Legal
Privacy Notice
This notice explains what personal data Purael collects when you browse this site, ask us a question or place an order, what we do with it, and how you can see, correct or delete it.
Last updated 12 October 2026
- We do not sell or rent personal data
- Payment card details never reach Purael's systems
- Order records are kept for seven years to meet tax and warranty obligations
- You can request a copy or deletion of your data at any time
Who is responsible for your data
Purael is the data controller responsible for deciding what personal data is collected through purael.com and why.
- Privacy contact
- privacy@purael.com
- General contact
- support@purael.com
- Response time
- Within 30 days of a verified request
What we collect
- Data you give us
- Name, email address, telephone number, billing and delivery addresses, the contents of enquiries and consultation notes, ring size and engraving text, account credentials, and any wishlist or saved configuration.
- Order and payment data
- What you bought, the amount, the currency, the delivery destination, order status and correspondence. Card numbers are entered directly into our payment provider's systems; Purael receives only the result, the card type and the last four digits.
- Technical data
- IP address, device and browser type, pages viewed, referring page, and session identifiers needed to keep you signed in and to keep a cart intact between visits.
- Images you upload
- Photographs submitted for a virtual try-on or a service request. Try-on images are processed to generate the preview and are not used to train models or build a profile.
We do not ask for, and ask that you do not send us, identity documents, financial account numbers, health information or any other sensitive category of data. If a customs authority requires an identity document for a shipment, we will tell you what is needed and why before you send anything.
Why we use it, and on what basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Taking, producing and delivering an order | Contact, address, order and size data | Performance of a contract |
| Answering enquiries and consultations | Contact details and the content of your message | Performance of a contract, or our legitimate interest in replying |
| Returns, resizing, warranty and service | Order history and service correspondence | Performance of a contract and legal obligation |
| Fraud prevention and securing the site | Technical data and order patterns | Legitimate interest in preventing fraud |
| Tax, customs and accounting records | Invoice and shipment data | Legal obligation |
| Marketing email, where you opted in | Name and email address | Consent, withdrawable at any time |
| Improving the storefront | Aggregated usage data | Legitimate interest, or consent where cookies require it |
International transfers
Purael serves customers worldwide, so personal data may be transferred outside the country you live in — including to our workshop, our carriers and our hosting providers. Where data is transferred out of the European Economic Area or the United Kingdom, we rely on the European Commission's standard contractual clauses, together with the UK addendum where it applies, and we assess the destination's laws before transferring.
How long we keep it
- Order, invoice and customs records
- Seven years from the end of the financial year, to meet tax and accounting law.
- Warranty and service history
- For the life of the piece, so a future claim can be verified.
- Account data
- Until you delete the account, then removed within 30 days apart from records we must keep.
- Enquiries that do not lead to an order
- 24 months from the last contact.
- Marketing consent records
- Until you withdraw consent, plus the period needed to prove the consent existed.
- Try-on images
- Deleted after the preview is generated and within 30 days at the latest.
Your rights
Wherever you live, you may ask us to do any of the following by emailing privacy@purael.com. We answer within 30 days and never charge for a first request.
- Confirm whether we hold data about you, and give you a copy of it
- Correct data that is inaccurate or incomplete
- Delete data we no longer need for a contract or a legal obligation
- Restrict or object to a particular use, including any profiling
- Receive your data in a portable, machine-readable format
- Withdraw marketing consent, which takes effect immediately
We verify a request against the order or account it relates to before acting on it, so that nobody can obtain your data by asking in your name. If you are in the European Economic Area or the United Kingdom you may also complain to your national supervisory authority — in the United Kingdom, the Information Commissioner's Office. California residents may exercise the rights to know, delete, correct and opt out of sale or sharing — Purael does not sell or share personal data as those terms are defined by the CCPA.
Security
The site is served over TLS, access to customer records is restricted to staff who need it, and payment data is handled entirely by our PCI-DSS compliant payment provider. No system is perfect: if a breach ever affects your data and creates a real risk to you, we will notify you and the relevant regulator within the time the law requires.
Children
This storefront is intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email us and we will delete it.
Changes to this notice
When this notice changes we update the date at the top of the page. Where a change materially affects how we use data you have already given us, we will tell account holders by email before it takes effect.