Privacy & cookie policy

Who we are

Tilda & Trove is run by Poppy Hamilton through Creative Co Design Studio Ltd, which is responsible for the personal information we use to operate this website. For privacy questions, email poppy@jewellery-consultant.com and mention Tilda & Trove.

We introduce independent jewellery makers and link to their own shops. You choose your options, place orders and make payments directly with the maker. This gallery does not collect your payment details or delivery address, and we do not receive confirmation of purchases from the click reporting described below.

Information we use

When you browse

Your browser sends technical information needed to load the website and its images, including an IP address, browser information, the requested address and request time. Our hosting and image delivery providers handle these requests to deliver and protect the service. Some product photographs are loaded from the makers’ image services.

Optional maker activity reporting

If you accept analytics, we record views of product and maker profile pages, together with clicks from this site to featured makers’ websites. Records include the time, page path, maker, relevant product and destination address. We remove query strings and fragments from recorded destination links.

Each page visit uses a randomly generated reference to recognise repeated activity on that page. It is not saved as a visitor identifier in a cookie or browser storage, and it is not reused to build a history across separate page visits. Our reporting records do not store your name, email address, raw IP address or full browser user-agent string. Browser and security signals are used to help distinguish automated, owner and other activity.

We use these figures to understand interest in the jewellery and prepare maker performance reports. Those reports show totals, popular products and trends, rather than individual visitor identities. They measure recorded interactions, not confirmed sales.

Google Analytics and your choices

Google Analytics helps us understand visits and navigation. The Google tag loads when a public page opens. Before you accept analytics, or if you reject it, Google receives consent signals and limited measurements without analytics cookies, such as page addresses, timestamps and browser and device information. If you accept analytics, we enable analytics cookies and record clicks to makers. Google receives information such as page addresses, referring websites, interaction times, browser and device information, and cookie identifiers. These identifiers can recognise visits from the same browser. We do not send newsletter email addresses or maker contact messages to Google Analytics. Advertising consent stays off, and Google signals and advertising personalisation are disabled in our tag.

Your cookie choice controls analytics storage and our detailed maker reporting; it does not prevent the Google tag from loading or sending measurements without cookies. It is not loaded in private maker previews, the studio or development previews. This measurement is separate from our own maker activity records described above.

When you contact us or feature as a maker

If you email us, we receive your email address and the information you choose to include, such as your name, business details and enquiry. Maker features use the business descriptions, product information, photographs and maker stories provided to us or drawn from the maker’s public website as part of the feature.

Restricted access and owner reporting

Where sign-in is required for restricted access, the hosting service handles authentication. It may supply an account identifier, name and email address to manage access. The private reporting area uses the owner’s verified identity to protect reports and distinguish owner activity; that identity is not included in maker performance reports.

Why we use it

Optional activity reporting relies on your consent. Operating and securing the gallery, answering enquiries and presenting maker features rely on our legitimate interests in providing the service and managing those relationships. Where an enquiry concerns a service you ask us to provide, we may also need the details to take steps towards or carry out that agreement. We use information to meet legal obligations where required.

We do not use this gallery to make automated decisions about you that have legal or similarly significant effects, or to create advertising profiles.

Newsletter sign-ups

If you choose to join our newsletter, we save your email address, signup date, the page you signed up from and a record of the permission you gave. Your consent is specifically for jewellery inspiration, maker stories and news by email from Tilda & Trove. Joining is optional and separate from the choice about maker activity reporting.

Sign-ups are currently held in our private website database. No newsletter, welcome or email verification messages are being sent, and the list is not connected to an email marketing platform. We do not give newsletter addresses to our featured makers.

Only the site owner can view, download or manage the list. We use a hidden form field and short-lived request limits to reduce automated sign-ups. Where available, the network address is converted to a time-limited hash for these limits; the raw address is not saved in the signup log. Expired request-limit records are removed as further sign-ups arrive.

