Privacy Policy and Cookies Notice
Effective Date: 19th September, 2026
Important Notice: by using this website, you agree to the practices described in this privacy policy and cookies notice (“Policy”).
1. Introduction
1.1. This Policy gives you information about how Abbott Lyon collects and uses your personal data through your use of this website, including any data collected from you when you are browsing and purchasing products. All information collected about you will be used lawfully by us, in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679. If there are any requests or queries you have concerning the use of your personal information, please contact privacy@abbottlyon.com .
1.2. This website is not intended for children, and we do not intentionally or knowingly collect data relating to children.
2. Who are we?
Abbott Lyon Ltd is the controller and responsible for your personal data (collectively referred to as "Abott Lyon", "we", "us" or "our" in this Policy). We are not required to have a data protection officer. If you have any enquiries about our use of your personal data should be addressed to the contact details above.
3. What personal data do we collect?
3.1. Personal data means any information about an individual from which that person can be identified.
3.2. We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:
(a) identity data includes first name and last name;
(b) contact data includes billing address, delivery address, email address and telephone numbers;
(c) financial data includes bank account and payment card details;
(d) transaction data includes details about payments to and from you and other details of products you have purchased from us;
(e) image data, including photographs uploaded by you for personalised products (such as photo lockets), fingerprint images used in connection with personalised jewellery, and photographs submitted in connection with warranty claims, quality assessments, returns, complaints or customer support enquiries;
(f) technical data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, a list of URLs relating to your activity on the website, device ID and other technology on the devices you use to access this website;
(g) profile data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses;
(h) usage data includes information about how you interact with and use our website and products;
(i) marketing and communications data includes your preferences in receiving marketing from us and our third parties and your communication preferences;
(j) cookie information which we provide more information about below; and
(k) biometric data includes fingerprint images or associated biometric data for our personalised jewellery (e.g., fingerprint pendants).
3.3. We also collect, use and share aggregated data such as statistical or demographic data which is not personal data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' Usage Data to calculate the percentage of users accessing a specific website feature in order to analyse general trends in how users are interacting with our website to help improve the website and our service offering.
4. How is your personal data collected?
4.1. We use different methods to collect data from and about you including through:
(a) Your interactions with us. You may give us your personal data by filling in online forms or by corresponding with us by phone, email or otherwise. This includes personal data you provide when you:
(i) purchase our products;
(ii) create an account on our website;
(iii) subscribe to our service or publications;
(iv) request marketing to be sent to you; or
(v) give us feedback or contact us.
(b) Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using and other similar technologies. We may also receive technical data about you if you visit other websites employing our cookies.
5. Why do we collect this information?
5.1. The law requires us to have a legal basis for collecting and using your personal data. We rely on one or more of the following legal bases:
(a) Performance of a contract with you: where we need to perform the contract we are about to enter into or have entered into with you.
(b) Legitimate interests: we may use your personal data where it is necessary to conduct our business and pursue our legitimate interests, for example to give you the best and most secure customer experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
(c) Legal obligation: we may use your personal data where it is necessary for compliance with a legal obligation that we are subject to. We will identify the relevant legal obligation when we rely on this legal basis.
(d) Consent: we rely on consent only where we have obtained your active agreement to use your personal data for a specified purpose, for example if you subscribe to an email newsletter.
6. Purposes for which we will use your personal data
6.1. We will use your personal data for the following purposes:
(a) to register you as a new customer;
(b) to verify your payment details for your purchase;
(c) to process and deliver your order including:
(i) manage payments, fees and charges; and
(ii) collect and recover money owed to us;
(d) to manage our relationship with you which will include:
(i) notifying you about changes to our terms or privacy policy; and
(ii) dealing with your requests, complaints and queries.
(e) to administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data);
(f) to deliver relevant website content and online advertisements to you and measure or understand the effectiveness of the advertising we serve to you;
(g) to use data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing;
(h) to send you relevant marketing communications and make personalised suggestions and recommendations to you about goods or services that may be of interest to you based on your profile data;
(i) to create your custom piece (personal data, including biometric data, will not be used for identification, authentication, or any unrelated purpose); and
(j) to administer warranties, investigate complaints, verify what was ordered, assess returns and refunds, handle customer service enquiries, and to resolve disputes.
7. What do we do with your information?
7.1. Your personal data may be processed and stored in the United Kingdom, the European Economic Area and in our order processing system which is based in Canada and the United States. Where we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including the use of adequacy regulations, standard contractual clauses or other lawful transfer mechanisms where required.. Your debit/credit card details are passed to a third-party payment processor which is based in the EEA and is operating under GDPR requirements.
7.2. If you are using a third-party payment processor (e.g. PayPal) your payment data will be protected under their privacy policy. We use various third-party couriers to deliver your products and we share with them your name, address and telephone number in order to complete the delivery. We do not use the information you provide to make any automated decisions that might affect you.
8. Our use of third party websites and services
8.1. We may, from time to time, employ the services of other parties for dealing with matters relating to payment handling, delivery of purchased items, search engine facilities, advertising, and marketing. The providers of such services do have access to certain personal information provided by any website user. Any of this information is only used by them to perform the services that are requested by us, and nothing else, as this is prohibited.
