Privacy policy

Clear information about what we collect, why we use it, who we share it with, how long we keep it and the choices available to you.

Who this policy is for

This policy explains how Salma Kiran handles personal information when you visit our website, browse or buy jewellery, contact us, receive an order, join the Salma Kiran List or otherwise interact with us. Before public production launch, the legal seller identity, registered or trading address and customer/privacy contact details will be inserted here. We do not publish invented business details.

Information we collect

• Identity and contact information: name, email address, telephone number, billing and delivery address.
• Order information: products, variants, quantities, price, currency, delivery choice, order status, returns, refunds and customer-service history.
• Payment information: payment status and payment-provider references needed to reconcile an order. Card credentials are handled by the payment provider rather than being stored by Salma Kiran as full card details.
• Delivery information: carrier, service, tracking reference and delivery events where available.
• Marketing information: email address, subscription status, signup source, the consent wording presented, consent timestamp and unsubscribe/suppression status.
• Technical information: information reasonably needed for website security, diagnostics and operation, and cookie or similar-technology information where used.
• Correspondence: messages, return requests, photographs or other information you choose to send to customer care.

Why we use personal information

We use information to operate the shop, take and fulfil orders, reserve and reconcile stock, process payments and refunds, communicate about orders, arrange delivery, prevent or investigate misuse, respond to enquiries, keep appropriate business records, comply with legal obligations, improve service reliability and, where you have chosen it, send marketing.

Our lawful bases for UK customers

Depending on the activity, we process personal information because it is necessary to perform or take steps connected with a contract with you; to comply with a legal obligation; because you have given consent, particularly for optional marketing; or because we have a legitimate interest in operating, securing and improving the business where that interest is not overridden by your rights. Where we rely on consent, you can withdraw it at any time.

Orders and payments

Information you provide at checkout is used to create and administer your order. Payment processing is performed through our payment provider. We retain the payment status and references needed for order administration, reconciliation, fraud prevention, disputes and refunds, but our intention is not to store full payment-card credentials in the Salma Kiran commerce database.

Delivery and fulfilment

We use and share the minimum information reasonably required with delivery and fulfilment providers so that goods can be dispatched, tracked and delivered. This may include your name, delivery address, contact information, parcel information and order or tracking references.

The Salma Kiran List and direct marketing

Joining the Salma Kiran List is optional and separate from buying jewellery. When you actively opt in, we record the email address, subscription status, signup source, consent wording and time of consent so we can send the communications requested and demonstrate how consent was obtained. You may unsubscribe at any time. Transactional order and service messages are separate from marketing.

After an unsubscribe request, we may retain limited suppression information so that we can respect the request and avoid accidentally re-adding the address to marketing without a fresh lawful basis.

Cookies and similar technologies

Some technologies are necessary for the site and shopping experience to function. Non-essential analytics, advertising or similar technologies, if introduced, must be handled in accordance with applicable consent requirements. See our Cookies information.

Who we share information with

We may use service providers that support hosting, databases, payment processing, email communications, delivery, security and professional services. They should receive only information appropriate to the service they perform and be subject to suitable contractual or legal safeguards. We may also disclose information where required by law, to establish or defend legal rights, or in connection with a legitimate business reorganisation.

International transfers

Some technology, payment, communications or delivery providers may process information outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will use an applicable lawful transfer mechanism and appropriate protections.

How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for applicable accounting, tax, fraud-prevention, dispute, warranty and legal requirements. Different records can have different retention periods. Marketing consent and suppression records may be retained for as long as needed to evidence consent or honour an unsubscribe request. We will establish and document final production retention schedules before public launch.

Security

We use organisational and technical measures designed to protect customer information against unauthorised access, alteration, loss or disclosure. No internet service can guarantee absolute security, so we also limit access and monitor the operation of the commerce platform.

Your UK data-protection rights

Depending on the circumstances and lawful basis, UK individuals may have rights to access personal information, correct inaccurate information, request erasure, restrict processing, object to processing and receive certain information in a portable format. Where processing is based on consent, consent can be withdrawn without affecting processing that was lawful before withdrawal.

Your right to object: you may object at any time to the use of your personal information for direct marketing. We will stop using it for that purpose.

Complaints

Please contact Salma Kiran first if you have a privacy concern so we can try to resolve it. UK individuals also have the right to complain to the Information Commissioner's Office (ICO), the UK's data-protection regulator.

United States privacy rights

US privacy rights vary by state and can depend on whether a particular law applies to the business. Where an applicable US state privacy law grants you rights, we will honour the rights required by that law. These can include rights to know or access categories or pieces of personal information, request deletion or correction, and opt out of certain sale, sharing or targeted-advertising activities. Salma Kiran does not state here that every US state privacy statute applies to the business, and we do not describe customer information as sold merely because a statute uses a specialised definition.

Children

The shop is intended for customers able to enter into an online purchase or for purchases made with appropriate adult involvement. We do not knowingly design the Salma Kiran List to collect personal information from children for marketing.

Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. We will make material changes clear and, where required, provide notice before using personal information for a materially new purpose.