Privacy policy

Privacy Policy

Effective date: 26 July 2026

This Privacy Policy explains how Zaira Jewelery collects, uses, shares and protects your personal information when you visit our website, place an order, contact us or otherwise interact with our business.

Our online store is powered by Shopify, which provides the ecommerce platform that enables us to sell our products and services.

This policy reflects applicable United Kingdom data-protection law, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where we offer products to customers in Ireland or elsewhere in the European Economic Area, we will also comply with applicable requirements of the EU General Data Protection Regulation (EU GDPR).

Nothing in this Privacy Policy limits any rights available to you under applicable data-protection law.

1. Who We Are

For the purposes of applicable data-protection law, Zaira Jewelery is the controller of the personal information described in this policy.

Business name: Zaira Jewelery
Email: zairajewelery@gmail.com

As data controller, we determine why and how your personal information is processed, except where another organisation acts as an independent controller for its own purposes.

2. Personal Information We Collect

“Personal information” means information relating to an identified or identifiable individual.

Depending on how you interact with us, we may collect the following categories of information:

Contact information

  • Your name

  • Email address

  • Telephone number

  • Billing address

  • Shipping address

Order and transaction information

  • Products viewed, ordered, returned or exchanged

  • Order numbers

  • Purchase history

  • Delivery details

  • Refund and cancellation information

  • Communications relating to your order

Payment information

  • Payment method

  • Billing details

  • Payment status

  • Transaction and confirmation information

  • Limited payment-card information made available to us by our payment provider

Payments are processed through Shopify and authorised payment providers. We do not directly receive or store your complete payment-card number or security code.

Account information

If customer accounts are available, we may collect:

  • Account login details

  • Saved addresses

  • Order history

  • Communication and marketing preferences

Communications

We may collect information you provide when you:

  • Contact customer support

  • Submit a return or refund request

  • Report a faulty product

  • Respond to a survey

  • Leave a review

  • Enter a promotion or competition

  • Communicate with us through email, social media or another channel

Device and usage information

When you use our website, we and our service providers may automatically collect information such as:

  • IP address

  • Device type

  • Browser type and settings

  • Operating system

  • Website activity

  • Pages and products viewed

  • Referring website or link

  • Approximate location derived from your IP address

  • Cookie identifiers and similar technical information

  • Dates and times of visits

Marketing information

We may collect:

  • Your marketing preferences

  • Whether you opened or interacted with a marketing communication

  • Information about promotions or advertisements you interacted with

  • Your consent records

We do not intentionally collect special-category information, such as information about your health, religion, ethnicity or political opinions, through our website.

3. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you place an order, create an account, subscribe to marketing communications, contact us or request a return

  • Automatically through cookies and similar technologies when you use our website

  • From Shopify, which hosts and supports our online store

  • From payment processors and fraud-prevention providers

  • From delivery, postal and logistics providers

  • From marketing, advertising and analytics providers

  • From social-media platforms when you interact with our business

  • From publicly available sources where permitted by law

If you provide personal information about another person, such as a recipient’s delivery details, you must ensure you are authorised to provide that information.

4. How and Why We Use Your Information

We only process personal information where we have a lawful basis for doing so.

To process and fulfil your order

We use your information to:

  • Accept and process orders

  • Take and verify payments

  • Send order confirmations

  • Arrange delivery

  • Manage cancellations, returns, exchanges and refunds

  • Contact you about your order

Our lawful basis is normally the performance of our contract with you or taking steps at your request before entering into a contract.

To provide customer support

We use your information to:

  • Respond to enquiries

  • Resolve complaints

  • Provide product and order support

  • Investigate faulty, damaged or missing items

Our lawful basis may be performance of a contract or our legitimate interest in providing effective customer service and managing our business.

To operate and improve our website and business

We may use information to:

  • Maintain and improve our website

  • Understand how customers use our store

  • Analyse product and website performance

  • Improve our products and customer experience

  • Troubleshoot technical problems

  • Conduct internal reporting

Our lawful basis is generally our legitimate interest in operating, evaluating and improving our business. Where consent is legally required for cookies or similar technologies, we will rely on your consent.

