Privacy policy

Last updated: July 2, 2026

Welcome to QZAL Jewellery LTD 

QZAL Jewellery LTD operates www.qzaljewellery.com, including all associated webpages, products, services, content, features and tools (collectively referred to as the "Website" or "Services").

Our Website is powered by Shopify, which provides the e-commerce platform that enables us to offer our products and services to customers. As part of providing our Services, Shopify also processes certain personal information on our behalf and, in some circumstances, as an independent controller for its own purposes. This Privacy Policy explains how we collect, use, disclose, store and protect your personal information when you use our Website or communicate with us.

At QZAL, we understand that purchasing fine jewellery is an important and personal investment. Whether you are purchasing an engagement ring, wedding jewellery, anniversary gift, bespoke commission or luxury everyday jewellery, we are committed to protecting your personal information with the highest level of care.

This Privacy Policy explains:

  • what personal information we collect;
  • how we collect it;
  • why we collect it;
  • how we use it;
  • who we share it with;
  • how long we keep it;
  • how we protect it;
  • your legal rights regarding your personal information; and
  • how you can contact us regarding privacy matters.

Please read this Privacy Policy carefully before using our Website.

By accessing or using our Website, placing an order, creating an account, subscribing to our newsletter or otherwise interacting with our Services, you acknowledge that you have read and understood this Privacy Policy.

1. Company Information

This Website is owned and operated by:

QZAL Jewellery LTD

Company Registration Number:

16786860

Registered Office:

Unit 12, New House

67–68 Hatton Garden

London

EC1N 8JY

United Kingdom

Email:

qzaljewellery@gmail.com

Telephone:

+44 20 3700 6666

Website:

www.qzaljewellery.com

Throughout this Privacy Policy, references to "QZAL", "we", "our" or "us" refer to QZAL Jewellery LTD.

For the purposes of UK data protection legislation, QZAL Jewellery LTD is the data controller in relation to the personal information collected through this Website, except where another organisation (such as Shopify) acts as an independent controller for specific processing activities.

2. Our Commitment to Privacy

Protecting your privacy is extremely important to us.

We are committed to ensuring that all personal information is:

  • processed lawfully;
  • processed fairly;
  • processed transparently;
  • collected only for specified purposes;
  • kept accurate and up to date;
  • protected against unauthorised access;
  • retained only for as long as necessary; and
  • handled in accordance with applicable data protection legislation.

We regularly review our internal procedures, security measures and business practices to help ensure your personal information remains protected.

3. Applicable Laws

QZAL Jewellery LTD complies with applicable privacy and data protection legislation, including:

  • UK General Data Protection Regulation ("UK GDPR");
  • Data Protection Act 2018;
  • Privacy and Electronic Communications (EC Directive) Regulations 2003 ("PECR");
  • Consumer Rights Act 2015 where applicable;
  • Electronic Commerce (EC Directive) Regulations 2002 where applicable.

Where we sell products or provide services internationally, we also seek to comply with any applicable data protection laws relevant to those customers.

4. Definitions

For the purposes of this Privacy Policy:

Personal Information

means any information relating to an identified or identifiable individual.

Processing

means collecting, recording, organising, storing, adapting, retrieving, consulting, using, sharing, transferring, deleting or otherwise handling personal information.

Customer

means any individual purchasing or enquiring about products through QZAL.

Services

means our Website together with any products, services, customer support, communications and related features provided by QZAL.

Website

means www.qzaljewellery.com together with all associated webpages.

Data Controller

means the organisation responsible for determining how and why personal information is processed.

Data Processor

means an organisation processing personal information on behalf of a data controller.

5. Information We Collect

The personal information we collect depends on how you interact with our Website.

We may collect information directly from you, automatically through your device, through Shopify, through our service providers and from other trusted third parties where permitted by law.

The categories of personal information we may collect include the following.

A. Identity Information

We may collect:

  • full name;
  • title;
  • billing name;
  • delivery recipient name;
  • customer account information (where customer accounts are enabled).

B. Contact Information

We may collect:

  • email address;
  • telephone number;
  • billing address;
  • delivery address;
  • postcode;
  • city;
  • county;
  • country.

