Privacy and Security Policy

Overview
At Silver Enterprises Ltd trading as Robert Harris Jewellers and www.rhjewellers.com, we understand that our customers are concerned about the security of their debit and credit card details. We take significant steps to protect all your information and remain compliant with government standards.

What Information do we collect from our customers?
Name, address, email address, phone number, payment card information and CCTV images.

Where is the data stored?
Repair books, repair envelopes, valuation books, buying books, credit note books, customer order books, deposit books, notebooks, prize draw forms, prize draw database, email marketing system, V12 Finance system, CCTV recording device, website server.  

How do we protect your data?
All electronic devices that hold customer data are password protected.
Any data stored on third party systems such as personal data used for marketing is held securely, password protected and can only be accessed by staff members of Silver Enterprises Ltd.
All transactional data sent via the website is Hyper Text Transfer Protocol Secure (HTTPS) which means that is secure and encrypted.
If you create an online account on our website your password is personal to you and we cannot access it.

All books and paper copy with customer information in either kept in the shop office or a locked drawer in the shop. The only people to have access to this information are staff members.
We take data and shop security seriously and when the shop is not open it is very secure and alarmed.
All paperwork is shredded when no longer required.

Information we have to keep
There is some information that we are legally obliged to keep such as sellers details when selling a piece of jewellery. This information may be shared with the police.
We keep CCTV images to refer back to in case we have a security issue. This information may be shared with the police.
It is advantageous for us and the customer to keep some information long term such as jewellery valuations so that these can be referred back to in the case of re-valuing an item or proving ownership to an insurance company.

Why do we keep information?
We keep customer contact information to enable us to contact anyone regarding valuations, repairs, orders or customer enquiries.
Transactional data is kept for accounting purposes.
Personal information given when selling jewellery is kept to up-keep legal requirements.
Information captured online is used to improve our marketing and promotional efforts, to statistically analyse site usage, to improve our content and product offerings and to customise our site’s content, layout and services. We believe this allows us to improve our website and better tailor it to meet the user’s requirements.

Disclosure of Your Information
We do not sell or rent any personally identifiable information about you to any third party.
Due to the existing regulatory environment, we cannot ensure that all of your private communications and other personally identifiable information will never be disclosed in ways not otherwise described in this Privacy Policy.
By way of example (without limiting the foregoing), we may be forced to disclose information to the government or third parties under certain circumstances, or third parties may unlawfully intercept or access transmissions or private communications. We can (and you authorise us to) disclose any information about you to law enforcement or other government officials as we, in our sole discretion, believe necessary or appropriate, in connection with an investigation of fraud, Intellectual Property Rights infringements, or other activity that is illegal or may expose us to legal liability.

Consent
We will only contact you if we have your consent. We will not market to you unless you opted to receive information from us. You never have to give us consent if you do not wish to be contacted. You will not be penalised in any way by not giving us consent.

Cookies
Cookies are tiny text files stored on your computer when you visit certain web pages. At rhjewellers.com we use cookies to keep track of what you have in your basket, and to remember you when you return to our site.
Please note that cookies can't harm your computer. We don't store personally identifiable information such as credit card details in cookies we create, but we do use encrypted information gathered from them to help improve your experience of the site. For example, they help us to identify and resolve errors, or to determine relevant related products to show you when you're browsing.

How to Manage Cookies
We use a number of different cookies on our site. If you do not know what cookies are, or how to control or delete them, then we recommend you visit http://www.aboutcookies.org for detailed guidance. 

Session Cookies
We use session cookies to remember your log-in and what you’ve put in the shopping basket. These we deem strictly necessary to the working of the website. If these are disabled then various functionality on the site will be affected. More information on session cookies and what they are used for at http://www.allaboutcookies.org/cookies/session-cookies-used-for.html.

Payment Processing
We use Sage Payments as our external payment provider for online transactions at rhjewellers.com. We require the billing address of the credit card you use so that we can pass this to Sage Payments, who check the address against the cardholder's details for security purposes. We don't store credit card details on our server. Sage Payments require that you provide your credit card details to process the transaction. This is done on a secure Sage Payments server and data passing between rhjewellers.com servers and Sage Payments are encrypted using 128bit SSL (Secure Sockets Layer). 

Transferring Your Personal Information
When we obtain information about you, we may transfer, process, and store such information both within and outside of the European Economic Area. By providing us with your information, you consent to the transfer to, and to the processing and storage of your information in, countries outside of your country of residence, which may have different data protection laws than those in the country in which you reside.

Access, Portability, Removal or Change of Personal Information and Data
If you would access to any information that we have about you, please let us know and we will be happy to provide you with it, this includes for use of data portability.
If you wish us to remove or change your personal data please let us know where you would like us to change it or remove it from. We will then change or remove it within 30 days.
You can let us know in person in the shop at Robert Harris Jewellers. 139 High Street, Rickmansworth, Hertfordshire, WD3 1AR, by phone on +44 (0)1923 779325 or by email on
info@robertharrisjewellers.co.uk.
You may self-unsubscribe from marketing email by following the unsubscribe link at the bottom of a marketing email.
We may not be able to delete some information because of accounting or legal requirements.

Data Breach
If our data is breached we will investigate how it was breached, take steps to ensure that it doesn’t happen again and contact anyone that is affected.

Lawful Basis
Our lawful bases for storing a customer’s details are as follows:
By consent if you have opted to receive marketing emails, completed a prize draw entry form or given us contact details to enable us to contact you about a specific job, task or enquiry. 
By legal obligation should you sell an item to us or carry put a financial transaction with us.
For legitimate interests to enable us to refer back to information to benefit the company and the customer.

Complaints
If you are not happy about the way your data is being handled in the first instance please contact Richard Harris (Director) - +44(0)1923 779325 or
richard@robertharrisjewellers.co.uk. If you are still not satisfied you may contact the Information Commission’s Office with whom Silver Enterprises Ltd is registered - 0303 123 1113 or see https://ico.org.uk/concerns/