Cookie Policy

Cookies are small text files placed on a device when a person visits a website. They can help a website function, remember settings, protect accounts, understand website use or support advertising.

Similar technologies may include local storage, session storage, pixels, tags, scripts, software development kits, device identifiers and other methods that store or access information on a user's device.

In this policy, "cookies" includes cookies and similar technologies unless the context requires otherwise.

TrulyLucky Ltd trading as Lucky Jewellery / 玉意人 is responsible for deciding how cookies are used on the Lucky Jewellery retail website, except where an independent third party determines its own use of data.

Third-party providers may include hosting, authentication, payment, fraud-prevention, analytics, advertising, embedded-media, customer-support or delivery-service providers.

Strictly necessary cookies may be used where they are required for the website, security, account login, fraud prevention, consent records or a service specifically requested by the user.

We will not intentionally place or activate non-essential analytics, advertising, personalisation or similar cookies before the user has given valid consent, except where the law permits otherwise.

Consent must be:

• freely given;

• specific;

• informed;

• given through a clear positive action; and

• capable of being withdrawn.

Continuing to browse the website, silence or inactivity will not by itself be treated as consent to non-essential cookies.

Where non-essential cookies are used, the cookie banner or settings panel should allow the user to:

• Accept All;

• Reject Non-Essential Cookies; or

• Manage individual categories.

Rejecting non-essential cookies should be as clear and reasonably accessible as accepting them.

The user may change or withdraw consent at any time through the Cookie Settings link, normally available in the website footer or cookie banner.

Changing consent does not automatically remove information already lawfully collected before withdrawal, but it should prevent future non-essential cookie use after the choice takes effect.

A. Strictly Necessary Cookies

These cookies are required for core website functions and cannot normally be switched off through the consent panel.

They may be used to:

• maintain website security;

• protect forms and accounts;

• enable login and session management;

• remember basket, reservation or checkout information;

• prevent fraud or abuse;

• route traffic and maintain technical stability;

• remember cookie-consent choices; or

• provide a service specifically requested by the user.

Blocking these cookies through browser settings may cause parts of the website to stop working.

B. Preference and Functional Cookies

These cookies remember optional settings or improve convenience, such as:

• preferred language;

• region or currency display;

• accessibility preferences;

• saved interface settings; or

• non-essential account convenience features.

Where these cookies are not strictly necessary, they will be used only after consent.

C. Analytics and Performance Cookies

These cookies help us understand how people use the website, such as:

• pages visited;

• device and browser type;

• referral source;

• navigation path;

• page performance;

• error events; and

• aggregated use of website features.

Analytics information may help us improve content, navigation, forms and technical performance.

Non-essential analytics cookies will not be activated before consent.

D. Marketing and Advertising Cookies

These cookies may be used to:

• measure advertising performance;

• understand campaign referrals;

• limit repeated advertising;

• build audiences; or

• personalise advertising on this or another service.

Marketing cookies may involve third parties and may track activity across different websites or services.

We will use marketing cookies only after valid consent and only where the relevant marketing technology is actually enabled.

E. Embedded Content and Third-Party Features

Pages may include content or functions supplied by third parties, such as video, maps, social media, chat, payment, booking or review tools.

A third-party feature may place its own cookies or collect device information. Where the feature is not strictly necessary, it should remain blocked or limited until the relevant consent is given.

The third party's own privacy and cookie information may also apply.

Account and membership functions may use strictly necessary technologies to:

• keep a user signed in;

• protect authentication tokens;

• maintain session security;

• remember account and membership state;

• control access to Jade Circle, Collector's Circle or Private Client content;

• prevent unauthorised access; and

• record acceptance of important policies or consent choices.

These technologies should not be used for unrelated advertising without separate consent.

The website may use local storage or session storage for technical functions such as authentication, language, basket state, form progress, security, temporary preferences or consent records.

Where browser storage is strictly necessary, it may be used without optional-cookie consent. Where it is used for analytics, marketing or non-essential personalisation, the same consent principles apply as for cookies.

