Privacy Policy

Last updated: 14 May 2026

Who we are

The Gem is an editorial jewellery publication operated by Florence Bisschop, based in London, England. When this policy refers to "we", "us", or "The Gem", it means the publication and its editor.

You can contact us at any time via the contact page. For data protection enquiries specifically, please mark your message "Data Protection".

What data we collect

We collect minimal personal data. The categories are:

Newsletter subscriptions. If you subscribe to our newsletter via Beehiiv, we collect your email address. This is processed by Beehiiv Inc. under their own privacy policy. We use it only to send The Gem newsletter. You can unsubscribe at any time via the link in any email we send.

Analytics data. We use Fathom Analytics, a privacy-first analytics service that does not use cookies, does not track individuals across sites, and does not sell data. Fathom processes aggregated, anonymised data about page visits. No personal data is stored. Fathom is GDPR compliant and processes data within the European Economic Area.

Contact form submissions. If you use our contact form, we receive the message content and the email address you provide. We use this only to respond to your enquiry.

Server logs. Our hosting provider (Vercel Inc.) collects standard server logs including IP addresses, browser type, and pages visited. These are retained for 30 days for security and performance purposes.

Legal basis for processing

Newsletter. Consent (Article 6(1)(a) UK GDPR). You provide explicit consent when you subscribe. You can withdraw consent at any time by unsubscribing.

Analytics. Legitimate interests (Article 6(1)(f) UK GDPR). We have a legitimate interest in understanding how our content is used to improve it. Fathom’s privacy-first approach means this does not materially affect your privacy.

Contact form. Legitimate interests — responding to your enquiry.

How long we keep data

Newsletter subscriptions are held until you unsubscribe. Contact form submissions are retained for 12 months then deleted. Server logs are retained by Vercel for 30 days. Analytics data is anonymised and aggregated — no individual records are retained.

Third parties

We share data with the following third parties as part of running the publication:

Vercel Inc. (hosting) — processes server logs. Privacy policy at vercel.com/legal/privacy-policy.

Beehiiv Inc. (newsletter) — processes email addresses of subscribers. Privacy policy at beehiiv.com/privacy.

Fathom Analytics — processes anonymised analytics. Privacy policy at usefathom.com/privacy.

Sanity.io (content management) — stores article content. No personal data is stored in our content management system.

Affiliate partners. Some articles contain affiliate links. When you click an affiliate link and make a purchase, the retailer may set their own cookies. We do not receive personal data from affiliate transactions — we receive a commission only. Affiliate relationships are disclosed in every article that contains them.

We do not sell personal data. We do not use data for advertising or profiling.

Cookies

The Gem does not set first-party cookies. Fathom Analytics does not use cookies. If you click affiliate links, third-party retailers may set their own cookies — these are governed by their own privacy policies.

Your rights

Under UK GDPR, you have the following rights regarding your personal data:

The right to access your data. The right to correct inaccurate data. The right to erasure ("the right to be forgotten"). The right to restrict processing. The right to data portability. The right to object to processing. The right to withdraw consent at any time (for data processed on a consent basis).

To exercise any of these rights, contact us via the contact page. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have handled your data unlawfully.

International transfers

Some of our third-party processors (Vercel, Beehiiv) are based in the United States. Data transfers are covered by Standard Contractual Clauses under UK GDPR and the UK-US Data Bridge where applicable.

Children

The Gem is not directed at children under 16. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. Significant changes will be announced in the newsletter.

Contact

For any questions about this policy or how we handle your data, please use the contact page and mark your message "Data Protection".