C. Order Information

When purchasing jewellery from us we may collect:

  • products ordered;
  • precious metal selected;
  • gemstone selected;
  • ring size;
  • bracelet size;
  • necklace length;
  • engraving requests;
  • order history;
  • invoices;
  • delivery preferences;
  • special requests.

D. Payment Information

Payments are processed securely through authorised payment providers.

Depending upon the payment method selected, we may receive:

  • payment confirmation;
  • payment status;
  • billing information;
  • transaction reference numbers;
  • payment method.

For your security, QZAL Jewellery LTD does not store complete payment card numbers.

Payments are securely processed using encrypted payment systems operated by trusted payment providers.

E. Customer Account Information

Where customer accounts are available, we may collect:

  • username;
  • encrypted password;
  • saved addresses;
  • account preferences;
  • communication preferences;
  • previous orders.

F. Communications

If you contact us, we may collect:

  • emails;
  • enquiry forms;
  • customer service requests;
  • complaints;
  • feedback;
  • messages sent through our Website;
  • correspondence relating to orders.

G. Bespoke Jewellery Enquiries

Where you enquire about bespoke jewellery or made-to-order pieces, we may collect additional information relevant to your request.

This may include:

  • jewellery design preferences;
  • gemstone preferences;
  • precious metal preferences;
  • inspiration images;
  • sketches;
  • CAD discussions;
  • ring measurements;
  • finger sizes;
  • quotations;
  • production notes;
  • correspondence relating to your project.

This information is only used for the purpose of creating, manufacturing and supplying your requested jewellery.

H. Marketing Information

If you subscribe to our newsletter using Shopify Email, we may collect:

  • email address;
  • subscription preferences;
  • communication history;
  • email interactions;
  • unsubscribe requests.

You may unsubscribe at any time by selecting the unsubscribe link contained within any marketing email.

I. Technical Information

When you visit our Website, we may automatically collect technical information including:

  • IP address;
  • browser type;
  • operating system;
  • device type;
  • browser language;
  • approximate location;
  • pages viewed;
  • products viewed;
  • referring website;
  • session duration;
  • click behaviour;
  • Website interactions.

Some of this information is collected through cookies and similar technologies.

Please refer to our Cookie Policy for further information.

6. Where Your Information Comes From

We collect personal information from a variety of sources depending upon how you interact with us.

These sources include:

Information You Provide Directly

Including when you:

  • purchase products;
  • create an account;
  • contact us;
  • subscribe to our newsletter;
  • request bespoke jewellery;
  • complete forms on our Website.

Automatically Through Your Use of Our Website

Including through:

  • cookies;
  • device information;
  • browser information;
  • analytics;
  • shopping activity;
  • Website interactions.

Shopify

Because our Website is hosted by Shopify, Shopify receives and processes information necessary to provide and improve the Services. Shopify may also process certain information for its own legitimate purposes, including platform security, fraud prevention and service improvements, in accordance with its own privacy policy.

Third-Party Service Providers

Including payment providers, delivery companies, fraud prevention services, analytics providers and marketing providers where necessary to operate our business.

7. Why We Use Your Information

We use personal information only where we have a lawful reason for doing so.

We may use your information to:

  • process orders;
  • manufacture jewellery;
  • provide bespoke services;
  • arrange delivery;
  • communicate order updates;
  • respond to enquiries;
  • verify customer identity;
  • prevent fraud;
  • process payments;
  • provide customer support;
  • send marketing communications where you have consented;
  • improve our Website;
  • improve our Services;
  • maintain business records;
  • comply with legal obligations;
  • protect our legal rights;
  • resolve disputes.

We will never sell your personal information to third parties.

8. How We Share Your Personal Information

We treat your personal information with care and confidentiality. We do not sell your personal information to third parties.

However, in order to operate our Website, fulfil customer orders and provide our Services, we may share your personal information with carefully selected third parties where necessary.

We only share the minimum amount of information required for the relevant purpose and only where there is a lawful basis for doing so.

