This policy explains what personal information we collect when you use this website, buy from us or contact us, why we hold it, who we share it with and what rights you have.
Last reviewed: 5 November 2026
Who we are
This website is operated by J Surtees Ltd, trading as John Surtees, a dealer in antique, vintage and contemporary silver, enamel and glass at the London Silver Vaults. J Surtees Ltd is the data controller for the information described below.
- Registered in England and Wales, company number 15518845
- Registered office: Vault 59, London Silver Vaults, Chancery House, 53–64 Chancery Lane, London WC2A 1QS
- Shop and correspondence address: Vaults 3, 5 & 16, London Silver Vaults, 53–64 Chancery Lane, London WC2A 1QS
- Telephone: +44 (0)20 7242 0518
- Email: sales@johnsurtees.co.uk
The information we collect
When you place an order
We collect your name, billing address, delivery address, email address and telephone number, together with the items you ordered and any instructions you gave us. This website does not offer customer accounts — every order is placed as a guest — so this information is held against the order itself rather than against a login, and there is no password for us to store.
If you order an engraved piece, we also hold the wording, initials or monogram you asked us to engrave, the typeface and position you chose, and any artwork you uploaded, because we need them to carry out the work.
When you pay
- Card. Card payments are processed by WooPayments, which is provided by Automattic and built on Stripe. Your card details are entered into the payment provider’s own secure fields and are handled by them — we never receive or store your full card number, and this site does not save cards for future use. We receive the result of the payment and the card type and last four digits, so that we can reconcile and refund it. If you pay using Apple Pay or Google Pay, your device passes a payment token to the provider in the same way.
- Order on Account (Pro Forma). Where this is available, we hold your order reference and the record of your payment reaching our bank account.
When you contact us
Our general contact form collects your name, email address, subject and message. Our bespoke engraving enquiry form collects your name, email address, telephone number, a description of what you would like, an optional artwork file and an optional date by which you need it. Form submissions are emailed to us and kept with our correspondence.
Some item pages offer an “Enquire about this item” link. That link opens a message in your own email program with the item reference filled in. Nothing is sent to us, and the website collects nothing, unless you choose to send that email yourself.
When you browse the site
Our hosting and security providers record technical information such as your IP address, browser type and the pages you request, in order to deliver the site, keep it available and protect it from attack. We also use Google Analytics, but only where you have agreed to it — see Cookies and analytics below.
Why we use it, and our lawful basis
- To fulfil your order — taking payment, carrying out engraving, packing, despatch and anything that follows. Lawful basis: performance of our contract with you.
- To answer your enquiry — about an item, a commission or a repair. Lawful basis: our legitimate interest in responding to people who contact us.
- To keep proper business records — invoices, accounts and tax records. Lawful basis: compliance with our legal obligations.
- To keep the site secure and working — protecting against fraud and malicious traffic. Lawful basis: our legitimate interest in protecting our business and our customers.
- To measure how the site is used and how our advertising performs. Lawful basis: your consent, which you give or refuse through the cookie banner and can change at any time.
We do not sell your personal information, we do not use it to make automated decisions about you, and we do not profile you.
Who we share it with
We share your information only with the suppliers who help us run the business, and only so far as each of them needs it:
- WP Engine — hosting for this website.
- Cloudflare — content delivery and protection against malicious traffic.
- WooPayments (Automattic and Stripe) — card payment processing.
- Our bank — where you pay by transfer.
- Google — website analytics and advertising measurement, only where you have consented.
- Xero — our accounting system, which receives order and invoice records.
- Delivery companies — the carrier handling your parcel is given the name, address and contact details needed to deliver it.
We will also disclose information where we are required to by law.
Our invoices and packing notes are produced on our own systems, and our order records are not shared with anyone else.
Cookies and analytics
Cookies are small files stored on your device. This site uses them in two categories.
Essential cookies — always on
These make the basket and the checkout work, keep your session secure, protect the site from attack and remember your cookie choice. The site cannot function without them, and they do not require your consent.
Analytics and advertising cookies — only with your consent
With your agreement we use Google Analytics to understand how many people visit, which pages they read and how they arrived, and a Google advertising cookie that lets us see whether our advertising leads to orders. We also record which marketing source an order came from.
None of these are set until you accept them. If you refuse, or simply ignore the banner, no analytics or advertising cookies are placed on your device, and Google receives no information that identifies you or your device. Visits by logged-in site administrators are excluded from analytics altogether.
You can change your mind at any time using the Cookie preferences link at the bottom of any page, and you can block or delete cookies through your browser settings, although the basket and checkout may then not work properly.
How long we keep it
- Order and invoice records — six years from the end of the financial year they relate to, which is the period we must keep business and tax records.
- Enquiries and correspondence that do not lead to an order — three years, because customers frequently come back to us about a piece they asked about earlier.
- Engraving instructions and artwork — kept with the order record, so that a matching piece can be engraved later if you ask.
- Analytics information — retained by Google for the period set on our Analytics property, and held only in aggregate by us.
Where your information is held
Some of our suppliers, including Google, Cloudflare and our hosting and payment providers, operate outside the United Kingdom. Where information is transferred abroad it is protected by the safeguards those providers have in place, such as the UK International Data Transfer Addendum or equivalent approved contractual terms.
Your rights
You have the right to ask us for a copy of the personal information we hold about you; to have inaccurate information corrected; to ask us to delete information we no longer need; to ask us to restrict how we use it; to object to our using it for our legitimate interests; and, where we hold it to perform a contract or with your consent, to receive it in a portable form. Where we rely on your consent you can withdraw it at any time, and doing so does not affect anything we did before you withdrew it.
To exercise any of these rights, email sales@johnsurtees.co.uk or write to us at the shop address above. We will respond within one month.
Complaints
If you are unhappy with how we have handled your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this policy
We review this policy from time to time. The date at the top shows when it was last reviewed.