Privacy policy

This policy explains how GEMLUX.TM LTD ("GEMLUX", "we") collects and uses your personal information when you visit gmlx.co.uk, buy from us or sell to us. We are the controller of your personal information. Contact: gemluxtmltd@gmail.com, 150B High Street, Teddington, TW11 8HZ, United Kingdom.

What we collect

  • Order information: name, billing and delivery addresses, email, phone number, items bought and payment confirmation. Card details are processed by our payment providers and are not stored by us.
  • Verification information: for high-value orders and for people selling to us, proof of identity and address, and proof of ownership of items.
  • Account and communications: account details, enquiries, messages and newsletter preferences.
  • Device and usage information: IP address, browser, pages viewed and how you arrived at our site, collected through cookies. See our Cookie policy.

How we use it and why

  • To process and deliver your order, handle returns and provide customer service: to perform our contract with you.
  • To prevent fraud, verify high-value orders and check the provenance of items we buy: our legitimate interests and our legal obligations.
  • To keep accounting and tax records: our legal obligations.
  • To send you our newsletter and offers: with your consent, which you can withdraw at any time using the unsubscribe link.
  • To measure and improve our website and advertising: with your consent, given through our cookie banner.

Who we share it with

We share information only as needed with: Shopify (our e-commerce platform), payment providers, DHL and other carriers, fraud-prevention services, email and analytics providers, our professional advisers, and authorities where required by law, including where an item is suspected to be counterfeit or stolen. We do not sell your personal information.

Some of these providers process information outside the UK, including in the United States and Canada. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum to protect it.

How long we keep it

Order and accounting records are kept for six years from the end of the financial year in which the order was placed. Identity documents used for verification are deleted within 90 days of the check unless needed for a dispute or legal obligation. Newsletter data is kept until you unsubscribe.

Your rights

You have the right to access your information, to have it corrected or deleted, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. To use these rights, email gemluxtmltd@gmail.com. You also have the right to complain to the Information Commissioner's Office at ico.org.uk.

Changes

We will post any changes to this policy on this page. Last updated: 23 October 2026.