top of page

A legal disclaimer

Privacy Policy

Born and Raised
Last updated: [16/11/2025]

This Privacy Policy explains how Born and Raised (“we”, “us”, or “our”) collects, uses, and protects your personal information when you use our website bornandraisedayrshire.com and when you purchase our jewellery products.

We are committed to respecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Born and Raised
Address: 18A Barrhill Road, Cumnock, KA18 1PG
Email: iain@bornandraisedayrshire.com

We are the data controller for all personal information collected through our website and sales processes.

2. What Personal Data We Collect

A) Information you provide directly

  • Your name

  • Email address

  • Postal address (for deliveries)

  • Phone number (optional)

  • Payment details (processed securely by PayPal/Stripe—we do not store card numbers)

  • Any messages or enquiries via email or contact forms

B) Information collected automatically

When you visit our website, we may collect:

  • Your IP address

  • Browser type and version

  • Device information

  • Pages visited, time spent on the site

  • Cookies and tracking data (for functionality and analytics)

3. How We Use Your Information

We use your data to:

  • Process and deliver your orders

  • Contact you about your order or enquiry

  • Provide customer support

  • Improve website performance and customer experience

  • Prevent fraud or misuse

  • Send marketing emails only if you opt in

We do not sell or rent your personal information to third parties.

4. Legal Bases for Processing

We process your information under the following legal grounds:

  • Contract — to fulfil purchases, take payments, deliver items

  • Legitimate interests — maintaining site security, improving services

  • Consent — for marketing or optional cookies

  • Legal obligation — financial records required by HMRC

5. Sharing of Personal Data

We only share your information with trusted third-party providers as needed:

  • Payment processors (e.g., PayPal, Stripe)

  • Delivery services (e.g., Royal Mail, Evri)

  • Website hosting, security, and analytics providers

All partners must comply with UK GDPR and cannot use your data for their own purposes.

6. Data Retention

We keep your data only as long as necessary:

  • Order records: 6 years (legal requirement)

  • Enquiries: up to 12 months

  • Marketing emails: until you unsubscribe

7. Cookies

Our website may use cookies to:

  • Enable basic site functionality

  • Remember preferences

  • Analyse traffic (e.g., Google Analytics)

You can disable cookies in your browser settings at any time.

8. Your Rights Under UK GDPR

You have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request deletion (“right to be forgotten”)

  • Restrict or object to processing

  • Withdraw consent at any time

  • Request data portability

To exercise these rights, contact:
iain@bornandraisedayrshire.com

9. How We Protect Your Data

We use:

  • Encrypted connections (HTTPS)

  • Secure servers and storage

  • Limited access to personal data

  • Regular checks for security and compliance

Your data is stored in the UK or in GDPR-compliant services.

10. Contact Us

For any questions or privacy requests, please contact:

Born and Raised
18A Barrhill Road
Cumnock
KA18 1PG
Email: iain@bornandraisedayrshire.com

If you believe your data has not been handled correctly, you may complain to the Information Commissioner’s Office (ICO) at www.ico.org.uk.

Privacy Policy - the basics

Having said that, a privacy policy is a statement that discloses some or all of the ways a website collects, uses, discloses, processes, and manages the data of its visitors and customers. It usually also includes a statement regarding the website’s commitment to protecting its visitors’ or customers’ privacy, and an explanation about the different mechanisms the website is implementing in order to protect privacy. 

 

Different jurisdictions have different legal obligations of what must be included in a Privacy Policy. You are responsible to make sure you are following the relevant legislation to your activities and location. 

What to include in the Privacy Policy

Generally speaking, a Privacy Policy often addresses these types of issues: the types of information the website is collecting and the manner in which it collects the data; an explanation about why is the website collecting these types of information; what are the website’s practices on sharing the information with third parties; ways in which your visitors and customers can exercise their rights according to the relevant privacy legislation; the specific practices regarding minors’ data collection; and much, much more. 


To learn more about this, check out our article “Creating a Privacy Policy”.

bottom of page