Aria Midnight

Privacy Policy

This Privacy Policy explains how Aria Midnight collects, uses and protects your personal information when you visit our website, contact us or place an order.

Last updated: 8 August 2026

Your privacy matters

Aria Midnight respects your privacy and only uses personal information where there is a proper and lawful reason to do so.

We process personal information in accordance with applicable data-protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the EU General Data Protection Regulation (EU GDPR).

Our store is powered by Shopify, which provides the technology, checkout and ecommerce services used to operate the Aria Midnight website.

Aria Midnight is operated by Georgina Costa, a sole trader trading as Aria Midnight.

Georgina Costa trading as Aria Midnight is the data controller responsible for personal information processed for the purposes described in this Privacy Policy.

Business address:
286B Chase Road
London
N14 6HF
United Kingdom

Email: hello@ariamidnight.co.uk

Telephone: 07356 267 797

Depending on how you use our website, we may collect:

• your name, email address, telephone number, billing address and delivery address;
• order, transaction, refund and delivery information;
• personalisation details such as names, initials, words, dates, numbers, birthstones, engraving or design instructions;
• emails, enquiries, complaints and customer-service communications;
• photographs supplied to demonstrate faulty, damaged or incorrect goods;
• customer-account and order-history information where accounts are enabled;
• reviews and ratings you submit; and
• technical and website-use information such as IP address, browser, device information and website activity.

Please do not provide unnecessary sensitive or confidential information when submitting a personalised order or contacting us.

Payments are processed through Shopify and the payment provider selected at checkout, which may include card providers, PayPal, Apple Pay, Google Pay, Shop Pay or other available payment services.

Aria Midnight does not ordinarily receive or store your complete payment-card number, security code, payment password or full financial-account credentials. We may receive payment confirmations, transaction references, payment status and refund information.

We may use personal information to:

• process, personalise and manage your order;
• process payments and refunds;
• produce personalised jewellery;
• arrange dispatch, delivery and customs documentation;
• send order and delivery communications;
• respond to enquiries, complaints and product issues;
• prevent fraud and protect our website and business;
• maintain tax, accounting and legal records;
• improve our website and customer service; and
• send marketing where permitted by law.

Under the UK GDPR and, where applicable, the EU GDPR, we must have a lawful basis for processing personal information.

• Contract: where information is required to accept, produce, personalise, deliver or otherwise manage your order.
• Legal obligation: where we must use or retain information to comply with tax, accounting, consumer-protection or other legal duties.
• Legitimate interests: where necessary to operate and protect our business, prevent fraud, improve our services, manage disputes or maintain appropriate records, provided your rights do not override those interests.
• Consent: where you actively agree to particular processing, such as certain marketing or cookie activities. You may withdraw your consent at any time.

Personalisation information may include names, initials, words, dates, numbers, birthstone choices, engraving and other design instructions supplied by you.

Where necessary to create your jewellery, the relevant personalisation information may be shared with a production or manufacturing provider.

We aim to share only the information required to produce the product. Production providers do not need your complete payment information.

Where reasonably necessary, information may be shared with:

• Shopify and ecommerce technology providers;
• payment processors;
• jewellery production and manufacturing providers;
• Royal Mail, couriers, customs agents and delivery partners;
• email, analytics, review, website and customer-service providers;
• fraud-prevention and security providers;
• accountants, insurers, legal advisers and professional advisers; and
• government bodies, regulators, courts, tax authorities or law-enforcement agencies where legally required.

Aria Midnight does not sell customer contact details to unrelated businesses for their own direct-marketing lists.

The Aria Midnight store is hosted by Shopify. Shopify provides hosting, checkout, payment, security and other ecommerce services.

Information submitted through the website may therefore be processed by Shopify and its service providers.

Depending on the processing involved, Shopify may process information on behalf of Aria Midnight or for its own purposes in accordance with its own privacy obligations.

We may send marketing emails where you have subscribed or where another lawful basis permits this. You can unsubscribe at any time using the link in a marketing email or by contacting us.

Unsubscribing from marketing will not prevent us from sending necessary messages about an order, payment, delivery, return or customer-service matter.

Subject to your cookie choices and applicable law, Shopify and Aria Midnight may use cookies and analytics tools to understand website use, improve performance and measure advertising. More information is provided through our Cookie Policy and cookie-consent settings.

Aria Midnight takes reasonable steps to protect personal information and uses established ecommerce and payment providers. However, no website, email system or internet transmission can be guaranteed to be completely secure.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected or for applicable tax, accounting, consumer-protection, fraud-prevention, insurance or legal requirements.

Order and transaction records may therefore be kept for longer than ordinary customer-service information. When information is no longer required, it may be deleted, anonymised or securely restricted.

Some providers, including Shopify, payment services, technology providers and production providers, may process or store information outside the United Kingdom or European Economic Area.

Where applicable law requires safeguards for an international transfer, an appropriate recognised mechanism will be relied upon. This may include an adequacy decision, approved contractual clauses, the UK International Data Transfer Agreement or Addendum, or another lawful transfer mechanism.

Depending on the circumstances and applicable law, you may have the right to:

• access personal information held about you;
• correct inaccurate or incomplete information;
• request deletion of information in certain circumstances;
• request restriction of processing;
• object to certain processing;
• request data portability where applicable;
• withdraw consent where processing relies on consent; and
• object to direct marketing at any time.

These rights are not absolute and may be subject to legal conditions or exemptions.

To exercise a data-protection right, contact: hello@ariamidnight.co.uk .

We may request reasonable information to verify your identity before releasing or changing personal information.

Valid data-protection requests will be handled without undue delay and normally within one month. Where permitted by law, additional time may be required for particularly complex or numerous requests, in which case you will be informed as required.

If you have a concern about how we have handled your personal information, please contact Aria Midnight first so that we can investigate.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection supervisory authority.

Where the EU GDPR applies, you may also have the right to complain to the competent data-protection supervisory authority in the EU or EEA country where you live, work or believe an infringement has occurred.

We may update this Privacy Policy to reflect changes to our website, services, suppliers, technology, business practices or applicable law. The latest version will be published on this page with an updated revision date.

Questions about your privacy?

Contact Aria Midnight to ask a question, make a privacy request or raise a concern about how your personal information has been handled.