Your personal information may be shared with:

  • Shopify and its affiliated companies;

  • payment providers;

  • fraud prevention providers;

  • delivery and courier companies;

  • IT service providers;

  • website hosting providers;

  • cloud storage providers;

  • marketing providers;

  • analytics providers;

  • professional advisers;

  • insurers;

  • accountants;

  • legal advisers;

  • government authorities where required by law.

All third parties processing personal information on our behalf are expected to protect your information appropriately and comply with applicable data protection laws.

9. Shopify

Our online store is hosted by Shopify Inc., which provides the e-commerce platform that allows us to sell our jewellery and services online.

When you use our Website, Shopify collects and processes certain personal information to:

  • operate the Website;

  • process orders;

  • process payments;

  • host customer accounts;

  • improve platform security;

  • detect fraud;

  • improve the Shopify platform;

  • maintain system performance.

Depending on your interaction with our Website, Shopify may process:

  • contact information;

  • order information;

  • payment information;

  • browser information;

  • device information;

  • IP address;

  • usage information;

  • shopping activity.

Certain information you provide through our Website may also be transmitted to Shopify's trusted service providers where necessary to provide the Services.

In some circumstances, Shopify acts as our data processor.

For certain processing activities, including improving the Shopify platform and providing enhanced platform services, Shopify may act as an independent data controller in accordance with its own Privacy Policy.

Further information regarding Shopify's processing of personal information is available at:

https://privacy.shopify.com

10. Payment Providers

To process online payments securely, we work with trusted payment providers.

Depending upon the payment method you choose, personal information may be shared with payment providers including:

  • Shopify Payments;

  • Visa;

  • Mastercard;

  • American Express;

  • Google Pay;

  • PayPal.

Payment providers may receive information including:

  • your name;

  • billing address;

  • payment information;

  • order value;

  • transaction reference;

  • payment confirmation.

Payment providers process this information securely in accordance with their own privacy policies.

QZAL Jewellery LTD does not store your complete payment card details.

All payment transactions are processed using encrypted technology designed to protect your financial information.

11. Delivery Partners

To deliver your jewellery safely, we may share relevant information with delivery companies.

This information may include:

  • your name;

  • delivery address;

  • telephone number;

  • email address;

  • delivery instructions;

  • order reference.

Delivery companies use this information solely for delivering your order and providing delivery updates where applicable.

12. Marketing Communications

If you subscribe to receive marketing communications from us, we may send information regarding:

  • new jewellery collections;

  • exclusive product launches;

  • special offers;

  • promotional campaigns;

  • gift guides;

  • jewellery care advice;

  • company news;

  • seasonal collections.

Marketing communications are sent only where:

  • you have provided your consent; or

  • we are otherwise permitted to do so under applicable law.

You may withdraw your consent or unsubscribe at any time by selecting the unsubscribe link included within our marketing emails.

13. Shopify Email

We currently use Shopify Email to manage our email marketing communications.

If you subscribe to our newsletter, Shopify Email may process information including:

  • your email address;

  • subscription status;

  • marketing preferences;

  • email interaction data;

  • whether emails have been opened;

  • whether links have been clicked.

This information helps us improve our communications and understand which content is most relevant to our customers.

14. Meta Pixel

Our Website currently uses Meta Pixel to help us understand how visitors interact with our Website after viewing advertisements on Meta platforms, including Facebook and Instagram.

Where you have provided the appropriate consent, Meta Pixel may collect information including:

  • pages visited;

  • products viewed;

  • items added to basket;

  • completed purchases;

  • browser information;

  • device information;

  • advertising interactions.

This information assists us in:

  • measuring advertising effectiveness;

  • understanding customer behaviour;

  • improving advertising campaigns;

  • showing more relevant advertisements.

Meta may combine information collected through Meta Pixel with information held within your Meta account in accordance with Meta's own Privacy Policy.

You can manage your advertising preferences directly through your Meta account settings.

15. Google Maps

Our Website may include Google Maps to assist customers in locating our registered office or other relevant locations.

If you interact with Google Maps through our Website, Google may collect certain technical information in accordance with its own Privacy Policy.

We do not control Google's collection or processing of personal information.

16. Fraud Prevention and Website Security

Protecting our customers and preventing fraudulent transactions is extremely important to us.

