Privacy Policy

Privacy Policy

Effective Date: 01.04.2024

Almaz by Alaïa is committed to protecting your privacy and ensuring the highest standards of data integrity, confidentiality, and transparency in accordance with UK law. This Privacy Policy outlines how we collect, use, and protect your personal information when you interact with us through our website or services.

1. Who We Are

Almaz by Alaïa (“we”, “our”, “us”) is a luxury jewellery house headquartered in the United Kingdom. We are the Data Controller of the personal information you provide to us.

2. The Information We Collect

We may collect and process the following types of personal data:

• Identity Data: name, title, date of birth, gender
• Contact Data: billing and delivery address, email address, phone numbers
• Financial Data: payment card details (processed securely by third-party payment processors)
• Transaction Data: order history, product preferences
• Technical Data: IP address, browser type, device identifiers, website usage statistics
• Marketing and Communications Data: preferences for receiving promotional material

We do not collect sensitive personal data (e.g., race, religion, health) unless legally required or explicitly consented to.

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we use it:

• To fulfil and manage orders
• To provide customer service and support
• To personalise and improve your shopping experience
• To notify you of changes to our policies or terms
• To prevent fraud and ensure website security
• For lawful marketing purposes (only with your explicit consent)

We never sell or rent your personal information.

4. Legal Basis for Processing

We rely on the following lawful bases:

• Contractual necessity: processing orders and deliveries
• Legal obligation: compliance with tax, accounting, and consumer protection laws
• Legitimate interest: marketing our products, improving services (without infringing your rights)
• Consent: for email marketing and newsletter subscriptions

5. Data Retention

We retain your personal data only as long as necessary for the purposes outlined above, or as required by applicable law (e.g., HMRC regulations). Data is securely deleted or anonymised after this period.

6. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (‘right to be forgotten’)
• Object to processing or withdraw consent (where applicable)
• Request data portability to another service
• Lodge a complaint with the Information Commissioner’s Office (ICO)

You can exercise these rights by contacting us at:

📧 connect@almazbyalaia.com

7. How We Protect Your Data

We implement the highest security standards, including:

• Encrypted communications (HTTPS/SSL)
• Secure payment gateways compliant with PCI-DSS
• Firewalls, access controls, and anti-malware systems
• Regular data audits and restricted internal access

8. Third Parties and International Transfers

Some third-party services (e.g., Shopify, Stripe, Mailchimp) may process your data outside the UK. We ensure all such providers are GDPR-compliant and implement Standard Contractual Clauses (SCCs) or equivalent safeguards to protect your data internationally.

9. Cookies

Our website uses cookies to:

• Enhance user experience
• Track usage analytics (via Google Analytics or similar tools)
• Remember preferences (e.g., language, currency, cart status)

You may manage or disable cookies via your browser settings. Our full Cookie Policy is available.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect legal or operational changes. Any updates will be posted here with a revised “Effective Date.”

Contact Us

For any privacy-related questions or concerns, please contact:

Almaz by Alaïa – Data Protection Officer

✉️ privacy@almazbyalaia.com