Hazel

Privacy Policy

Last updated: June 22, 2026

1. Who we are

Hazel — Handmade Keepsakes & Jewellery ("Hazel", "I", "we", "us") is a sole trader based in Newcastle upon Tyne, Tyne and Wear, United Kingdom, operating the website hazeljewellery.co.uk ("the Site"). I am the data controller responsible for your personal information. If you have any questions about this policy or your data, you can reach me at hazel_foreman@icloud.com.

This is a small, one-person handmade-keepsakes business. I collect as little personal information as possible — only what I need to answer your enquiry and make your keepsake.

2. What information I collect

  • Your enquiry: when you use the contact form, I collect the name and email address you give me, plus anything you choose to tell me (what you have in mind, the occasion, and any deadline). The form is handled by Netlify Forms (see "Who else handles your data" below) and the submission is emailed to me.
  • If you message me another way: if you email me directly or message me on Facebook/Messenger, I receive whatever you send. Messages sent through Facebook are also subject to Meta's own privacy policy.
  • The items you send me: the clothing and keepsake items you hand over or post are not "data", but I treat them as precious and return any unused fabric with your finished keepsake.
  • Basic technical data: like any website, my host records standard server logs (such as IP address and browser type) to keep the Site running and secure.
  • Analytics (only with your consent): if analytics is enabled, I use Google Analytics 4 to understand in aggregate how the Site is used. This only runs after you accept analytics cookies. If you do not consent, no analytics cookies are set and no analytics data is collected.

3. Cookies and local storage

The Site uses very few cookies and similar technologies:

  • Essential (always on): small items stored in your browser to remember your theme (light/dark) choice and your cookie-consent choice. These stay on your device, are not used to track you, and need no consent.
  • Analytics (off until you agree): Google Analytics 4 cookies, set only after you accept analytics in the cookie banner. You can change or withdraw this at any time via "Cookie Settings" in the footer.
  • Marketing: not used on this Site. The category appears in the cookie panel only so your preference is on record if anything changes in future; it would always require your explicit opt-in first.

Non-essential cookies are only activated after you give explicit consent through the cookie banner. You can review or change your choices any time using the "Cookie Settings" link in the footer, or through your browser settings.

4. How I use your information

  • To reply to your enquiry and discuss, design, and make your keepsake or jewellery.
  • To arrange drop-off, collection, or postage.
  • To keep the Site running, secure, and working properly.
  • With your consent, to understand in aggregate how the Site is used so I can improve it.

I do not sell, rent, or trade your personal information, and I do not use it for third-party advertising.

5. Legal bases for processing (UK/EU GDPR)

  • Steps prior to a contract & legitimate interests (Art. 6(1)(b) and 6(1)(f)): replying to your enquiry, discussing and making your commission, and keeping the Site secure.
  • Consent (Art. 6(1)(a)): analytics cookies. You can withdraw consent at any time via "Cookie Settings".

6. Who else handles your data

I keep third parties to a minimum:

  • Netlify, Inc. (USA): hosts the Site and processes contact-form submissions, which are emailed to me. See Netlify's Privacy Policy.
  • Apple (iCloud Mail): my email is an iCloud address, so Apple processes email I receive. See Apple's Privacy Policy.
  • Google LLC (USA): Google Analytics 4, only if you consent. See Google's Privacy Policy.
  • Meta Platforms: only if you choose to contact me via Facebook or Messenger. See Meta's Privacy Policy.

International transfers: some providers (Netlify, Google, Apple, Meta) are based in the United States. Where personal data is transferred outside the UK/EEA, it is protected by appropriate safeguards such as the EU–U.S./UK Data Privacy Framework and Standard Contractual Clauses.

7. How long I keep it

  • Enquiries and related messages: kept while I'm helping you and for a reasonable period afterward in case you come back, then deleted. If your enquiry doesn't lead to a commission, I delete it sooner.
  • Analytics data: retained for up to 26 months (Google Analytics 4 default), then deleted.
  • Cookie-consent choice: stored on your device for up to 12 months, after which you'll be asked again.

8. Your rights (UK/EU GDPR)

If you are in the UK or EEA, you have the right to:

  • Access the personal data I hold about you.
  • Have inaccurate data corrected.
  • Have your data erased.
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent (e.g. for analytics) at any time.

To exercise any of these, just email me at hazel_foreman@icloud.com and I'll respond within one month. If you're unhappy with how I've handled your data, you can complain to the UK's Information Commissioner's Office (ICO), or your local EEA supervisory authority.

9. US residents (including California)

I do not sell or share your personal information (as those terms are defined under the California Consumer Privacy Act as amended by the CPRA), and I do not use it for cross-context behavioural advertising. If you are a US resident, you may request to know what personal information I hold, ask me to delete it, and ask me to correct it — email hazel_foreman@icloud.com and I won't discriminate against you for exercising these rights.

Global Privacy Control (GPC): the Site honours the GPC browser signal. When GPC is detected, non-essential cookies (analytics and marketing) are automatically declined — no further action needed from you.

10. Keeping your information safe

The Site is served over HTTPS, and I take reasonable steps to protect your information. No method of transmission or storage is completely secure, but I keep the data I hold to a minimum and don't share it for marketing.

11. Children

The Site is not directed at children, and I don't knowingly collect personal information from children. If you believe a child has provided me with personal information, please contact me and I'll delete it.

12. Changes to this policy

I may update this policy from time to time. Any changes will appear here with a new "Last updated" date.

13. Contact

Questions about this policy or your data? Email me at hazel_foreman@icloud.com.