Last updated: 18 August 2026

1. Our commitment to your privacy

At Asprey, we believe you should be able to understand what personal information we collect, why we collect it, how we use it, who we share it with and the rights you have in relation to it.

This Privacy Policy explains how Asprey London Limited (“Asprey”, “we”, “us” or “our”) collects, uses, stores and shares personal information when you interact with us, including when you:

• visit or use asprey.com (the “Website”);
• create an account with us;
• purchase or enquire about our products or services online or in one of our stores;
• visit an Asprey store;
• attend an event;
• communicate with our concierge, sales or customer-service teams;
• subscribe to our newsletters or other marketing communications;
• interact with Asprey through social media; or
• otherwise interact with us.

Please read this Privacy Policy carefully.

Our separate Cookie Policy provides further information about cookies and similar technologies used on the Website and how you can manage your preferences.

2. Who is responsible for your personal information?

Asprey London Limited is the controller responsible for the personal information described in this Privacy Policy.

Asprey London Limited

36 Bruton Street
Mayfair
London.
W1J 6QX

Asprey London Limited is a private company registered in England and Wales under company number 1004355.

For information about how to contact us regarding privacy matters, please see Section 12 – How to contact us.

3. What personal information do we collect and how do we collect it?

Personal information means information relating to an identified or identifiable individual.

We may collect personal information directly from you, automatically when you use our Website, or from third parties.

The information we collect depends on how you interact with Asprey.

3.1 Information you provide directly to us

You may provide personal information to us when you:

• create or manage an Asprey account;
• purchase products or services online or in one of our stores;
• make a product enquiry;
• arrange a delivery or collection;
• request a repair, servicing or other after-sales service;
• subscribe to our newsletter or marketing communications;
• visit one of our stores;
• attend an Asprey event, exhibition or show;
• communicate with our concierge, sales or customer-service teams;
• contact us by telephone, email, post, our Website or social media;
• make a complaint or provide feedback; or
• otherwise communicate or transact with Asprey.

Depending on the nature of your interaction with us, this information may include:

• Identity information, such as your name, title and, where relevant, other identifying information.
• Contact information, such as your postal address, billing address, delivery address, email address and telephone number.
• Account information, such as information associated with your Asprey online account and your preferences.
• Purchase and transaction information, such as products purchased, order details, transaction dates, purchase history, returns, repairs, servicing, deliveries and collections.
• Payment information, such as billing information, payment method and information required to process or verify a payment. Payment card information may be processed by payment providers acting for us.
• Preference information, such as product interests, communication preferences and other preferences that you choose to share with us.
• Communications, including enquiries, correspondence, feedback, complaints and other communications you have with Asprey.
• Professional information, where relevant, such as your job title, company or organisation.
• Marketing information, including whether you have agreed to receive marketing communications and information about your engagement with those communications.

We will normally tell you where particular information is required in order for us to fulfil your request, enter into or perform a contract with you or comply with a legal requirement.

If you do not provide information that is necessary for these purposes, we may be unable to process your request or provide the relevant product or service.

We ask that you do not provide sensitive or special-category personal information unless it is necessary for a particular request and we have asked you to provide it.

3.2 Information collected when you use our Website

When you visit or interact with our Website, we may automatically collect information about your device and your use of the Website.

This may include:

• your IP address;
• browser type and version;
• device type;
• operating system;
• approximate location;
• language and regional settings;
• pages and products viewed;
• links or Website features used;
• referral information;
• dates and times of visits;
• session information; and
• other information concerning your interaction with the Website.

We may collect this information through cookies, pixels, tags and other similar technologies.

For information about these technologies and how to control them, please see our Cookie Policy and the Cookie Settings available on our Website.

3.3 Information received from third parties

We may receive information about you from third parties.

For example:

• another person may purchase a gift for you and provide us with your delivery details;
• somebody authorised by you may contact us on your behalf;
• a business partner may provide information necessary to arrange a delivery or service;
• payment and fraud-prevention providers may provide information concerning a transaction;
• delivery providers may provide information concerning an order;
• technology and analytics providers may provide information concerning use of our Website; and
• social-media platforms may provide information when you interact with Asprey through their services, subject to your settings and their privacy practices.

If you provide us with personal information about another person, you should ensure that you are entitled to provide that information and, where appropriate, that the individual understands how their information will be used.

4. Why do we use your personal information?

We only process personal information where we have an appropriate legal basis.

Depending on the circumstances, we may process your information because:

• it is necessary to enter into or perform a contract with you;
• we are required to do so to comply with a legal obligation;
• we have a legitimate interest in processing the information and that interest is not overridden by your rights and interests; or
• you have given us your consent.

Depending on how you interact with us, we may use your personal information for the following purposes.

Providing products and services

We may use your information to:

• process and fulfil purchases;
• process payments;
• arrange deliveries and collections;
• administer your account;
• provide repairs, servicing and other after-sales services;
• manage returns and refunds; and
• otherwise provide products or services you request.

We generally rely on performance of our contract with you for this processing.