You can withdraw your permission or ask us to delete your address at any time by emailing poppy@jewellery-consultant.com from the address you used to sign up. When newsletter emails begin, they will include a way to unsubscribe. We will update this policy when an email delivery provider is introduced.

Cookies & your choices

A cookie is a small piece of information saved by your browser. Our preference cookie remembers whether you accepted or rejected optional analytics. You can explore the gallery and visit makers’ shops whichever choice you make.

Analytics cookies and our own maker activity reporting stay off until you choose “Accept”, or turn on “Analytics & maker reporting” under “Edit permissions” and save your choices. To keep analytics cookies and our own maker reporting off, use “Reject optional” or leave the reporting switch off and select “Save my choices”. You can reopen the controls using “Cookie settings” in the footer. Rejecting after accepting stops our maker reporting, removes this site’s Google Analytics cookies and returns Google to measurement without analytics cookies. It does not undo processing already carried out.

Your preference applies to this browser and this site. Clearing cookies, using another device or browser, or an expired or changed notice may mean you are asked again. If the preference cookie cannot be saved, a new acceptance will not enable analytics cookies or our own maker reporting. Google Analytics is the third-party measurement service used on the public gallery; no advertising pixels are installed.

Who receives information

Our website uses hosting and security infrastructure provided through OpenAI and Cloudflare. Their services process technical requests to deliver and protect the site. Google processes the consent signals and measurement data described above under its service terms and privacy information. Email providers handle correspondence when you contact us. Image delivery services used by the featured makers receive the technical requests needed to display their photographs.

We may provide a featured maker with summary reporting about their own profile and products. We do not provide makers with a list of identified visitors through these reports. When you follow a shop link, that maker operates a separate website and is responsible for the information you provide there, including orders, delivery details, enquiries and its cookie choices.

Providers may process information outside the UK. Their notices explain their international processing and the safeguards they describe: OpenAI’s privacy policy and Cloudflare’s privacy policy, and Google’s privacy policy. You can read how Google uses information from sites that use its services. Contact us if you need more information about a particular service or transfer.

We may also need to disclose relevant information where required by law or to deal with a legal claim.

How long we keep information

Newsletter sign-ups remain in our private list until you request removal. A withdrawn address is excluded from subscriber downloads; a minimal withdrawal record may be kept to ensure it is not included in future mailings. If you request deletion, we remove your signup and its consent record. There is no automatic expiry on sign-ups.

The privacy preference cookie lasts for up to 180 days. Choosing again replaces the saved preference and restarts that period. Google Analytics event data is retained according to the property’s retention settings; cookie expiry is separate from retention of information already sent to Google. Contact us for details or to make a request.

Maker activity records are retained to compare reporting periods and answer questions about performance. There is currently no automatic deletion period for those records. They do not contain a persistent visitor identifier, so we may be unable to locate a particular person’s activity from a name or email address alone.

For enquiries and maker correspondence, retention depends on whether the conversation is ongoing, whether the information supports an active maker feature or service, and whether it is needed to resolve a query, dispute or record-keeping obligation. Hosting and email providers manage their own operational records under their applicable arrangements. You can contact us to ask about retention or request deletion of information relating to you.

Your rights & contact

Depending on the circumstances, you can ask to access or correct your personal information, have it erased, restrict its use, object to processing based on legitimate interests or receive certain information in a portable format. These rights have conditions and exceptions. You can withdraw optional analytics consent at any time through Cookie settings.

For a privacy question or request, contact Poppy at poppy@jewellery-consultant.com. Please explain your request and the information it concerns. We may need enough detail to locate relevant records and verify your identity.

You can also raise a concern with the Information Commissioner’s Office, the UK data protection regulator. The ICO explains your information rights and cookies and similar technologies.

Updates to this policy

We will update this page when the way the gallery uses information changes. The date above shows the latest revision. Changes to the purposes of optional analytics will require a fresh choice before those purposes are enabled.