Doonstan Precious Metal Services
Open an Account

Privacy Policy

Last updated: 15 October 2026

This privacy policy explains how Doonstan Ltd (“we”, “us”, “our”) collects and uses personal information when you visit doonstan.co.uk, contact us, or do business with us. We are committed to protecting your privacy and handling your information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Doonstan Ltd is the data controller for the personal information described in this policy.

If you have any questions about this policy or how we use your information, please contact us using the details above.

2. Information we collect

Information you give us

  • Contact form: when you send us a message through our website we collect your name, company name, phone number, email address, subject and the content of your message.
  • Phone, email and WhatsApp: when you contact us directly we keep a record of your contact details and our correspondence with you.
  • Trade accounts and transactions: when you open a trade account, or buy or sell precious metals, coins, bullion, grain, jewellery or diamonds with us, we collect the information needed to carry out the transaction, such as your name, business name, contact details, details of the items and payment information. Where the law requires it, for example under anti-money laundering regulations, we may also ask for proof of identity and address.

Information collected automatically

  • Website statistics: we use Burst Statistics, a privacy-friendly analytics tool hosted on our own website, to understand how many people visit our site and which pages they view. This information is not shared with third-party advertising or analytics companies.
  • Technical information: like most websites, our web server records basic technical information such as your IP address, browser type and the pages you request, to keep the website secure and working properly.

3. How we use your information and our lawful basis

  • To respond to your enquiries: based on our legitimate interest in answering questions from customers and potential customers, or to take steps at your request before entering into a contract.
  • To open and manage trade accounts and carry out transactions: because it is necessary to perform our contract with you.
  • To meet our legal obligations: including anti-money laundering checks, accounting and tax record-keeping, and responding to lawful requests from authorities.
  • To run, secure and improve our website: based on our legitimate interest in providing a safe, working website and understanding how it is used.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

4. Cookies

Cookies are small text files stored on your device when you visit a website. We use:

  • Essential cookies: needed for the website to work, for example to remember your cookie choices or keep administrators signed in.
  • Statistics cookies: Burst Statistics may set a cookie (burst_uid) to count unique visitors. This information stays on our own website.
  • Google Maps: our Contact page includes an embedded Google Map. When it loads, Google may set its own cookies and collect information in line with Google’s privacy policy.

You can block or delete cookies through your browser settings. Blocking some cookies may affect how parts of the website work.

5. Who we share your information with

We only share your information where necessary, with:

  • our website hosting and email service providers, who store data on our behalf;
  • payment providers and banks, to process payments;
  • our accountants and professional advisers;
  • regulators, law enforcement or other authorities, where we are required to by law.

If you contact us via WhatsApp, your messages are also handled by WhatsApp (Meta) in line with its own privacy policy. Our website links to our eBay shop. Once you leave our site, that website’s own privacy policy applies.

6. International transfers

Some of our service providers may store or process data outside the UK. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or approved contractual clauses.

7. How long we keep your information

  • Enquiries that do not lead to business: up to 2 years.
  • Transaction and identity records: for at least 5 years after our business relationship ends, as required by anti-money laundering regulations.
  • Accounting records: 6 years, as required by tax law.

After these periods, information is securely deleted.

8. Keeping your information secure

We use appropriate technical and organisational measures to protect your personal information, including a secure (HTTPS) website and restricted access to our systems.

9. Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you;
  • ask us to correct information that is wrong or incomplete;
  • ask us to delete your information, where we no longer have a reason to keep it;
  • ask us to restrict or stop using your information, or object to how we use it;
  • ask for your information to be transferred to another organisation, where applicable.

To make a request, contact us at Info@doonstan.co.uk. We will respond within one month. There is normally no charge.

10. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator: ico.org.uk, telephone 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated shown at the top.

Scroll to Top