Customer service and relationship management

We may use your information to:

• respond to enquiries;
• provide customer service;
• communicate with you about an order or service;
• manage complaints;
• understand your relationship with Asprey; and
• provide an appropriate and personalised level of customer service.

Depending on the circumstances, we may rely on our contract with you or our legitimate interests in providing customer service and managing our customer relationships.

Fraud prevention and security

We may process information to:

• verify transactions;
• detect and prevent fraud;
• prevent misuse of our Website or services;
• protect our customers, employees, systems, stores and property;
• investigate suspicious activity; and
• establish, exercise or defend legal claims.

We generally rely on our legitimate interests in protecting our customers and business and, where relevant, our legal obligations.

Legal and regulatory compliance

We may process information where necessary to comply with legal and regulatory requirements, including requirements relating to:

• taxation and accounting;
• fraud prevention;
• anti-money laundering;
• high-value transactions;
• consumer protection;
• law-enforcement requests; and
• other regulatory requirements applicable to our business.

Improving Asprey’s products and services

We may use information to:

• understand how customers interact with Asprey;
• improve our products and services;
• improve our Website and digital experience;
• conduct statistical and business analysis;
• understand customer preferences;
• assess the performance of our business; and
• improve customer service.

Where appropriate, we may use aggregated or anonymised information for these purposes.

Marketing and personalisation

Subject to applicable law and your choices, we may use information to:

• send you information about Asprey products and collections;
• tell you about new products, launches and services;
• invite you to Asprey events;
• provide news and editorial communications;
• understand which communications may be relevant to you; and
• measure the effectiveness of our marketing.

Where consent is required, we will obtain it before carrying out the relevant activity.

5. Marketing communications

Where permitted by law and consistent with your preferences, we may send you communications about Asprey products, collections, services, events and other news that we believe may be of interest to you.

Where we rely on your consent, you can withdraw that consent at any time.

You can unsubscribe from electronic marketing by using the unsubscribe link contained in our marketing emails or by contacting us.

If you opt out of marketing, we may still contact you where necessary for non-marketing purposes.

For example, we may send:

• order confirmations;
• payment or transaction information;
• delivery updates;
• repair and servicing communications;
• responses to enquiries;
• security information;
• important service information; and
• communications that we are required by law to send.

Changing your marketing preferences does not affect processing already carried out lawfully before the change.

6. How long do we keep your personal information?

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including where retention is required to satisfy legal, regulatory, tax, accounting or reporting obligations.

The appropriate retention period depends on factors including:

• the nature and amount of the information;
• its sensitivity;
• the purposes for which we use it;
• our relationship with you;
• whether we can achieve the relevant purpose in another way;
• applicable limitation periods; and
• legal and regulatory requirements.

For example, certain customer, transaction, accounting and tax records may generally need to be retained for at least six years in accordance with applicable requirements.

Information associated with an ongoing customer relationship may be retained for the duration of that relationship and, where appropriate, for a period afterwards in order to meet our legal obligations, maintain appropriate business records or establish, exercise or defend legal claims.

Marketing information will be retained in accordance with our retention procedures and applicable law. We may retain limited information recording that you have opted out of marketing so that we can respect your preference.

Information collected through cookies and similar technologies is retained for periods appropriate to the particular technology. Further information is provided through our Cookie Policy and Cookie Settings.

Where appropriate, we may anonymise information so that it can no longer be associated with an identifiable individual. We may retain and use genuinely anonymised information for statistical, analytical and research purposes.

7. Who do we share your personal information with?

We only disclose personal information where there is an appropriate reason to do so.

Asprey personnel

Personal information may be accessed by authorised Asprey employees and personnel who need it to perform their responsibilities.

Depending on the circumstances, this may include personnel responsible for:

• retail and customer relationships;
• concierge and customer service;
• e-commerce;
• marketing and communications;
• finance;
• legal and compliance;
• technology and information security;
• logistics and fulfilment; and
• management and administration.

Access is limited according to business need.

Service providers

We may share information with trusted third-party providers that perform services for Asprey.

These may include providers of:

• Website and e-commerce services;
• hosting, cloud and IT services;
• payment processing;
• payment authentication and fraud prevention;
• delivery, courier and logistics services;
• customer-relationship management systems;
• email and customer communications;
• marketing services;
• analytics;
• data-management services;
• security services;
• repair and product services; and
• professional services such as legal, audit, accounting and insurance services.

Where a provider processes personal information on our behalf, we require appropriate contractual, confidentiality and security protections.

We do not permit processors acting on our behalf to use your personal information for their own purposes unless otherwise permitted by applicable law and appropriately disclosed to you.

Authorities and other third parties

We may disclose personal information to:

• HM Revenue & Customs;
• regulators;
• courts;
• law-enforcement authorities;
• government bodies; and
• other organisations where disclosure is required or permitted by law.

We may also disclose information where reasonably necessary to investigate wrongdoing, protect our rights or property, protect another individual or establish, exercise or defend legal claims.

Corporate transactions

If Asprey or any relevant part of its business or assets is sold, transferred, reorganised or otherwise involved in a corporate transaction, personal information may be disclosed to prospective purchasers and advisers and may form part of the transferred business or assets, subject to applicable legal requirements.

