cookies. Used by Google Ads and Meta to show GU content to previous visitors on those platforms. These are active only when the relevant pixels are installed.
  • Preference cookies. Remember choices you have made, such as language or region.

Your rights

Under Singapore's Personal Data Protection Act (PDPA) and other applicable laws, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate personal information
  • Withdraw consent to the collection, use, or disclosure of your personal information, subject to legal or contractual restrictions
  • Request deletion of your personal information, where we are not required by law to retain it

To exercise any of these rights, write to hello@gujewellery.com. We will respond within 30 days.

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

Do Not Track

Some browsers include a Do Not Track (DNT) setting. The third-party tools we use — Google Analytics, Google Ads, and Meta — do not alter their data collection in response to DNT signals. If you prefer not to be tracked, you can use the opt-out tools linked in the relevant sections above, or visit optout.networkadvertising.org to manage preferences across advertising networks.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The current version will always be available at this URL. Material changes will be communicated by updating the date at the bottom of this page.

Data requests

For any question about this policy, or to make a data access or deletion request, write to hello@gujewellery.com.