Privacy Policy

Rafyq Jewels (trading as Rafyq) operates rafyq.com and associated sales channels. We are the data controller for personal data collected via our site and services.

When we sell through third-party marketplaces, we may act as a processor for that platform.

• Identity & contact: name, email, phone, billing/shipping address.
• Order & support: products purchased, order numbers, messages to support, returns/warranty info.
• Payment: processed by our payment providers (we don’t store full card details).
• Technical: IP address, device/browser info, cookie identifiers, usage logs.
• Marketing preferences: email/SMS consent status.
• Content you submit: notes for customisation/engraving, reviews, survey responses.

• Fulfil orders & provide services (shipping, returns, warranties). Basis: Contract.
• Payments & fraud prevention. Basis: Legitimate interests & legal obligation.
• Customer support & account communications. Basis: Contract/legitimate interests.
• Marketing with your consent (email/SMS). Basis: Consent (withdraw anytime).
• Improve services & analytics. Basis: Legitimate interests.
• Legal & compliance (tax, accounting, product safety). Basis: Legal obligation.

We share personal data with trusted providers under contracts that protect your data and restrict processing:

• Shopify (store platform & hosting).
• Payment processors (e.g., Shopify Payments/Stripe, PayPal).
• Couriers (e.g., Royal Mail) for shipping & returns.
• Email & messaging (transactional/support comms).
• Analytics & marketing tools (see section 6).
• Professional services (accounting, legal) & fraud prevention services.

We may disclose information where required by law, to protect rights and safety, or in connection with a business transfer.

We use cookies, pixels, and local storage to operate the site, enable checkout, remember preferences, and measure performance. You can manage preferences via your browser and our cookie banner.

• Essential: security, checkout, load balancing.
• Performance/analytics: traffic patterns and site usage.
• Functional: remembering choices (e.g., currency).
• Advertising: measuring campaigns and showing relevant ads.

Details: Cookie Policy.

We may use analytics (e.g., Shopify analytics, Google Analytics) and advertising partners (e.g., Meta/Google) to understand performance and improve marketing. These partners may set cookies or device IDs. Where required, we seek consent before using non-essential cookies.

• You can opt out of marketing emails anytime (unsubscribe link in emails).
• Manage ad personalisation in your Google/Meta settings.

We keep personal data only as long as necessary for the purposes above and legal/accounting requirements. Typical periods include:

• Orders & tax records: 6 years (UK requirement).
• Support messages: up to 24 months after resolution.
• Marketing data: until you unsubscribe or withdraw consent.

Some providers may process data outside the UK/EEA. Where this occurs, we rely on appropriate safeguards (e.g., UK Addendum to SCCs, adequacy decisions, or other lawful mechanisms).

Under UK GDPR you have rights to access, rectify, erase, restrict or object to processing, and data portability. Where processing relies on consent, you can withdraw consent at any time.

You can also complain to the UK ICO: ico.org.uk/make-a-complaint.

We use technical and organisational measures appropriate to the risk (encryption in transit, access controls, least-privilege). No method is 100% secure; we continually improve our safeguards.

Our site is not intended for children under 16. We don’t knowingly collect data from children. If you believe a child has provided data, contact us to remove it.

We may update this policy to reflect changes in our practices or legal requirements. We’ll post the new version with an updated date.

Rafyq Jewels (trading as Rafyq) — Edinburgh, United Kingdom

Email: support@rafyq.com · Tel/WhatsApp: +44 7455 642908

To exercise your rights, include your name, contact details, and any relevant order number.