8. International transfers of personal information

Some of our suppliers and technology providers may process personal information outside the United Kingdom.

Where we transfer personal information to a country that is not covered by applicable UK adequacy regulations, we will use an appropriate mechanism designed to protect the information in accordance with UK data-protection law.

Depending on the circumstances, this may include:

• the UK International Data Transfer Agreement;
• the UK Addendum to approved standard contractual clauses;
• another legally recognised transfer mechanism; and
• supplementary safeguards where appropriate.

You may contact us if you would like further information about the safeguards used for a particular international transfer.

9. How do we protect your personal information?

We use appropriate technical and organisational measures designed to protect personal information against:

• unauthorised or unlawful access;
• unauthorised disclosure;
• misuse;
• alteration;
• accidental loss; and
• destruction or damage.

Access to personal information is limited to employees, contractors and service providers with a legitimate business need to access it.

Those individuals and organisations are subject to appropriate confidentiality, contractual or legal obligations.

We also maintain procedures for responding to suspected personal-data breaches. Where required by law, we will notify the Information Commissioner’s Office and affected individuals of an eligible breach.

Although we take appropriate measures to protect information, no internet transmission or electronic storage system can be guaranteed to be completely secure.

10. What rights do you have?

Under UK data-protection law, you have a number of rights in relation to your personal information.

The application of individual rights depends on the circumstances and the legal basis on which we process your information.

Right of access

You may ask us whether we process your personal information and request a copy of the information we hold about you.

Right to rectification

You may ask us to correct inaccurate personal information or complete information that is incomplete.

Right to erasure

In certain circumstances, you may ask us to delete your personal information.

This right is not absolute. We may retain information where we have a lawful reason or obligation to do so.

Right to restrict processing

In certain circumstances, you may ask us to restrict the way we process your information.

Right to data portability

In certain circumstances, you may ask us to provide personal information you supplied to us in a structured, commonly used and machine-readable format or to transmit it to another organisation.

Right to object

• You may have the right to object to processing based on our legitimate interests.
• You have the right to object at any time to the use of your personal information for direct marketing.

· Right to withdraw consent

• Where processing is based on your consent, you may withdraw that consent at any time.
• Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.

· Automated decision-making

• Where applicable, you may also have rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects.

[Asprey to confirm whether any processing currently falls within this category.]

11. How to exercise your rights

If you wish to exercise a data-protection right, please contact us using the details below.

We may ask you for information necessary to confirm your identity. This is an important security measure intended to prevent personal information being disclosed to someone who is not entitled to receive it.

Where somebody submits a request on your behalf, we may require evidence that you have authorised that person to act for you.

You will not normally have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to act where permitted by law, including where a request is manifestly unfounded or excessive.

We will respond within the timeframe required by applicable data-protection law. Where the law allows additional time because a request is complex or numerous, we will inform you.

12. How to contact us

If you have a question about:

• this Privacy Policy;
• how Asprey uses your personal information;
• your Asprey account;
• your marketing preferences;
• exercising your data-protection rights; or
• a privacy-related complaint,

please contact:

Asprey London Limited

36 Bruton Street

Mayfair.

London. W1J 6QX

Email: concierge@asprey.com

For marketing emails, you may also unsubscribe at any time using the unsubscribe link contained in the relevant communication.

13. Complaints

We take concerns about the way we handle personal information seriously and encourage you to contact us so that we can investigate and respond.

You also have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Further information about your rights and how to make a complaint is available from the ICO at ico.org.uk.

Information Commissioner’s Office

Wycliffe House
Water Lane
Wilslow
Cheshire
SK9 5AF
United Kingdom

You do not have to contact Asprey before making a complaint to the ICO.

14. Cookies and similar technologies

Our Website uses cookies and other storage and access technologies.

Some are necessary to provide the Website and services you request. Others may help us understand Website use, improve performance, remember preferences, personalise your experience or support advertising and marketing.

Where consent is required, optional technologies will not be used unless you have made the relevant choice.

You can manage your preferences through our Cookie Settings.

For information about:

• the categories of technologies we use;
• why we use them;
• third-party technologies;
• how long they remain on your device; and
• how to accept, reject or change your choices,

please read our Cookie Policy.

15. Third-party websites and services

The Website may contain links to websites, applications or services operated by third parties.

Those organisations are responsible for their own privacy practices. This Privacy Policy does not govern the way independent third parties process information through their own websites or services.

We encourage you to read their privacy information before providing personal information to them.

16. Keeping your information accurate

We want the personal information we hold about you to be accurate and up to date.

Please update your information through your account, where that functionality is available, or contact us if your personal information changes or you believe information we hold about you is incorrect.

17. Changes to this Privacy Policy

This Privacy Policy reflects our current privacy practices and may be updated from time to time.

We may make changes to reflect:

• changes to our products, services or business;
• changes to the Website;
• changes to the ways in which we process personal information;
• changes to our suppliers and technology;
• legal or regulatory developments; or
• updated guidance from relevant authorities.

When we update this Privacy Policy, we will change the “Last updated” date at the beginning of the policy.

If we make a material change, we will take appropriate steps to bring it to your attention.