8.2. We may share your personal data with selected third-party service providers who assist us in operating our business, including payment providers, logistics and delivery providers, e-commerce and hosting providers, customer support providers, analytics providers, advertising and marketing partners, fraud prevention providers, and manufacturers involved in producing personalised products. For further information about the third parties with whom we share personal data, please contact us
8.3. We do have a marketing department and upon registration or placing an online order we will be notifying you with regards to the order, and the entire transaction process. After the completion of the transaction, we may send across marketing materials if you opted-in to receiving marketing updates or have signed up to receive the Abbott Lyon newsletter. You do however have the option to opt-out of these if you wish.
8.4. Furthermore, any of the provided information that is processed by third parties must be processed within the terms of this Policy and in accordance with the EU General Data Protection Regulation (GDPR). Unless we are obliged or permitted by law to do so, and other than the previously mentioned, your information will not be disclosed to any other third parties.
9. Marketing purposes
9.1. During the registration process on our website when your personal data is collected, you will be asked to indicate your preferences for receiving direct marketing communications from us via email. We may use your personal data to provide you with information that you have requested from us and to inform you of offers or other goods or services that may be of interest to you (but only where you have not objected to be contacted for such purposes).
9.2. We will only contact you by electronic means (email) information about goods and services similar to those which were the subject of a previous sale to you. We will only do this where you have previously made an order with us or you have otherwise confirmed that you agree to us sending you such information (see ‘Purposes for which we will use your personal data’ above).
9.3. Please note that you have the right to ask us not to process your personal data for marketing purposes. We will usually inform you before collecting your data if we intend to use your data for such purposes or if we intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by:
(a) checking certain boxes on the forms we use to collect your data; or
(b) you can also request us not to use your personal data for this purpose when setting up your Abbott Lyon account; or
(c) using the ‘Unsubscribe’ link provided in all marketing communications; or
(d) by contacting us.
9.4. If you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes for example relating to order confirmations and updates to our Terms and Conditions.
9.5. We will only use information you provide through the Program to transmit your mobile messages and respond to you, if necessary. This includes, but is not limited to, sharing information with platform providers, phone companies, and other vendors who assist us in the delivery of mobile messages. WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS OR CUSTOMER INFORMATION COLLECTED THROUGH THE PROGRAM TO ANY THIRD PARTY. Nonetheless, We reserve the right at all times to disclose any information as necessary to satisfy any law, regulation or governmental request, to avoid liability, or to protect Our rights or property. When you complete forms online or otherwise provide Us information in connection with the Program, you agree to provide accurate, complete, and true information. You agree not to use a false or misleading name or a name that you are not authorized to use. If, in Our sole discretion, We believe that any such information is untrue, inaccurate, or incomplete, or you have opted into the Program for an ulterior purpose, We may refuse you access to the Program and pursue any appropriate legal remedies.
9.6. From time to time, we may take third party data, including obtaining limited personal data about prospective customers from carefully selected third-party sources for marketing purposes where permitted by applicable law. Where we do so, we will process that information on the basis of our legitimate interests in promoting and growing our business, having considered the impact on individuals and their rights. Individuals have the right to object at any time to the processing of their personal data for direct marketing purposes.
10. Cookies Notice
10.1. Our website uses cookies and similar technologies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website. Where required by law, we will ask for your consent before placing non-essential cookies on your device. You can manage your cookie preferences at any time through our cookie preference centre.
10.2. A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your device if you agree. Cookies contain information that is transferred to your device's hard drive.
10.3. We use the following cookies:
(a) Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
(b) Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
(c) Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
(d) Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
10.4. You can find more information about the individual cookies we use and the purposes for which we use them below:
Strictly necessary
(a) Shopify and Shop Pay: To operate the online store, including your basket, checkout and payment.
(b) Cloudflare: To keep the website secure and detect malicious traffic.
(c) OneTrust (CookiePro): To store your cookie consent preferences.
(d) NoFraud: To screen orders for payment fraud.
Performance
(a) Google Analytics: To track user and website behaviour.
(b) Microsoft Clarity: To track user and website behaviour.
(c) Heatmap.com: To analyse on-site behaviour and conversion.
(d) Northbeam: For website analytics and marketing attribution.
(e) TVSquared: For advertising measurement and attribution.
(f) LittleData: To track purchases and send analytics data server-side.
(g) ProfitMetrics: To track order profitability and conversions.
(h) Sentry: To monitor website errors and performance.
(i) New Relic: To monitor website performance. (confirm still in use)
Functional
(a) Swym: To remember your wishlist and saved items.
(b) Reviews.io: To display product reviews.
(c) Trustpilot: To collect and display reviews.
(d) Intelligems: For price and offer testing.
(e) DigitalGenius: To provide live chat and customer support.
(f) Duel: To run brand advocacy and community features.
(g) Instagram: To display embedded social media content.
