Privacy Policy

Last updated: 11 November 2025

1) Who we are

Rafayel Diamonds (“Rafayel”, “we”, “us”) is the controller of your personal data when you shop with us, browse our website, or otherwise interact with our services.

Contact:
Email: info@rafayeldiamonds.co,uk

If you have questions about this policy or your data, contact us using the details above.

2) What data we collect

We collect and process the following categories:

• Identity & contact: name, email, phone, billing and delivery addresses.
• Order & payment: items purchased, order numbers, payment method details (processed securely by our payment providers), refunds, anti-fraud checks.
• Account details: login email and hashed password, wishlists, saved addresses.
• Communications: emails, messages, and phone notes (e.g., customer care).
• Marketing preferences: newsletter opt-in/out, channel preferences.
• Technical & usage: cookie IDs, IP address, device type, pages viewed, on-site interactions, approximate location, referring URLs.
• Social/ads interactions: where you interact with our ads or social posts (e.g., Meta, Google).

3) How we use your data (and lawful bases)

We only use your data where we have a lawful basis under UK GDPR:

• To fulfil your order: process payments, deliver products, send order updates, handle returns. Basis: contract.
• Customer care: answer queries, product support, warranty. Basis: contract / legitimate interests (to run our business and assist customers).
• Account features: managing your account, saved details. Basis: contract / legitimate interests.
• Fraud prevention & security: detect and prevent fraud or misuse. Basis: legitimate interests / legal obligation.
• Marketing: send news and offers if you’ve opted in, or under the soft opt-in for similar products to existing customers. You can opt out at any time. Basis: consent / legitimate interests (soft opt-in, as permitted by PECR). (ICO)
• Analytics & site improvement: understand how our site is used to improve performance and experience. Basis: consent where required (cookies) / legitimate interests.
• Legal, regulatory & reporting: tax, accounting, regulatory compliance. Basis: legal obligation.

4) Marketing choices

• Email & SMS: We’ll send these only with your consent or under the soft opt-in where you bought (or nearly bought) something similar from us and we gave you a clear, easy opt-out at the time and in every message. You can unsubscribe at any time via the link in our emails or by contacting us. (ICO)
• Ad preferences: You may see Rafayel ads on platforms like Google and Meta based on cookies or platform settings. You can adjust your preferences in those platforms and via our cookie controls (see Cookies below).

5) Cookies and similar technologies

We use cookies, pixels and tags to:

• keep your bag and preferences working;
• measure site performance and help us improve;
• show relevant Rafayel ads on other sites (remarketing).

Where the law requires consent for non-essential cookies, we’ll ask for it the first time you visit and let you update choices at any time. For details of specific cookies, retention and how to change settings, see our Cookie Policy (or the cookie banner/settings on our site). (ICO)

6) Sharing your data

We share data only with trusted partners acting under contracts that protect your information:

• Payment providers (e.g., card processors), fraud prevention tools.
• Delivery & logistics partners.
• Website hosting & support, IT/security, customer service systems.
• Analytics & advertising providers (e.g., Google Analytics/Ads, Meta) subject to your cookie choices.
• Professional advisers (lawyers, accountants), and governmental bodies if required by law.

We do not sell your personal data.

7) International transfers

Some providers may process data outside the UK. Where that happens, we ensure appropriate safeguards (e.g., UK Addendum/IDTA with Standard Contractual Clauses or adequacy regulations) so your data remains protected to UK standards.

8) How long we keep your data

We keep personal data only as long as necessary for the purposes set out above—for example, orders are typically retained to meet tax and accounting rules, while marketing data is kept until you opt out or it becomes inactive, after which we securely delete or anonymise it. If exact periods aren’t possible, we use clear criteria to decide retention. (ICO)

9) Security

We use a combination of technical and organisational measures to protect your data, including encryption in transit, access controls, and staff training. While no system is 100% secure, we work to prevent unauthorised access, disclosure, alteration or destruction.

10) Your rights

Under UK GDPR you have the right to:

• be informed about how we use your data;
• access your data;
• rectify inaccuracies;
• erase your data in certain cases;
• restrict or object to processing in certain cases;
• data portability;
• withdraw consent where that’s our basis;
• and not be subject to decisions based solely on automated processing, including profiling, where applicable.
  You also have the right to complain to the ICO (www.ico.org.uk). We’ll respond to requests within one month as required by law. To exercise your rights, contact privacy@rafayeldiamonds.com. (ICO)

11) Children

Our website and services are not directed at children, and we do not knowingly collect children’s data.

12) Changes to this policy

We may update this policy from time to time. We’ll post the new version with a new “Last updated” date and take appropriate steps to inform you of material changes.

13) How this policy relates to others

This Privacy Policy works alongside our Cookie Policy, Terms & Conditions, Returns Policy and any product-specific notices. It’s written to reflect UK GDPR and the Privacy and Electronic Communications Regulations (PECR). (ICO)