Privacy policy

Last updated: 27 August 2026

The Bronze Project operates this website and online store, including the content, products, services and features available through the website. We use Shopify to provide and operate our online store.

This Privacy Policy explains how we collect, use, store and share your personal data when you visit our website, contact us, place an order or otherwise interact with The Bronze Project.

We are committed to handling your personal data responsibly, securely and transparently, in accordance with the Data Protection (Jersey) Law 2018 and other applicable data-protection legislation.

By using our website or purchasing from us, you acknowledge that your personal data may be processed as described in this Privacy Policy.

Who we are

The Bronze Project is a business based in Jersey, Channel Islands.

For the purposes of applicable data-protection legislation, The Bronze Project is the data controller responsible for the personal data we collect and process.

The Bronze Project

Email: hello@thebronzeproject.com

If you have any questions about how we use your personal data or would like to exercise your data-protection rights, please contact us using the details above.

What personal data we collect

The personal data we collect depends on how you interact with us. This may include:

Contact and delivery information

When you place an order or contact us, we may collect your:

Name
Email address
Telephone number
Billing address
Delivery address
Other contact details you choose to provide

Order and transaction information

When you purchase from us, we may collect information about:

Products you purchase
Order details and order history
Payment method
Transaction details
Delivery and fulfilment information
Returns, refunds or exchanges

We do not normally have access to your full payment card details. Payments are processed through secure payment providers, including Shopify and other payment providers available at checkout.

Personalisation and custom-order information

Because The Bronze Project creates bespoke plaques, you may provide personal information as part of your order or enquiry.

This may include:

Names
Dates
Personal messages or inscriptions
Design instructions
Information about the person, place or occasion being commemorated
Other information you choose to include in a bespoke design

Please only provide personal information about another person where you have a legitimate reason and, where necessary, their permission to do so.

Communications

If you contact us by email, telephone, through our website or through social media, we may retain the information you provide so that we can respond to your enquiry and manage our relationship with you.

Website and device information

When you visit our website, certain technical information may be collected automatically, including:

IP address
Browser type
Device type
Operating system
Pages visited
Referring website
Approximate location
Information about how you interact with our website

We may collect this information through cookies and similar technologies.

How we collect your personal data

We may collect personal data:

Directly from you when you place an order or contact us
When you create or use an account
When you submit an enquiry or custom-order request
When you subscribe to marketing communications
Automatically when you browse our website
Through cookies and similar technologies
Through Shopify and other service providers that help us operate the website and fulfil orders

How we use your personal data

We only use your personal data where we have a lawful basis to do so.

We may use your personal data to:

Process and fulfil orders

We use your information to process payments, create and personalise your plaque, fulfil your order, arrange delivery and provide order-related communications.

Respond to enquiries

If you contact us about a product, bespoke design or custom request, we use the information you provide to respond to you and help develop your order.

Manage our relationship with you

We may use your information to provide customer support, manage your account, deal with returns or refunds and maintain records of your transactions.

Improve our website and services

We may use information about how customers use our website to understand what works well, identify issues and improve our products, services and online experience.

Marketing

Where permitted by law and where appropriate, we may use your contact details to send you information about The Bronze Project, including new products, services, news or offers.

You can unsubscribe from marketing communications at any time by following the unsubscribe link in our emails or contacting us directly.

We will not use your personal data for marketing where you have asked us not to.

Protect our business

We may use personal data to detect and prevent fraud, misuse, security issues or other unlawful activity and to protect our website, customers and business.

Legal and regulatory requirements

We may process and retain personal data where necessary to comply with our legal obligations, respond to lawful requests from authorities, resolve disputes or establish, exercise or defend legal claims.

Our lawful bases for processing

Depending on the circumstances, we may rely on one or more of the following lawful bases for processing your personal data:

Contract – where processing is necessary to fulfil an order or provide a service you have requested.
Legitimate interests – where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests.
Consent – where you have given us permission to use your personal data for a particular purpose, such as certain marketing communications.
Legal obligation – where we are required to process your personal data to comply with a legal or regulatory requirement.

Where we rely on consent, you can withdraw that consent at any time.

Who we share your personal data with

We may share personal data with trusted third parties where necessary to operate our business, provide our services or fulfil your order.

