Privacy Policy

Last updated: July 23, 2026

Abbett Limited (“Abbett,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit abbett.com, create an account, place an order, contact us, subscribe to marketing, request a service, or otherwise interact with our website, products, and services (collectively, the “Services”).

Abbett Limited is the data controller or data user responsible for the personal information described in this Policy, except where another organization explains that it acts as an independent controller.

This Policy should be read with our Terms & Conditions, Refund Policy, and Shipping Policy.

1. Who we are

Abbett Limited
Room 1508, 15/F, Grand Central Office Tower 2
625 Nathan Road, Mongkok
Hong Kong

Privacy and customer service: help@abbett.com
Telephone: +852 8480 4924

2. Scope

This Policy applies to personal information handled by Abbett through the Services and related customer interactions. It does not govern an independent third party’s website, platform, or service. If you follow a third-party link, review that party’s privacy notice.

3. Personal information we collect

The information we collect depends on how you interact with us and may include:

• Identity and contact information: name, email address, telephone number, billing address, shipping address, and recipient details.
• Account information: account identifier, login status, saved addresses, preferences, and account settings. Passwords are handled through Shopify’s account systems; Abbett does not need access to your readable password.
• Order and transaction information: products viewed or ordered, jewellery specifications, ring size, personalization instructions, order value, currency, payment status, refunds, exchanges, returns, warranty claims, and transaction history.
• Payment-related information: payment method type, billing details, transaction identifiers, fraud-screening results, and payment confirmation. Full card details are generally collected and processed directly by Shopify or another payment provider and are not made available to Abbett in readable form.
• Communications: messages, support requests, appointment details, survey responses, reviews, photographs, design ideas, and other information you choose to send us.
• Device and usage information: IP address, browser type, device type, operating system, language, approximate location, referring page, pages viewed, searches, clicks, cart activity, timestamps, and cookie or similar identifiers.
• Marketing information: subscription status, communication preferences, campaign interactions, product interests, and advertising opt-out choices.
• Fraud and security information: information used to verify transactions, detect suspicious activity, protect accounts, and secure the Services.

Please do not send sensitive personal information that we have not requested.

4. How we collect personal information

We collect information:

• directly from you, such as when you order, create an account, complete a form, subscribe, or contact us;
• automatically, through cookies, pixels, logs, and similar technologies when you use the Services;
• from service providers, including Shopify, payment providers, fraud-prevention providers, analytics providers, communications platforms, and delivery carriers;
• from business and advertising partners, where permitted by law and consistent with your choices; and
• from public or lawful sources, where relevant to fraud prevention, sanctions screening, intellectual-property protection, or dispute handling.

5. Why we use personal information and our legal bases

Where the laws of the United Kingdom, European Economic Area, or another jurisdiction require a legal basis, we rely on the bases below.

Purpose	Typical information	Legal basis
Process and fulfil orders, payments, delivery, returns, exchanges, repairs, and warranties	Contact, order, payment-related, and communications information	Performance of a contract; steps requested before entering a contract; legal obligations
Create and manage accounts and preferences	Contact, account, and device information	Performance of a contract; legitimate interests in providing account functionality
Provide customer service and respond to enquiries	Contact, order, and communications information	Performance of a contract; legitimate interests in assisting customers and managing our relationship
Personalize and improve the Services, products, and customer experience	Order, usage, device, preference, and feedback information	Legitimate interests in improving our business; consent where required for non-essential technologies
Send marketing and measure campaign performance	Contact, marketing, order, device, and usage information	Consent where required; otherwise legitimate interests where permitted and subject to your right to object
Show or measure targeted advertising	Cookie identifiers, device, usage, and product-interest information	Consent where required; opt-out rights under applicable US state laws
Prevent fraud, abuse, security incidents, and unlawful activity	Account, transaction, device, usage, and security information	Legitimate interests in protecting customers and the Services; legal obligations
Maintain records, comply with law, enforce terms, and handle legal claims	Information relevant to the obligation, dispute, or claim	Legal obligations; legitimate interests in establishing, exercising, or defending legal rights

When we rely on legitimate interests, we consider whether the processing is necessary and balance those interests against your rights and reasonable expectations. You may contact us for more information about this assessment.

6. When providing information is required

You may browse much of the website without identifying yourself. Information marked as required during checkout, account creation, a return, warranty claim, or another service request is necessary to provide that service or comply with law. If you do not provide it, we may be unable to process the order, deliver the product, create the account, respond to the request, or provide the relevant service.

Providing information for marketing is voluntary and is not a condition of purchase.

