Privacy and Compliance Policies

Last updated: 30 April 2026

Gemshore handles all data tracking strictly under UK data protection law. Gemshore acts as the data controller for this site. For any privacy-related queries, contact us at [email protected]. This site is not directed at children under the age of 16 and we do not knowingly collect their data. We review our data practices regularly to ensure they remain compliant with UK GDPR and any updates to ICO guidance.

Cookies are small text files stored on your device when you visit a website. Gemshore uses three types:

• Necessary cookies — essential for the site to function correctly.
• Analytics cookies — track anonymous visitor traffic so we can improve the site.
• Marketing cookies — manage referral and affiliate attribution.

You can change your cookie preferences at any time using the link in the site footer. Most cookies expire within 24 months. We do not use cookies to identify you personally or share individual browsing data with advertisers. Read the full Cookie Policy.

Data we collect:

• Contact forms: name, email address, message content.
• Automatically: IP address, browser type, pages visited, referral source.
• Cookies: per your consent settings.
• Affiliate clicks: anonymous tracking when you click through to Amazon or other retailers.

Legal bases for processing:

• Legitimate interests — site operation, security, performance measurement and affiliate attribution.
• Contract — responding to your enquiries.
• Consent — non-essential cookies and analytics.
• Legal obligation — record keeping and tax compliance.

We use the following processors under contract. We do not sell personal data to third parties. We do not share your data with advertisers or allow third parties to use it for their own marketing purposes.

• Hosting — our hosting provider.
• Analytics — Google Analytics.
• Security — Wordfence, Really Simple Security.
• Backups — UpdraftPlus.
• Other tools — Rank Math, AAWP, ThirstyAffiliates, Complianz.

Some processors, including Google, may transfer data outside the UK or EU. Where this occurs, appropriate safeguards are in place, including Standard Contractual Clauses.

We only keep data for as long as necessary for the purpose it was collected.

• Contact enquiries: 24 months.
• Analytics data: 26 months.
• Security logs: 90 days.
• Consent records: 5 years.

Under UK GDPR you have the right to access, correct or delete your data, object to or restrict processing, request data portability where applicable, and withdraw consent for cookies or analytics at any time. These rights apply regardless of whether you are a registered user or a casual visitor to the site.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. If you are not satisfied with our response, you can contact the Information Commissioner's Office at ico.org.uk.

Gemshore uses HTTPS encryption, firewalls, regular software updates and strict access controls to protect data held on this site. We use Wordfence and Really Simple Security to monitor for threats and block unauthorised access attempts. No system is completely immune to risk, but we take reasonable and proportionate steps to keep your data safe.