1. Who we are

In this policy, "we", "us" or "Essardas" refers to Essardas Group, a family of jewellery and watch boutiques operating on Main Street, Gibraltar. Our principal office is at 173 Main Street, Gibraltar GX11 1AA. You can contact our data team at privacy@essardasgroup.com.

2. The data we collect

When you contact us, book an appointment, sign up to the newsletter, or purchase from us (in-boutique or online), we may collect: your name, contact details (email, phone), the boutique and specialist you interact with, the nature of your enquiry or purchase, identification details where required by law for high-value transactions, and technical data (IP address, device, pages visited) when you use this website.

3. How we use it

We use your data to respond to enquiries, deliver and service purchases, maintain records of warranties and valuations, send you occasional updates you have opted into, comply with our legal obligations, and improve our services. We do not sell your data to third parties.

4. Legal basis

We rely on your consent (newsletter), the performance of a contract (purchase / service), legitimate interest (responding to your enquiry, fraud prevention), and legal obligation (tax records, anti-money-laundering).

5. Sharing

We may share data with: our group boutiques (for coordinated service), our payment and shipping providers, manufacturers we service through (for warranty work), professional advisors, and regulators where required by law. All such partners are bound by confidentiality.

6. Retention

We keep appointment records for 24 months, purchase records for as long as required by Gibraltar tax law, and newsletter subscriptions until you unsubscribe. Warranty and valuation documents are retained for the life of the relationship.

7. Your rights

Under the Gibraltar Data Protection Act 2004 and UK GDPR principles, you have the right to access, rectify, erase, restrict, port and object to our processing of your data, and to withdraw consent at any time. To exercise any right, email privacy@essardasgroup.com.

8. Security

We take the security of your data seriously — encrypted connections, access controls and staff training. No transmission over the internet is 100% secure, but we apply the measures a reputable jewellery house must.

9. Changes

We may update this policy. The current version is always shown on this page with the date at the top.