To protect our business and customers

We may use information to:

  • Verify payments and customer details

  • Detect and prevent fraud

  • Protect accounts and transactions

  • Maintain website and information security

  • Investigate suspicious or unlawful activity

  • Enforce our Terms of Service

Our lawful basis is generally our legitimate interest in protecting our customers, website and business. In some cases, processing may also be necessary to comply with a legal obligation.

To comply with legal obligations

We may process and retain information to:

  • Maintain tax and accounting records

  • Respond to lawful requests from regulators, courts or public authorities

  • Comply with consumer-protection and product-safety obligations

  • Establish, exercise or defend legal claims

Our lawful basis is compliance with a legal obligation or, where appropriate, our legitimate interest in protecting our legal rights.

To send marketing communications

Where permitted, we may use your contact details to send information about:

  • New products

  • Promotions and offers

  • Restocks

  • Zaira Jewelery news

We will rely on your consent where consent is required. In limited circumstances, we may rely on another lawful basis permitted by direct-marketing law.

You may unsubscribe at any time by:

Unsubscribing from marketing will not prevent us from sending essential service messages concerning an order or account.

5. Cookies and Similar Technologies

Our website and its service providers use cookies, pixels and similar technologies to:

  • Keep the website functioning

  • Remember your preferences

  • Enable shopping-cart and checkout features

  • Maintain security and prevent fraud

  • Measure website traffic and performance

  • Understand customer interactions

  • Personalise content or advertising, where enabled

Some cookies are necessary for the website to function and cannot reasonably be switched off through our systems. Non-essential cookies, including certain analytics and advertising cookies, will only be used where permitted by law and, where required, after you provide consent.

You can manage your preferences through our cookie banner or customer privacy settings. You may also control cookies through your browser, although disabling necessary cookies may affect website functionality.

Further details should be provided in our Cookie Policy or cookie-preference centre, where available.

6. How We Share Personal Information

We may share personal information with third parties where reasonably necessary to operate our business, fulfil orders or comply with the law.

These recipients may include:

Shopify

Shopify provides our ecommerce platform and processes personal information to host the store, enable checkout, support transactions and provide related services.

Shopify may also process certain information for its own purposes as described in its privacy documentation.

Payment providers

Payment processors, banks and payment-card networks may process your information to authorise payments, prevent fraud and issue refunds.

Delivery and logistics providers

We share delivery information with postal services, couriers, fulfilment providers and logistics partners to deliver and manage orders.

Professional and technical service providers

We may use providers that assist with:

  • Website hosting and maintenance

  • Customer support

  • Email delivery

  • Data storage

  • Analytics

  • Marketing and advertising

  • Fraud prevention

  • Accounting, legal and professional advice

Authorities and legal recipients

We may disclose information to courts, regulators, law-enforcement bodies, tax authorities or other parties where:

  • Required by law

  • Necessary to protect our legal rights

  • Necessary to protect customers or others

  • Required to investigate fraud, security incidents or unlawful activity

Business transfers

If Zaira Jewelery is sold, reorganised, merged or transfers part of its business, relevant personal information may be shared with professional advisers, prospective purchasers or the new business owner, subject to appropriate confidentiality and data-protection measures.

We require service providers acting on our behalf to protect personal information and process it only in accordance with applicable law and our instructions.

7. Sale and Targeted Advertising

We do not sell personal information in the ordinary meaning of exchanging it directly for money.

However, certain advertising, analytics or Shopify features may involve disclosures that are treated as “selling”, “sharing” or targeted advertising under the laws of some jurisdictions.

Where such laws apply, we will provide any legally required notices, consent choices or opt-out mechanisms through our website or privacy-preference settings.

8. International Transfers

Shopify and some of our other service providers operate internationally. Your personal information may therefore be transferred to or processed in countries outside the United Kingdom or European Economic Area.