7. Cookies and similar technologies

We and our providers use cookies, pixels, local storage, and similar technologies for the following purposes:

• Strictly necessary: security, checkout, cart, account access, payments, fraud prevention, and core website functions.
• Functional: language, currency, display, and other preferences.
• Analytics: understanding traffic, navigation, performance, and how visitors use the Services.
• Advertising: measuring campaigns, limiting repeated ads, and showing ads based on activity or interests.

Where applicable law requires consent, we request it before using non-essential cookies or similar technologies. You can accept, reject, or adjust available choices through the cookie or privacy controls displayed on the website. You may also change browser settings, although blocking necessary cookies may prevent parts of the Services from working.

Depending on where you live, you may opt out of eligible targeted advertising or data sharing through our Data Sharing Opt-Out page. Where legally required and technically supported, we treat a recognized Global Privacy Control signal as an opt-out request for the browser or device sending the signal.

We do not respond to other “Do Not Track” signals because there is no consistent industry standard for them.

8. Direct marketing

If you choose to receive marketing, we may use your name, email address, telephone number, general location, transaction history, product interests, and communication preferences to market Abbett jewellery, diamonds, gemstones, accessories, custom-design services, repair or resizing services, events, promotions, and related offers.

Where Hong Kong’s Personal Data (Privacy) Ordinance or other applicable law requires consent, we will not use this information for direct marketing unless we have received your consent or legally valid indication of no objection. We provide a free response channel when requesting that consent.

You can opt out at any time by selecting “unsubscribe” in an email, following instructions in a text message, changing an available preference setting, or contacting help@abbett.com. Opting out of marketing does not stop necessary order, account, service, safety, or legal communications.

We do not provide personal information to another organization for that organization’s own direct marketing for gain without the separate notice and consent required by applicable law.

9. How we disclose personal information

We may disclose personal information to the following classes of recipients for the purposes described in this Policy:

• Shopify, which hosts the store, provides commerce functions, and processes information as described below;
• payment and fraud-prevention providers, to authorize payments and protect transactions;
• manufacturing, fulfilment, repair, logistics, customs, and delivery providers, as needed to produce, service, and deliver orders;
• technology and business providers, including website hosting, cloud storage, customer support, communications, security, analytics, and professional advisers;
• advertising and marketing providers, subject to applicable consent and opt-out rights;
• government bodies, regulators, courts, law-enforcement agencies, or other parties, when required by law or reasonably necessary to protect rights, safety, and security; and
• parties to a business transaction, such as a merger, financing, restructuring, sale, or transfer, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information for money. Some privacy laws define certain targeted-advertising disclosures as “sale,” “sharing,” or targeted advertising even when no money is exchanged. Where those definitions apply, we provide the opt-out methods described in this Policy.

10. Shopify

Our store is hosted by Shopify. Shopify processes personal information to provide and improve the commerce platform, prevent fraud, support payments, and provide features used by Abbett and other merchants.

In some circumstances, Shopify acts as our service provider or processor. For certain platform-level or enhanced features, Shopify may act as an independent controller. You can learn more in the Shopify Consumer Privacy Policy and may use the Shopify Privacy Portal for eligible requests concerning Shopify’s independent processing.

11. International transfers

Abbett is based in Hong Kong and works with providers in other countries. Your personal information may therefore be transferred to, stored in, or processed in Hong Kong, Mainland China, Canada, the United States, and other locations where our providers or delivery partners operate. Privacy laws in those locations may differ from the laws where you live.

For transfers from the United Kingdom or European Economic Area to a country not recognized as providing adequate protection, we use an approved transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, or another lawful safeguard. You may contact us for information about applicable safeguards.

12. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including contractual, warranty, accounting, tax, fraud-prevention, dispute, and legal requirements. Our general retention approach is:

