Privacy notice

What we collect is what you type into the appointment form, and we collect it so that we can reply. This page says exactly where it goes.

Last updated 22 August 2026

Who we are

ORÉA MAISON is the controller of the personal data described here. We are based in London and work globally. You can reach us at enquiries@oreamaison.com, or write to Chelsea, our founder, at chelsea@oreamaison.com.

What we collect

Only what you give us in the appointment form. Nothing on this site collects anything about you in the background: there is no analytics, no advertising pixel, no session recording and no profiling.

The form asks for:

  • Your name and email address. These are required, because they are how we reply.
  • Your telephone number, if you choose to give it.
  • What you are interested in: a stone, a piece of jewellery, a commission, or guidance.
  • Whether you have seen a stone on the site, would like us to source one, or have your own, and the reference of any stone you name.
  • An indication of budget, if you choose to give one. This is optional and never required.
  • How you would prefer to meet and to be contacted.
  • Times that suit you and any date you need the piece by.
  • Anything you write in the message box.

We do not ask for, and have no use for, payment details, identity documents, or any special category data. Please do not send them through the form.

Why we are allowed to hold it

Our lawful basis is legitimate interests under Article 6(1)(f) of the UK GDPR: you have asked a jewellery house to contact you about a purchase or a commission, and replying is the obvious and expected use of what you sent. Where a commission proceeds, we hold what is needed to perform that contract under Article 6(1)(b).

We do not send marketing. You are not added to any mailing list by enquiring, and there is no list to be added to.

Who processes it, and where

Three companies handle it on our behalf, and no one else sees it.

  • Brevo, our email provider. When you submit the form, Brevo sends the confirmation to you and delivers the enquiry to us. Your name, email address and everything you wrote pass through Brevo in order to be delivered, and Brevo keeps a delivery log. Brevo is a European provider and processes data within the European Economic Area.
  • Supabase, our database. A copy of the enquiry is filed so that we do not lose it if an email fails. The database is hosted in London (eu-west-2) and the table is closed to everyone except our own server.
  • Vercel, our host. Vercel serves the pages and keeps ordinary server logs, which include IP addresses, for a short period for security and diagnostics. We do not use those logs to identify anyone.

We never sell your data, never share it for advertising, and never pass it to anyone outside those three except where the law requires it.

How long we keep it

Enquiries that do not lead anywhere are deleted within twenty-four months. Where a commission is made, we keep the record for as long as we support the piece, because the drawing, the laboratory report and the hallmark note stay on file for its life and yours. You can ask us to delete any of it sooner.

Your rights

Under the UK GDPR you may ask us for a copy of what we hold, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, ask for it in a portable form, and object to our holding it at all. Write to enquiries@oreamaison.com and we will answer within one month.

If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first, so that we can put it right.

Cookies

This site sets no cookies of its own. What little is stored, and how to clear it, is on the cookie settings page.

ORÉA MAISON, London. Questions to enquiries@oreamaison.com.