Where personal information is transferred internationally, we will take steps required by applicable law to protect it. Depending on the transfer, these safeguards may include:

  • A UK or European Commission adequacy decision

  • The UK International Data Transfer Agreement

  • The UK Addendum to the European Commission’s Standard Contractual Clauses

  • European Commission Standard Contractual Clauses

  • Other valid safeguards or legal transfer mechanisms

You may contact us if you would like further information about the safeguards applying to your personal information.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including to:

  • Fulfil orders and provide customer service

  • Maintain business, tax and accounting records

  • Manage returns, refunds and product issues

  • Prevent fraud and maintain security

  • Resolve disputes

  • Establish, exercise or defend legal claims

  • Comply with legal and regulatory obligations

The applicable retention period depends on factors including:

  • The nature of the information

  • Why it was collected

  • Whether you have an active account or customer relationship with us

  • Applicable tax, accounting and consumer-protection requirements

  • The risk of harm from unauthorised use or disclosure

  • Whether the information is needed for an actual or potential legal claim

When personal information is no longer required, we will delete, anonymise or securely dispose of it, subject to technical and legal limitations.

10. Automated Decision-Making and Fraud Prevention

Shopify, payment processors or fraud-prevention providers may use automated systems to assess transactions for fraud, security or payment risk.

These systems may consider information such as:

  • Payment and transaction details

  • IP address and device information

  • Billing and delivery information

  • Previous transaction patterns

  • Indicators of suspicious activity

A transaction may be delayed, declined or referred for further review as a result.

We do not intend to make decisions based solely on automated processing that produce legal or similarly significant effects unless permitted by law and appropriate safeguards are in place.

If you believe an order was incorrectly affected by an automated assessment, contact us at zairajewelery@gmail.com.

11. Data Security

We use reasonable technical and organisational measures designed to protect personal information against:

  • Unauthorised access

  • Accidental loss

  • Improper use

  • Alteration

  • Disclosure

  • Destruction

These measures may include secure payment processing, restricted access, authentication controls and the use of reputable service providers.

However, no internet transmission or storage system can guarantee complete security. You are responsible for keeping any account password confidential and for contacting us if you suspect unauthorised access to your account.

12. Your Data-Protection Rights

Depending on your location and the circumstances, you may have the right to:

  • Request access to the personal information we hold about you

  • Request correction of inaccurate or incomplete information

  • Request deletion of your personal information

  • Request restriction of processing

  • Object to processing based on legitimate interests

  • Object to direct marketing at any time

  • Request the transfer of certain information to you or another organisation

  • Withdraw consent where processing is based on consent

  • Request information about applicable international-transfer safeguards

  • Challenge certain decisions made solely through automated processing

  • Lodge a complaint with a data-protection authority

These rights are not absolute and may be subject to legal conditions or exemptions. For example, we may need to retain certain order information to comply with tax, accounting or legal obligations.

To exercise your rights, contact:

zairajewelery@gmail.com

Please include enough information for us to identify you and understand your request. We may ask you to verify your identity before responding.

We will respond within the period required by applicable law.

Your right to object

You have the right to object at any time to the use of your personal information for direct marketing. You may also object to processing based on our legitimate interests, although we may continue processing where we have compelling legitimate grounds or need the information for legal claims.

13. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can try to resolve the matter.

UK residents may lodge a complaint with the UK Information Commissioner’s Office:

Information Commissioner’s Office
Website: www.ico.org.uk

If you live in Ireland or another EEA country, you may complain to the data-protection authority in your country of residence, place of work or place of the alleged infringement.

Irish residents may contact:

Data Protection Commission
Website: www.dataprotection.ie

You may exercise your right to complain without first contacting us.

14. Children’s Information

Our products and website are intended for a general audience and are not specifically directed at children.

Individuals under 18 should only place an order with the involvement and permission of a parent or legal guardian.

We do not knowingly use children’s personal information for targeted marketing. If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review and, where appropriate, delete the information.

15. Third-Party Websites and Services

Our website may contain links to third-party websites, social-media platforms or services that we do not control.

Those third parties have their own privacy practices and policies. We are not responsible for how independent third parties collect or use personal information, and we encourage you to review their privacy policies before providing information to them.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to:

  • Our business practices

  • Our website or services

  • Shopify or other service providers

  • Applicable laws or regulatory requirements

The revised policy will be published on this page with an updated effective date.

Where changes materially affect how we use personal information, we will provide additional notice where required by law.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise your rights or have concerns about how we process personal information, please contact:

Zaira Jewelery
Email: zairajewelery@gmail.com