We may process personal information to:

  • verify customer identity;

  • detect suspicious transactions;

  • investigate potentially fraudulent activity;

  • prevent unauthorised access;

  • protect customer accounts;

  • secure online payments;

  • maintain Website security.

Where necessary, information may be shared with fraud prevention providers and law enforcement authorities where required by law.

17. Legal Compliance

We may process or disclose personal information where necessary to:

  • comply with legal obligations;

  • comply with tax legislation;

  • comply with accounting requirements;

  • comply with court orders;

  • comply with requests from regulatory authorities;

  • protect our legal rights;

  • defend legal claims;

  • investigate suspected unlawful activity.

18. International Transfers

As Shopify and certain third-party service providers operate internationally, your personal information may be transferred to countries outside the United Kingdom.

Where such transfers occur, we will ensure appropriate safeguards are implemented in accordance with UK GDPR.

These safeguards may include:

  • adequacy regulations;

  • International Data Transfer Agreements (IDTAs);

  • Standard Contractual Clauses;

  • other lawful transfer mechanisms recognised under UK law.

We take reasonable steps to ensure that transferred information receives an appropriate level of protection.

19. How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected.

Retention periods may depend upon:

  • legal obligations;

  • accounting requirements;

  • warranty obligations;

  • dispute resolution;

  • taxation requirements;

  • fraud prevention;

  • ongoing customer relationships.

Once information is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our data retention procedures.

20. How We Protect Your Information

We take the security of your personal information seriously.

Appropriate technical and organisational measures are implemented to help protect information against:

  • accidental loss;

  • unauthorised access;

  • unlawful processing;

  • disclosure;

  • destruction;

  • alteration;

  • misuse.

These measures may include:

  • encrypted Website connections (SSL);

  • secure payment processing;

  • restricted staff access;

  • password protection;

  • secure servers;

  • regular software updates;

  • monitoring for suspicious activity.

Although we take reasonable precautions, no online transmission or storage system can ever be guaranteed to be completely secure.

Customers should also take reasonable precautions to protect their own account credentials and personal devices.

21. Your Rights

Depending on your location and applicable data protection laws, you may have certain rights regarding your personal information.

If you are located in the United Kingdom or another jurisdiction with similar privacy legislation, these rights may include:

Right of Access

You have the right to request confirmation of whether we process your personal information and to request a copy of that information.

Right to Rectification

You have the right to request that inaccurate or incomplete personal information be corrected.

We encourage customers to keep their account information up to date to ensure orders can be processed correctly.

Right to Erasure ("Right to be Forgotten")

You may request that we delete your personal information where:

  • the information is no longer required for the purpose for which it was collected;

  • you withdraw consent where consent is the lawful basis;

  • you successfully object to the processing;

  • processing is unlawful; or

  • we are legally required to erase the information.

This right is not absolute.

We may retain information where required to:

  • comply with legal obligations;

  • comply with taxation requirements;

  • resolve disputes;

  • prevent fraud;

  • enforce our agreements;

  • establish, exercise or defend legal claims.

Right to Restrict Processing

You may request that we temporarily restrict the processing of your personal information in certain circumstances.

During any restriction period, we will store your information but will not otherwise process it unless legally permitted.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal information in a structured, commonly used and machine-readable format.

Where technically feasible, you may also request that we transfer your information directly to another organisation.

Right to Object

You have the right to object to certain processing activities, including:

  • direct marketing;

  • processing based upon legitimate interests;

  • certain profiling activities.

Where you object to marketing communications, we will stop sending promotional communications to you.

Right to Withdraw Consent

Where we rely on your consent, you may withdraw that consent at any time.

Examples include:

  • marketing emails;

  • non-essential cookies;

  • optional communications.

Withdrawal of consent will not affect processing already carried out before consent was withdrawn.

Exercising Your Rights

To exercise any of your rights, please contact us using the contact details provided at the end of this Privacy Policy.

For your protection, we may request information necessary to verify your identity before responding to your request.

We aim to respond within the timeframes required under applicable law.

22. Complaints

If you have any questions or concerns regarding how we process your personal information, we encourage you to contact us first so that we can try to resolve the matter.