(h) Vimeo and YouTube: To play embedded video content. These providers may also set advertising cookies. (confirm still in use)
(i) Student Beans and GoCertify: To verify eligibility for student and key worker discounts. (confirm still in use)
(j) Convert: For on-site A/B testing. (confirm still in use)
Targeting
(a) Meta (Facebook and Instagram): To display relevant advertising and measure its effectiveness.
(b) Google Ads and DoubleClick: To display relevant advertising and measure its effectiveness.
(c) Microsoft Advertising (Bing): To display relevant advertising.
(d) TikTok: To display relevant advertising.
(e) Snapchat: To display relevant advertising.
(f) Pinterest: To display relevant advertising.
(g) Rakuten Advertising: To track affiliate referrals.
(h) Talkable: To track referral programme activity.
(i) Klaviyo: For email and SMS marketing and on-site personalisation.
(j) Data Match: To display relevant advertising.
(k) Amazon: To display relevant advertising.
10.5. Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
10.6. You may block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. Alternatively, you can visit www.allaboutcookies.org which provides general information about cookies and how you can manage cookies on your computer. Please note that if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our site.
11. Your privacy rights
11.1. You have a number of rights under data protection laws in relation to your personal data.
11.2. You have the right to:
(a) Request access to your personal data (commonly known as a "subject access request"). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
(b) Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
(c) Request erasure of your personal data in certain circumstances. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
(d) Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) as the legal basis for that particular use of your data (including carrying out profiling based on our legitimate interests). In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your right to object.
(e) You also have the absolute right to object any time to the processing of your personal data for direct marketing purposes (see section 9 on marketing purposes above for details of how to object to receiving direct marketing communications).
(f) Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
(g) Withdraw consent at any time where we are relying on consent to process your personal data (see the section 5 for details of when we rely on your consent as the legal basis for using your data). However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
(h) Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in one of the following scenarios:
(i) if you want us to establish the data's accuracy;
(ii) where our use of the data is unlawful but you do not want us to erase it;
(iii) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
(iv) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
11.3. If you wish to exercise any of the rights set out above, please contact: privacy@abbottlyon.com.
11.4. The below companies may collect personal information when you interact with our digital property, including IP addresses, digital identifiers, information about your web browsing and app usage and how you interact with our properties and ads for a variety of purposes, such as personalization of offers or advertisements, analytics about how you engage with websites or ads and other commercial purposes. For more information about the collection, use and sale of your personal data and your rights, please use the below links.
https://rakutenadvertising.com/legal-notices/services-privacy-policy
https://rakutenadvertising.com/legal-notices/services-privacy-rights-request-form
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we could refuse to comply with your request in these circumstances.
12. Security
12.1. Data security is of great importance to us and to protect it we have put in place suitable physical, electronic and managerial procedures to safeguard and secure it all. There is limited access to your information, the use of passwords is continuous, and we have our computers with the appropriate firewalls.
12.2. We have put in place browser certification technology and encryption on our website which is why you see the green padlock next to our website address in the bar at the top of your browser. This protects your information and keeps everything private.
12.3. When you visit a website that uses HTTPS (connection security), like us, our website's server uses a special certificate to prove our identity to the browser that you are using. To help you stay on safe on the web, many website browsers require websites to use these certificates.
12.4. In the unlikely event of a data breach of any sort, this will be rectified in-house with the support of the https://ico.org.uk. Being as the information we carry on our website and in our marketing details is non-financial, this is not much use to anyone other than ourselves. We are basically a shop and not a service provider. We sell a physical product to you rather than allowing you to use a service that we provide.
12.5. No debit/credit card information is held on this website.
13. Retention
13.1. If you create an account and/or make an order with us, we will hold your data for seven (7) years to satisfy accounting law.
13.2. We retain biometric data for so long as reasonably necessary to:
(a) fulfil your order;
(b) administer returns and refunds;
(c) establish what was originally ordered for the purposes of investigating complains; and
(d) provide warranty services..
14. Sharing & Disclosure
14.1. We do not share biometric data with third parties except with vendors directly involved in making your item (e.g., manufacturing partners).
14.2. All partners are contractually obligated to comply with GDPR and treat biometric data as highly sensitive.
15. Complaints
15.1. If you are unhappy with how we have handled your personal data, you have the right to make a complaint to us. The easiest way is to contact our data protection team directly at privacy@abottlyon.com, or our customer service team at hello@abbottlyon.com or through any of the channels listed on our Contact page.
15.2. We will acknowledge your complaint within thirty (30) days of receiving it, look into it carefully, and write to you with the outcome.
15.3. If you are not satisfied with our response, you have the right to raise your concern with:
(a) UK: the Information Commissioner's Office (ICO), the UK supervisory authority for data protection matters. Further information is available at www.ico.org.uk;
(b) EU: your local data protection authority in the EU (you can also contact our EU representative at [EU rep contact]); or
(c) US: or the relevant authority in your state in the US.
15.4. We would, however, appreciate the opportunity to address your concerns before you approach the relevant authority and therefore ask that you contact us first.
16. Disclosures
Abbott Lyon Limited will not pass your information to any third parties except in the above-mentioned circumstances. If you wish to stop receiving any information about Abbott Lyon Limited and our services, please contact us.