These may include:

Shopify, which provides the technology and infrastructure used to operate our online store.
Payment providers that securely process transactions.
Delivery and shipping providers.
Technology and website service providers.
IT, hosting and cloud service providers.
Analytics and marketing providers.
Professional advisers where necessary.
Government, regulatory or law-enforcement authorities where we are legally required to do so.

We only share information where there is a legitimate reason to do so and, where appropriate, we require our service providers to protect your personal data and use it only for the purposes for which it has been provided.

Shopify

Our online store is hosted and powered by Shopify.

When you use our website or place an order, Shopify may collect and process personal data on our behalf and may process information in accordance with its own privacy policies and terms.

Shopify may process data in countries outside Jersey, including countries outside the UK or European Economic Area. Where personal data is transferred internationally, appropriate safeguards should be used in accordance with applicable data-protection law.

You can find out more about how Shopify handles personal data through Shopify's privacy policy.

International transfers

Some of our service providers may process or store personal data outside Jersey, including in other countries.

Where personal data is transferred internationally, we will take appropriate steps to ensure that the transfer is lawful and that suitable safeguards are in place in accordance with applicable data-protection legislation.

This may include using recognised contractual safeguards or transferring data to countries recognised as providing an adequate level of data protection.

Cookies

Our website uses cookies and similar technologies to help it function, understand how visitors use the website and, where appropriate, support marketing and advertising.

Cookies may collect information such as your device, browser, pages visited and interactions with the website.

Where required, we will ask for your consent before placing non-essential cookies on your device.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect how the website functions.

Keeping your personal data secure

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure.

However, no website, online service or method of electronic transmission can be guaranteed to be completely secure.

If you have concerns about the security of information you have shared with us, please contact us.

How long we keep your personal data

We will only keep your personal data for as long as we reasonably need it for the purposes for which it was collected.

The length of time we retain information will depend on factors including:

The nature of the information
Why we collected it
Whether we need it to provide a service
Our legal and accounting obligations
Whether there is an ongoing relationship with you
Whether we need it to establish, exercise or defend a legal claim

When personal data is no longer required, we will securely delete or anonymise it where appropriate.

Your data-protection rights

Under the Data Protection (Jersey) Law 2018, you have a number of rights in relation to your personal data, although these rights may apply only in certain circumstances.

Depending on the circumstances, you may have the right to:

Be informed about how your personal data is being used.
Request access to the personal data we hold about you.
Ask us to correct inaccurate or incomplete personal data.
Ask us to delete your personal data in certain circumstances.
Ask us to restrict how we process your personal data in certain circumstances.
Object to certain types of processing, including direct marketing.
Request your personal data in a structured, commonly used and machine-readable format in certain circumstances.
Withdraw consent where we rely on consent as our lawful basis for processing.
Rights relating to certain automated decision-making and profiling.

The Jersey Office of the Information Commissioner confirms these rights under the Data Protection (Jersey) Law 2018.

To exercise your rights, please contact us at:

hello@thebronzeproject.com

We may need to verify your identity before responding to a request.

Marketing communications

If you have opted in to receive marketing communications from us, you can change your mind at any time.

You can unsubscribe using the link provided in our marketing emails or contact us directly.

Please note that opting out of marketing communications will not prevent us from sending essential communications relating to an order or service you have requested.

Children's data

Our website and services are not specifically directed towards children.

We do not knowingly collect personal data from children where doing so would be unlawful. If you believe that a child has provided us with personal data and you believe we should delete it, please contact us.

Jersey's data-protection framework provides specific protections for children's personal data.

Third-party websites

Our website may contain links to websites or services operated by third parties.

We are not responsible for the privacy practices, content or security of websites that we do not operate. We recommend reviewing the privacy policies of any third-party websites you visit.

Complaints

If you have a concern about how we have collected, used or handled your personal data, we encourage you to contact us first so that we can try to resolve the issue.

You also have the right to make a complaint to the Jersey Office of the Information Commissioner (JOIC) if you believe your personal data has not been handled in accordance with the law.

Jersey Office of the Information Commissioner
5 Castle Street
St Helier
Jersey
JE2 3BT
Channel Islands

Telephone: +44 (0)1534 716530
Email: enquiries@jerseyoic.org

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

When we make changes, we will update the “Last updated” date at the top of this policy.

We recommend checking this page occasionally to make sure you are familiar with the latest version.

Contact us

If you have any questions about this Privacy Policy, how we use your personal data or your data-protection rights, please contact us: