Mayfair London
PartnershipConcierge

Statutory Legal Compliance · UK GDPR

Privacy Policy

Effective · October 2026

Data Controller

Mayfair London (mayfairlondon.uk) is owned and operated by Sovereign Chain Ltd, a private limited company registered in England and Wales under Company Registration Number 16139802, with corporate offices in Luton, United Kingdom.

We are committed to safeguarding the privacy of our private clients in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Information We Collect

When you acquire fine jewellery or request concierge services, we collect only the necessary data to execute your transaction and fulfill insured delivery:

  • Contact Information: Full name, email address, and mobile phone number for Royal Mail Tracked 24™ dispatch notifications and digital certificates.
  • Fulfilment Address: Delivery destination and billing address.
  • Payment Processing: Transactions are processed via Stripe Payments Europe Ltd using 256-bit encryption (Apple Pay, Google Pay, Visa, Mastercard). We never view, capture, or store your card numbers or CVV on our servers.
  • Technical Data: IP address, device type, and session cookies strictly necessary to maintain your shopping bag.

Legal Basis for Processing

We process your personal information under the following statutory grounds:

  • Performance of a Contract: To manufacture, inspect, package, and dispatch your jewelry order.
  • Legal Obligation: To maintain accounting records and comply with UK tax legislation (HMRC).
  • Consent: For optional marketing updates or non-essential analytics, which you may grant or withdraw at any time via our cookie preference controls.

Third-Party Disclosures

We do not sell, rent, or trade your personal data. We disclose information solely to vetted partners necessary for your order:

  • Royal Mail Group plc: Name, delivery address, and tracking phone number for tracked and signed delivery.
  • Stripe: Payment authorization under strict PCI-DSS Level 1 compliance.

Your Statutory Rights (UK GDPR)

As a UK or international data subject, you hold the right to:

  • Access a copy of the personal data we hold about you.
  • Request rectification of inaccurate information.
  • Request complete erasure ("Right to be Forgotten") where statutory accounting requirements permit.
  • Withdraw consent for marketing communications immediately with zero penalty.

Data Protection Liaison

To exercise any of your rights or request clarification on our data protocols, contact our Data Protection Officer:

concierge@mayfairlondon.uk

Sovereign Chain Ltd · Luton Base, United Kingdom · WhatsApp: 07412 279132