Privacy & Cookie Policy

Thank you for visiting Morgan & French. This Privacy & Cookie Policy explains how Morgan & French Limited collects, uses and protects personal information when you visit our website, place an order, contact us or otherwise interact with us.

If you have any questions about this policy or how we use your personal information, please contact us at hello@morganandfrench.com.

Who we are

Morgan & French Limited is a company registered in England and Wales under company number 06592851. Our registered office is 9a St George’s Square, Stamford, PE9 2BN. Our VAT registration number is GB947756174.

Morgan & French operates from locations in Biggleswade and Stamford. Current contact details can be found on our Contact Us page.

For the purposes of UK data protection law, Morgan & French Limited is the data controller of the personal information described in this policy.

Information we collect

We may collect and use the following types of personal information:

• Contact and account information, such as your name, email address, telephone number, billing and delivery address and account details.
• Order information, including details of products purchased, delivery information and information you provide so that we can create personalised jewellery.
• Personalisation materials, which may include photographs, handwriting, drawings, fingerprints, handprints, footprints, nose impressions and other images or impressions supplied for the purpose of creating a personalised product.
• Correspondence, including emails, messages, enquiries, reviews and other communications with us.
• Transaction information, such as payment status, refunds and order history. Payment card details are handled by our payment providers and are not stored by us in full.
• Website and device information, such as IP address, browser and device information, pages viewed, referral information and interactions with our website, where collected in accordance with applicable cookie and privacy requirements.
• Supplier and business contact information where we work with you in a professional or commercial capacity.

How we use your information

We use personal information where necessary to:

• process, make, personalise and deliver your orders;
• communicate with you about orders, enquiries, repairs, commissions and our services;
• provide customer service and maintain appropriate business records;
• operate, secure and improve our website and services;
• prevent fraud and protect our business and customers;
• meet our accounting, tax and other legal obligations;
• establish, exercise or defend legal claims; and
• send marketing communications where we have the appropriate permission or another lawful basis to do so.

Our lawful bases

Under UK data protection law, we rely on one or more lawful bases depending on why we are using your information. These may include:

• Contract – where processing is necessary to fulfil an order or take steps at your request before entering into a contract.
• Legitimate interests – where necessary for the proper operation and improvement of our business, customer service, fraud prevention, record-keeping and protection of our legal rights, provided those interests are not overridden by your rights.
• Legal obligation – where we need to process information to comply with the law.
• Consent – where we ask for your consent, for example for certain marketing or non-essential cookies and tracking technologies. You may withdraw consent at any time.

Marketing

If you sign up to hear from us, or where we are otherwise permitted by law to contact you, we may send you news, product updates and offers. You can unsubscribe at any time using the unsubscribe link in our marketing emails or by contacting us.

We use specialist service providers, such as email marketing platforms, to help us manage marketing communications. These providers process information on our behalf in accordance with their contractual and legal obligations.

Who we share information with

We only share personal information where necessary for running our business, fulfilling orders, providing our website and services, or where required by law. This may include:

• our ecommerce and website platform providers, including Shopify;
• payment processors and providers used at checkout;
• delivery and postal providers;
• email, customer service and marketing service providers;
• analytics and advertising providers, where permitted and subject to applicable consent requirements;
• IT, hosting, security and other technology providers;
• professional advisers such as accountants, insurers and legal advisers; and
• government, regulatory or law-enforcement bodies where disclosure is required by law.

We do not sell your personal information. Where a service provider processes information for us, we require it to handle that information appropriately and only for permitted purposes.

Shopify and payments

Our online store is hosted on Shopify. Shopify provides the ecommerce platform that allows us to offer our products and services online and processes certain customer and transaction information in connection with providing those services.

Payments are processed securely by the payment methods and payment providers offered at checkout. We do not receive or store your full payment card details.

International transfers

Some of our service providers may process personal information outside the United Kingdom. Where personal information is transferred internationally, we take steps to ensure that an appropriate lawful transfer mechanism is in place where required. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another safeguard permitted by UK data protection law.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to fulfil orders, provide customer service and meet legal, accounting and tax requirements.

Order, transaction and related business records may generally be retained for up to seven years where needed for accounting, tax or legal purposes. Enquiry-only correspondence may normally be deleted sooner when it is no longer required.

Materials supplied specifically to create personalised products are retained only for as long as reasonably needed for production, aftercare and any agreed remake or repeat-order service, unless a longer period is required by law or agreed with you.

Security

We use appropriate technical and organisational measures designed to protect personal information against accidental loss and unauthorised access, use, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

Your data protection rights

Depending on the circumstances, UK data protection law gives you rights including the right to request access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to certain processing and data portability. Where we rely on consent, you may withdraw it at any time.

To exercise your rights, contact us at hello@morganandfrench.com. We may need to verify your identity before responding.

You also have the right to complain to the UK Information Commissioner’s Office (ICO) if you are concerned about how we use your personal information.

Cookies and similar technologies

Our website uses cookies and similar technologies. Some are strictly necessary for the website and checkout to function. Others may be used for preferences, analytics, performance, marketing and advertising.

Our Shopify store may use:

• Strictly necessary cookies for functions such as shopping baskets, checkout, security and privacy preferences;
• functional cookies to remember choices and improve your experience;
• analytics and performance technologies to help us understand how the website is used and improve it; and
• marketing and advertising technologies, including technologies provided by advertising platforms such as Meta, where enabled and permitted.

Where consent is required, non-essential cookies and similar technologies should only be used in accordance with the choices you make through our cookie consent controls. You can change or withdraw your choices using the privacy or cookie controls available on our website. You can also manage cookies through your browser settings, although blocking strictly necessary cookies may affect how the site functions.

The particular cookies and technologies used by Shopify and integrated services can change as those services are updated, so we do not maintain a fixed list of individual cookie names in this policy.

Third-party websites and services

Our website may contain links to third-party websites or services. Those organisations may have their own privacy policies and are responsible for how they process information under their control. We encourage you to review their policies when using their services.

Changes to this policy

We may update this policy from time to time to reflect changes to our business, website, service providers or legal requirements. The latest version will be published on this page.

Last updated: 3 October 2026