Terms & Conditions/Private Policy
PRIVACY POLICY
Last updated: 24 October 2026
THE SHORT VERSION
• We collect only what we need to make, sell and deliver your jewellery and to run our business properly.
• We never sell your personal data.
• We never see or store your full card details. Payments are handled by regulated payment providers.
• We only send you marketing if you have agreed to it, and you can opt out at any time.
1. WHO WE ARE
Konkrete Karats Ltd (Company No. 17228553), 20 Wenlock Road, London, England, N1 7GU, is the data controller for personal data collected through konkretekarats.com, our social media channels, and our sales in person, at pop-ups and private viewings. We are registered with the Information Commissioner's Office (ICO) under registration number [ICO REGISTRATION NUMBER].
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For any privacy question, contact antz@konkretekarats.com.
2. WHAT WE COLLECT
• Identity: name; date of birth and photo ID where needed to verify a higher-value order or collection.
• Contact: email, phone number, social media handle, billing and delivery address.
• Order: pieces enquired about or bought, specifications, ring and chain sizes, design briefs, quotes, invoices, deposit and instalment records.
• Payment: payment method, transaction reference, amount and date. Full card numbers are handled only by our payment providers.
• Grillz impressions: dental impressions and related fit information, used only to make and adjust your grillz.
• Communications: messages, emails, call notes and any reviews or feedback you give us.
• Technical: IP address, browser and device type, and website usage data collected through cookies (see section 8).
• Marketing: your preferences for receiving news of drops, events and offers.
We collect most of this directly from you. We may also receive limited information from payment providers (for example, confirmation that a payment succeeded or was flagged) and from couriers (delivery status).
3. HOW WE USE IT & WHY
• Responding to enquiries, quoting, taking and fulfilling orders, making bespoke pieces and grillz, delivery, aftercare, returns and repairs. Lawful basis: performance of a contract with you, or steps taken at your request before entering one.
• Taking payments, managing deposits and instalments, and issuing invoices and receipts. Lawful basis: performance of a contract.
• Keeping accounting and tax records, and complying with other legal and regulatory obligations. Lawful basis: legal obligation.
• Verifying identity and preventing fraud on high-value orders and collections; responding to checks from our banks and payment providers. Lawful basis: legitimate interests (protecting our customers and business from fraud) and, where applicable, legal obligation.
• Using dental impressions to make and fit grillz. Lawful basis: your explicit consent, given when you submit your impression. You can withdraw it at any time, although we will then be unable to make or adjust your grillz.
• Running and improving our website and understanding how it is used. Lawful basis: legitimate interests; consent for non-essential cookies.
• Sending news of drops, events and offers. Lawful basis: your consent, or for existing customers, our legitimate interests in telling you about similar products (you can opt out at any time).
• Handling complaints and legal claims. Lawful basis: legitimate interests and legal obligation.
We do not use automated decision-making or profiling that has a legal or similarly significant effect on you.
4. WHO WE SHARE IT WITH
We never sell your personal data. We share it only where necessary with:
• Payment providers and our bank, to process and verify payments and refunds;
• Couriers, to deliver your order (name, address, phone number);
• Our bench jewellers, workshops and finishing contractors, who receive only the specifications needed to make your piece, not your contact details unless essential;
• Certification laboratories (such as GIA, IGI or GCAL) in connection with diamond certification;
• IT, email and website hosting providers who store data on our behalf;
• Our accountants and professional advisers;
• Law enforcement, HMRC, regulators or courts, where we are legally required to, or to prevent fraud or crime.
Everyone who processes data on our behalf must keep it secure and use it only for the purposes we specify.
5. INTERNATIONAL TRANSFERS
Some of our service providers (such as payment, email or hosting providers) may store or process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as a UK adequacy decision for the destination country or the ICO's International Data Transfer Agreement or Addendum.
6. HOW LONG WE KEEP IT
• Sales, invoices and payment records: 6 years from the end of the financial year of the transaction, as required for company and tax records.
• Enquiries that did not lead to a sale: up to 12 months.
• Identity verification records: for as long as needed for fraud prevention and our legal obligations, and no longer than 6 years after the transaction.
• Grillz impressions: kept until your grillz are completed plus a 6-month adjustment period, then securely destroyed (or returned to you on request).
• Marketing preferences: until you unsubscribe, after which we keep a suppression record so we do not contact you again.
7. HOW WE PROTECT IT
We use appropriate technical and organisational measures to protect your data, including password-protected and two-factor-secured accounts, limited access on a need-to-know basis, and regulated payment providers so that card details never pass through our systems. If a data breach occurs that is likely to put your rights at risk, we will notify you and the ICO as the law requires.
8. COOKIES
Our website uses cookies, which are small files stored on your device.
• Essential cookies are needed for the site to work and do not require consent.
• Analytics and marketing cookies help us understand how the site is used and measure our campaigns. We only set these with your consent, which you can give or withdraw through our cookie banner at any time.
You can also block or delete cookies through your browser settings, although some parts of the site may not work properly if you do.
9. YOUR RIGHTS
Under UK data protection law you have the right to:
• access a copy of the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data, where we no longer have a valid reason to keep it;
• ask us to restrict how we use your data;
• object to processing based on legitimate interests, and to direct marketing at any time;
• receive your data in a portable format (data portability);
• withdraw consent at any time, where we rely on it.
To exercise any of these rights, email antz@konkretekarats.com. We will respond within one month and there is usually no fee. We may need to confirm your identity first.
If you are unhappy with how we have handled your data, please contact us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
10. UNDER-18s
Our products and services are intended for adults. We do not knowingly sell to, or collect personal data from, anyone under 18.
11. CHANGES & CONTACT
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.
Konkrete Karats Ltd · Company No. 17228553 · 20 Wenlock Road, London, England, N1 7GU · antz@konkretekarats.com · konkretekarats.com