If you remain dissatisfied, you may have the right to lodge a complaint with the Information Commissioner's Office ("ICO"), the UK's independent authority responsible for data protection.

Information Commissioner's Office

Wycliffe House

Water Lane

Wilmslow

Cheshire

SK9 5AF

United Kingdom

Website:

https://www.ico.org.uk

Telephone:

0303 123 1113

Submitting a complaint to the ICO does not affect any other legal rights you may have.

23. Children's Privacy

Our Website is intended for individuals aged 18 years or over.

We do not knowingly collect personal information from children.

If we become aware that personal information has been collected from a child without appropriate authorisation, we will take reasonable steps to delete that information as soon as practicable.

If you believe a child has provided personal information through our Website, please contact us immediately.

24. Automated Decision-Making

We do not make decisions that produce legal or similarly significant effects based solely on automated processing.

Certain automated systems may be used for:

  • fraud prevention;

  • payment verification;

  • Website security;

  • analytics;

  • marketing personalisation where consent has been provided.

These systems are used to improve security and customer experience and are not intended to replace meaningful human involvement in important decisions affecting customers.

25. Cookies and Similar Technologies

Our Website uses cookies and similar technologies to:

  • operate the Website;

  • remember customer preferences;

  • maintain shopping baskets;

  • improve Website performance;

  • analyse visitor behaviour;

  • improve security;

  • support marketing activities where consent has been provided.

Further information regarding cookies is available within our separate Cookie Policy.

You may manage your cookie preferences at any time using the Cookie Settings available on our Website.

26. Third-Party Websites

Our Website may contain links to third-party websites, including social media platforms and other external websites.

Examples include:

  • Instagram;

  • TikTok;

  • Google Maps;

  • payment providers.

Once you leave our Website, this Privacy Policy no longer applies.

We are not responsible for the privacy practices, content or security of third-party websites.

We encourage you to review the privacy policies of any third-party websites you visit.

27. Jewellery-Specific Information

To provide the highest quality products and services, we may retain information relating to jewellery purchased from us.

This may include:

  • product specifications;

  • precious metal details;

  • gemstone details;

  • certificate numbers where applicable;

  • hallmarking records;

  • ring sizes;

  • engraving information;

  • resizing history;

  • repair history;

  • jewellery care history;

  • warranty service history.

This information enables us to:

  • verify previous purchases;

  • provide aftercare services;

  • carry out resizing where available;

  • complete future repairs;

  • assist with insurance documentation where appropriate;

  • improve customer service.

28. Lifetime Jewellery Care

Where complimentary lifetime jewellery care is provided, we may retain records relating to:

  • inspections;

  • professional cleaning;

  • polishing;

  • claw and setting checks;

  • maintenance work;

  • previous repair history.

Maintaining these records helps us provide ongoing customer care and ensure the continued quality of your jewellery.

Repairs required due to accidental damage, misuse, third-party alterations or normal wear and tear may incur additional charges.

29. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

Changes may occur as a result of:

  • changes in legislation;

  • regulatory guidance;

  • changes to our business;

  • changes to our Website;

  • new products or services;

  • technological developments;

  • changes to third-party providers.

The latest version will always be published on our Website together with the updated "Last Updated" date.

Where required by law, we will notify you of significant changes.

30. Contact Us

If you have any questions regarding this Privacy Policy, your personal information or your privacy rights, please contact us.

QZAL Jewellery LTD

Company Registration Number: 16786860

Registered Office:

Unit 12, New House

67–68 Hatton Garden

London

EC1N 8JY

United Kingdom

Email:

qzaljewellery@gmail.com

Telephone:

+44 20 3700 6666

Website:

www.qzaljewellery.com

We are committed to addressing privacy-related enquiries promptly and professionally.

31. Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of England and Wales.

Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales, except where mandatory consumer protection laws provide otherwise.

32. Acceptance of this Privacy Policy

By accessing or using our Website, creating an account, placing an order, subscribing to our newsletter or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy.

Your continued use of our Website following any updates to this Privacy Policy constitutes your acceptance of those changes to the extent permitted by applicable law.