The website's Cookie Settings panel or cookie register should identify the cookies and similar technologies actually in use, including where reasonably available:

• cookie or storage name;

• provider;

• category;

• purpose;

• whether it is first-party or third-party;

• duration or expiry; and

• whether consent is required.

The live register forms part of this Cookie Policy.

We will not publish guessed or template cookie names as if they are active. The register must be based on the technologies and providers actually used on the live website.

Cookies may be:

• session cookies, which normally expire when the browser session ends; or

• persistent cookies, which remain for a stated period or until deleted.

We aim to use a duration that is proportionate to the cookie's purpose.

The current duration of each identified cookie should be shown in the live cookie register or Cookie Settings panel.

We may keep a limited record of cookie choices to:

• remember the user's preference;

• demonstrate whether consent was obtained;

• identify the consent version shown; and

• avoid repeatedly showing the banner unnecessarily.

A consent record may include a consent identifier, timestamp, categories selected, policy version and limited technical information.

Consent records will be retained only as long as reasonably necessary for compliance, preference management and dispute handling.

Most browsers allow users to view, block or delete cookies. Browser controls may differ by device and provider.

Blocking all cookies may prevent login, basket, account, reservation, security or other core functions from working correctly.

Browser settings do not always control every form of local storage, embedded technology or app-based identifier, so the website's Cookie Settings panel should be used where available.

Browser "Do Not Track" signals are not implemented consistently across the industry.

Where legally required or technically supported, we will consider recognised privacy preference signals. Users should continue to use the website's Cookie Settings panel to communicate their current choices.

Some cookie providers may process information outside the United Kingdom.

Where personal data is transferred internationally, the transfer will be handled as described in our Privacy Policy and subject to applicable safeguards.

The retail website is not designed to use behavioural advertising directed specifically at children.

We do not knowingly use non-essential tracking to build advertising profiles of children.

We may update this Cookie Policy when:

• website functions change;

• providers are added or removed;

• cookies or storage methods change;

• consent tools change;

• legal or regulatory guidance changes; or

• we improve transparency.

The latest version will show the date of its most recent update.

Where a material change affects an existing consent, we will request consent again where required.

Questions about cookies, consent or privacy may be sent to:

Email: trulyluckyu@gmail.com

Subject line: "Cookie or Privacy Request"

Cookie use involving personal data is also subject to the rights and complaint process explained in our Privacy Policy.

Nothing in this policy removes rights under applicable privacy, electronic-communications or consumer law.

The following technologies are currently used on the private-preview website. A full production-domain scan will be performed before public launch and this inventory will be updated.

Strictly Necessary

• *sb--auth-token** — Provider: this website (Lovable Cloud / Supabase Auth) — First-party — Persistent (browser localStorage) — Keeps a signed-in customer authenticated on the account, membership and admin areas.
• lj-cookie-consent-v1 — Provider: this website — First-party — Persistent (browser localStorage) — Stores your cookie consent choices so the banner does not reappear on every visit.
• lj_session_id — Provider: this website — First-party — Session (browser sessionStorage) — A short-lived identifier used to link related form and enquiry events for a single visit.

Preferences and Functionality

• lj_utm — Provider: this website — First-party — Session (browser sessionStorage) — Remembers the referral source of your visit so the correct campaign or referral is recorded when you submit a form.

Analytics and Performance

• None currently deployed on the private-preview website. If analytics are added before or after public launch, they will be listed here and blocked until analytics consent is given.

Marketing and Advertising

• None currently deployed. No advertising pixel, retargeting tag or behavioural-advertising cookie is installed. If any marketing technology is added, it will be listed here and blocked until marketing consent is given.

Third-party embeds

• Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — Loads the typefaces used by the website. Google Fonts may receive request information such as IP address; it is not used by this website to set advertising cookies.

Items marked as “to verify” or missing from this list should be treated as pending confirmation and will be reconciled against a production cookie scan before public launch.