This Privacy Policy describes how NAJJAF (“the Site”, “we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from najjaf.com (the “Site”) or otherwise communicate with us regarding the Site (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services, whether you are a customer, website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last updated” date, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain depend on how you interact with our Site and use our Services. When we use the term “personal information,” we refer to data that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You

This may include:

· Contact details (name, address, phone number, email)

· Order information (billing/shipping address, payment confirmation, etc.)

· Account information (username, password, security questions)

· Customer support communications

Some features of the Services may require you to provide certain personal information. If you choose not to, certain features may be unavailable.

Information We Collect about Your Usage

We automatically collect Usage Data using cookies, pixels, and similar technologies. This includes:

· Device and browser details

· Network connection info

· IP address

· Interaction data on the Site

Information We Obtain from Third Parties

We may receive personal information from:

· Shopify and other vendors supporting our Site

· Payment processors

· Analytics and marketing service providers

How We Use Your Personal Information

· To Provide Services: Process payments, fulfill orders, manage your account, arrange for shipping (note: we operate exclusively online, and do not have a physical retail location).

· Marketing & Advertising: Send promotional content and personalized ads (based on legitimate interests).

· Security & Fraud Prevention: Detect and prevent fraud, illegal activity, or misuse of the Site.

· Customer Service & Improvements: Communicate with you and enhance your user experience.

For EEA and UK residents, the legal basis for data processing includes Article 6(1)(f) UK GDPR for legitimate interests and Article 6(1)(b) where processing is necessary to fulfill a contract.

Cookies

We use cookies and similar technologies to:

· Improve Site functionality and user experience

· Conduct analytics

· Deliver relevant advertising

For full details, see Shopify’s cookie policy: https://www.shopify.com/legal/cookies

You may manage cookie preferences through your browser settings. Note that disabling cookies may impair certain Site functions.

How We Disclose Personal Information

We may share your personal data with:

· Vendors and service providers (e.g., Shopify, payment processors, delivery services)

· Marketing and advertising partners

· Affiliates within our corporate group

· In compliance with legal obligations or business transfers (e.g., mergers)

We do not sell or share sensitive personal information, nor do we use it to infer characteristics about you without your consent.

Your Rights

Under UK GDPR and the Data Protection Act 2018, you may have the following rights:

· Right to Access – Request access to the personal data we hold about you.

· Right to Rectification – Request corrections to inaccurate or incomplete data.

· Right to Erasure – Request deletion of your personal data.

· Right to Restrict Processing – Ask us to limit how we use your data.

· Right to Object – Object to certain types of data processing.

· Data Portability – Request a copy of your data in a transferable format.

· Withdraw Consent – Revoke consent for optional data uses (e.g., marketing).

· Right to Complain – Lodge complaints with the UK Information Commissioner’s Office (ICO).

To exercise any of these rights, contact us using the details below. We may verify your identity before responding.

Data Transfers

As we operate online and use international vendors (e.g., Shopify, Google), your personal information may be transferred outside the UK. Where data is transferred outside the UK/EEA, we use standard contractual clauses or other legally approved mechanisms to protect your information.

Children's Data

Our Services are not intended for use by children. We do not knowingly collect personal information from anyone under 16. If you believe we have collected a child’s data, please contact us for deletion.

Security and Retention of Your Information

We implement reasonable security measures to protect your personal information. However, no system is completely secure. We recommend not sharing sensitive data via unsecured communication channels.

We retain your data as long as necessary to:

· Provide services

· Comply with legal obligations

· Resolve disputes

· Enforce our policies

Third Party Websites and Links

Our Site may contain links to third-party websites. We are not responsible for their content, privacy practices, or security. Please review their privacy policies before submitting personal information.

Contact

If you have questions about our Privacy Policy or wish to exercise your rights, contact us at:

Najaf Jewellers Limited
19 Nun Moor Road
Newcastle upon Tyne
NE4 9AU, United Kingdom
Phone: +44 20 4541 8816
Email: customersupport@najjaf.com

We are the data controller of your personal information under applicable UK data protection law.