Privacy Policy

1. Who We Are

Qalb Jewels ("we", "us", "our") is a bespoke gemstone jewellery company based in the United Kingdom. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Our contact details: hello@qalbjewels.com

2. What Data We Collect

We collect and process the following personal data:

• Name, email address, phone number — when you place an order, make an enquiry, or book an appointment
• Delivery address — when you place an order
• Payment information — processed securely by Stripe; we do not store card details
• Browsing data and session data — to maintain your wishlist and browsing preferences
• Email address — if you subscribe to our newsletter

3. How We Use Your Data

We use your personal data to:

• Process and fulfil your orders
• Communicate with you about your order or enquiry
• Send you appointment confirmations and reminders
• Send marketing emails, if you have opted in
• Improve our website and services
• Comply with legal obligations

4. Legal Basis for Processing

We process your data on the following legal bases:

• Contract — to fulfil orders you place with us
• Legitimate interests — to improve our service and respond to enquiries
• Consent — for marketing communications (you may withdraw consent at any time)
• Legal obligation — to comply with applicable UK law

5. Third Parties

We share your data with the following third parties where necessary:

• Stripe — payment processing
• Mailchimp — newsletter management (if you have subscribed)
• Delivery and courier services — to ship your order

We do not sell your data to third parties.

6. Retention

We retain your personal data for as long as necessary to fulfil the purposes set out in this policy, or as required by law. Order records are retained for 7 years in accordance with HMRC requirements.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request erasure of your data
• Object to processing
• Data portability
• Withdraw consent at any time

To exercise any of these rights, please contact us. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use session cookies to maintain your browsing session and wishlist. These are essential cookies and are deleted when you close your browser. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. The date at the top of this page indicates when it was last revised.