1. Overview

This Privacy Policy explains how Rafayel Diamonds collects, uses, stores and protects personal information when you use our website, contact us, or place an order.

2. Data controller

Rafayel Diamonds [Ltd] is the ‘data controller’ for personal information collected through this website.

Contact details for privacy enquiries:

• Email: info@RafayelDiamonds.co.uk
• Postal address: Blue Cedar House, Norton Grange, Little Kineton, Warwick, CV35 0DP
• If you have a Data Protection Officer (DPO) or nominated contact: [insert]

3. What information we collect

We may collect and process the following categories of personal information:

• Identity and contact data (name, email address, phone number, billing and delivery address)
• Order and transaction data (items purchased, payment status, delivery tracking information)
• Customer support data (messages you send us, call notes where relevant, and any photographs you provide for support requests)
• Technical data (IP address, device identifiers, browser type, site usage data)
• Marketing preferences (where you opt in or manage your preferences)

4. How we use your information and lawful bases

We only use your information where we have a lawful basis to do so. Depending on the situation, this may include the following:

• Contract: to process and fulfil your order, provide customer service, and manage warranties or servicing
• Legal obligation: to comply with legal and tax requirements, and to prevent fraud
• Legitimate interests: to run and improve our business, keep our website secure, and respond to enquiries (balanced against your rights)
• Consent: for certain marketing communications and non-essential cookies (where required)

5. Marketing

If you opt in, we may send you marketing communications. You can withdraw consent or unsubscribe at any time using the link in our emails or by contacting us.

6. Who we share information with

We share personal information only where necessary and with trusted providers, for example:

• Payment providers to process transactions
• Delivery and logistics providers to ship your order and provide tracking
• IT and website service providers (hosting, security, analytics)
• Customer relationship and email service providers (where you subscribe to updates)
• Professional advisers (legal, accounting) where required

These providers act as ‘processors’ on our instructions, or as independent controllers where they determine their own purposes (for example, banks and payment providers).

7. International transfers

If we transfer your information outside the UK (for example, where a service provider is based overseas), we will ensure appropriate safeguards are in place, such as contractual protections or other approved transfer mechanisms.

8. Data retention

We keep personal information only for as long as necessary for the purposes set out in this policy, including to meet legal, accounting and reporting requirements. Retention periods vary depending on the type of data and why we collected it.

9. Security

We use appropriate technical and organisational measures designed to protect your information against unauthorised access, loss, misuse or alteration. No online service can be guaranteed 100% secure, but we work hard to keep your data protected.

10. Your rights

Subject to applicable law, you may have rights including:

• Access to your personal data
• Correction of inaccurate data
• Erasure (in certain circumstances)
• Restriction or objection to processing (in certain circumstances)
• Data portability (in certain circumstances)
• Withdrawal of consent (where we rely on consent)

To exercise your rights, please contact us using the details above. You also have the right to complain to the Information Commissioner’s Office (ICO) in the UK.

11. Children

Our website is not intended for children and we do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the ‘Last updated’ date.