Privacy Policy

This Privacy Policy explains how Shaandar Jewellers ("we", "us", "our") handles information in connection with this website and application (the "Service"). We are a jewellery and bullion retailer. This policy describes the information the Service processes and the purposes for which it is used.

Shaandar Jewellers, 341 Cheetham Hill Road, Cheetham Hill, Manchester, M8 0SF, United Kingdom. Email: admin@shaandarjewellers.com. Phone: 0161 202 3809. Our company registration, VAT registration and ICO registration details are available on request.

The public pages do not require you to create an account. We only directly receive information that you choose to provide — for example, when you contact us by phone, email, WhatsApp, Instagram or in person, or when you send an enquiry. This may include your name, contact details and the contents of your message. A private administrator login exists so that staff can manage the site's content; it is not available to customers.

We do not ask for or store payment card details on the public pages. We do not build advertising profiles of visitors ourselves, and we do not request access to your device's camera, microphone, contacts, precise location or Bluetooth for the public pages.

Like most websites, the Service is delivered through a hosting platform and its servers may automatically process limited technical data needed to serve pages securely and reliably — such as your IP address, browser and device type, and request logs. This information is used for security, reliability and diagnostics.

This application, its database and its stored files are hosted by Base44, our application platform. Base44 currently stores data for all workspaces in the United States, so information processed through the Service may be transferred to and stored outside the United Kingdom. We are responsible for ensuring appropriate safeguards are in place for such transfers, and we are confirming the current contractual safeguards with our hosting platform. We describe this position neutrally rather than claiming a specific transfer mechanism until that confirmation is complete. Base44 publishes its data processing terms at base44.com/dpa and its current list of providers at trust.base44.com. You can ask us for further information using the contact details above.

Our hosting platform provides us with information about how the Service is used — for example the number of visits and unique visitors, which pages are viewed, how long visits last, the pages or sites that referred a visit to us, operating system and device type, and an approximate geographic area derived from IP addresses. We use this to understand which parts of the Service are used and to keep it working well. It is not used to build advertising profiles and we do not use it to identify you personally. This information is collected and retained by our hosting platform on our behalf for a limited period (currently around 60 days). We have not added a separate analytics, advertising or tracking service of our own.

The Service relies on the providers listed below. We have grouped them by how they are contacted, so it is clear which ones can receive technical data (such as your IP address and device information) as a result of simply visiting a page, and which are only involved if you choose to use them.

A. Loaded automatically by your browser

• Base44 (our hosting platform) — application hosting, database, backend functions, media storage, and the platform analytics described below.
• Unsplash — illustrative background imagery. The image is requested by your browser from Unsplash's image delivery network, which receives your IP address and the page you are viewing.
• Instagram / Meta — our Offers page displays our own Instagram content. The images and videos are delivered to your browser from Instagram's servers, which receive your IP address.

B. Contacted only if you choose to use them

• Google Maps — the Find Us page does not load Google's map automatically. A placeholder is shown until you press “Load Google Map”; only then does your browser contact Google, which may set cookies and process your IP address and device data under Google's privacy policy.
• WhatsApp, Instagram and TikTok — our Contact page contains links to our own channels on these platforms. Nothing is sent to them unless you follow one of those links, after which those platforms handle your information under their own privacy policies.

C. Contacted by our servers only (never by your browser)

• Bullion By Post, gold-api.com and open.er-api.com — live gold and silver price data and the currency conversion used for price displays. Our servers make these requests; they contain no information about you, and your browser never contacts these providers.

The QR codes shown on the Contact page are generated on your own device, inside your browser, by the application itself. Creating a QR code does not send the destination address to any external QR-code service, and no QR image is requested from a third party.

To display live prices, our servers fetch gold and silver rates from third-party market-data providers. These requests are made from our servers and do not include information about you. Prices are indicative and can change with the market.

The Find Us page shows a map placeholder until you choose to load the Google map, so Google is not contacted while you are simply reading the page. Once you activate the map, Google may place cookies or otherwise process your IP address and device data. Links to external sites (maps, social media, WhatsApp) take you to those services, and their own privacy policies apply once you leave our Service.

We link to our Instagram, TikTok and WhatsApp channels. If you contact us or interact with us there, those platforms process your information under their own privacy policies. Nothing is sent to them from this Service unless you follow one of those links.

We have not added any advertising, tracking or third-party analytics SDK, pixel or tag to this application — there is no Google Analytics, Meta Pixel or similar tool. The only usage information we receive is the platform analytics described above, and no crash-reporting SDK has been added.

We do not set advertising or analytics cookies and we do not use tracking pixels. The public pages also do not store preference information in your browser: choices such as the display toggle on the Gold Bars / Coins page are held in the page's memory only while that page is open.

• Google Maps (Find Us) — the map is not loaded until you activate it. When you press “Load Google Map”, your browser contacts Google, which may set cookies or access information on your device under Google's own policies.
• Administrator sign-in — an administrator who signs in has a session token stored in their browser so that they remain signed in. This is essential to that feature and is not used for anything else.

You can clear or block cookies and browser storage at any time in your browser settings. Blocking them does not stop the map working once you activate it, but an administrator may need to sign in again.

Where the UK GDPR applies, we process your contact information on the basis of our legitimate interests in responding to your enquiries and, where relevant, to take steps before entering into a contract. Technical and security data, and the platform analytics described above, are processed on the basis of our legitimate interests in keeping the Service secure, available and working well.

We do not sell your personal information. We share it only with the service providers listed above as needed to operate the Service, or where we are required to do so by law.

We do not keep information for longer than we need it. The position for each kind of information is:

• Hosting and security logs — held by our hosting platform for a limited operational period under its own retention rules.
• Platform analytics — held by our hosting platform for a limited period, currently around 60 days.
• Administrator account details — kept while the administrator's account is active, and removed when it is closed.
• Enquiries you send us — kept only for as long as needed to deal with your enquiry and any follow-up. We are confirming a specific retention period for enquiry correspondence and will state it here once it is set.
• Sales and transaction records — kept as required by tax and accounting law, in line with our accountant's records policy.
• Instagram offer cache — our Offers page displays our own Instagram posts from a copy stored on our platform. Each post stops being displayed 24 hours after it was published, and the stored copy is replaced as we publish new posts.

We take reasonable measures to protect information, including relying on the security controls of our hosting platform, and we restrict administrative access to authorised staff only.

Some of the providers described above are based outside the United Kingdom, and our hosting platform currently stores application data in the United States. Where information is transferred outside the UK, we remain responsible for ensuring appropriate safeguards are in place; this is not something we leave to the provider. We are confirming the current contractual safeguards with our hosting platform and will record the position here once that is verified. Base44's data processing terms are published at base44.com/dpa and its current list of providers at trust.base44.com. You can ask us for further information using the contact details above.

Under the UK GDPR you have rights including access to your personal data, correction, erasure, restriction of processing, objection, and the right to complain to a supervisory authority. To exercise any of these rights, please contact us using the details above; we aim to respond within one month.
You have the right to complain to the UK Information Commissioner's Office (ICO) at any time. You are very welcome to raise a concern with us first, but contacting us does not restrict your right to go to the ICO. The ICO can be reached through its website: ico.org.uk.

The Service is not directed at children, and we do not knowingly collect information from children.

We may update this policy from time to time. The "Last updated" date at the top of this page shows when it was most recently revised.

If you have any questions about this Privacy Policy or how your information is handled, please contact Shaandar Jewellers, 341 Cheetham Hill Road, Cheetham Hill, Manchester, M8 0SF, United Kingdom. Email: admin@shaandarjewellers.com. Phone: 0161 202 3809.