• Orders and business records: order, payment confirmation, refund, invoice, customs, and accounting records are generally retained for 7 years after completion of the relevant transaction, as required or permitted for tax, accounting, audit, and legal purposes. This does not mean that every item of information in a customer profile is retained for 7 years.
• Customer accounts: account information is retained while the account remains active and generally for up to 2 years after closure. Order and accounting records associated with the account may be retained separately for the 7-year period above.
• Customer service and general enquiries: communications are generally retained for up to 2 years after the matter is closed. Information forming part of an order, dispute, warranty claim, or legally required business record may be retained under the applicable longer period.
• Abandoned carts and incomplete checkouts: information associated with a cart or checkout that does not become an order is generally retained for no longer than 90 days after the last activity. We may retain limited information for longer where reasonably necessary to prevent fraud, maintain security, or respect a marketing or privacy preference.
• Back-in-stock and product-availability requests: contact information is retained until the requested notification is sent, the product is discontinued, or 12 months have passed since the request, whichever occurs first. If you separately subscribe to marketing, that subscription is handled under the marketing period below.
• Custom-design enquiries and approvals: an enquiry that does not result in an order is generally retained for up to 2 years after the last substantive communication. Design approvals, specifications, measurements, engravings, and other records that form part of a completed order are generally retained with the order for up to 7 years.
• Repairs and ordinary warranty claims: service communications, inspection photographs, and working records are generally retained for up to 2 years after the repair or claim is closed. Payment and accounting records may be retained for up to 7 years.
• Lifetime Guarantee records: to verify and administer an applicable Lifetime Guarantee, we may retain a limited record for the duration of the guarantee. This record may include the order number, purchase date, customer identity, product and stone details, certificate or report number, guarantee status, and claim history. Routine correspondence, duplicate photographs, outdated delivery addresses, and other information that is no longer needed are generally deleted or de-identified within 2 years after the relevant claim is closed. A Lifetime Guarantee does not mean that we retain the customer’s complete account, payment details, or all communications indefinitely.
• Fraud-prevention and security logs: routine device, access, transaction-risk, and security logs are generally retained for up to 24 months. Information connected with suspected fraud, a chargeback, security incident, sanctions review, or investigation may be retained until the matter is finally resolved and for any additional period reasonably required by applicable law or to establish, exercise, or defend legal claims.
• Marketing information: marketing contact information is retained until you unsubscribe, withdraw consent, object, or we determine that the information is no longer active. We may retain a minimal suppression record for as long as reasonably necessary to ensure that we continue to respect your opt-out.
• Analytics and advertising identifiers: these are retained according to the applicable tool settings and generally for no longer than 13 months, unless a shorter period is required.
• Privacy requests: records showing how we handled an access, correction, deletion, objection, consent, or similar privacy request are generally retained for up to 3 years after the request is closed.

At the end of the applicable period, we delete or irreversibly de-identify the information unless a legal obligation, active dispute, investigation, court order, or other documented necessity requires longer retention. When only part of a record must be retained, we seek to remove or minimize information that is no longer necessary.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, encrypted transmission, service-provider controls, account-security measures, and staff procedures.

No method of transmission or storage is completely secure. Please use a unique password, protect your account credentials, and do not send payment-card details or other sensitive information through ordinary email.

14. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided personal information to us, contact us so we can investigate and delete it where appropriate.

We do not knowingly sell or share for targeted advertising the personal information of individuals under 16.

15. Your rights and choices

Depending on where you live and subject to legal conditions and exceptions, you may have rights to:

• request access to or a copy of personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion;
• receive certain information in a portable format;
• object to or request restriction of certain processing;
• withdraw consent at any time, without affecting earlier lawful processing;
• opt out of direct marketing, targeted advertising, sale, or sharing as those terms are defined by applicable law;
• appeal our decision on a request where applicable law provides an appeal right; and
• not receive unlawful discriminatory treatment for exercising a privacy right.

Hong Kong residents have rights to request access to and correction of their personal data under the Personal Data (Privacy) Ordinance. A legally permitted fee may apply to a formal data access request.

To exercise a right concerning Abbett’s processing, email help@abbett.com or write to the Privacy Contact at the address in Section 1. Please describe the request and the account, order, email address, or other information needed to locate your records.

We may verify your identity before completing a request. An authorized agent may submit a request where permitted, but we may require proof of authority and direct identity verification. We will respond within the period required by applicable law.

16. Complaints

Please contact us first if you have a concern about our privacy practices. We will investigate and respond as required by applicable law.

You may also complain to the privacy or data-protection authority where you live. In Hong Kong, this is the Office of the Privacy Commissioner for Personal Data. UK residents may contact the Information Commissioner’s Office. EEA residents may contact their local supervisory authority.

17. Third-party links and social features

The Services may contain links, embedded content, social buttons, or other features provided by third parties. Those parties may collect information independently under their own privacy notices. Abbett is not responsible for an independent third party’s privacy or security practices.

18. Changes to this Policy

We may update this Policy to reflect changes in our Services, practices, providers, or legal obligations. We will post the revised version, change the “Last updated” date, and provide additional notice or obtain consent where required by law.

19. Contact us

Questions, requests, or complaints about this Privacy Policy or Abbett’s handling of personal information may be directed to:

Privacy Contact
Abbett Limited
Room 1508, 15/F, Grand Central Office Tower 2
625 Nathan Road, Mongkok
Hong Kong
Email: help@abbett.com
Telephone: +852 8480 4924