Privacy policy

Last updated: January 2026.

This policy describes how Afridazzles (“we”, “us”) processes personal data when you use our website and related services. It is written to reflect common expectations under the UK GDPR, the EU GDPR, and the UK Data Protection Act 2018. It does not constitute legal advice.

1. Data controller

The data controller responsible for your personal data is Afridazzles. For privacy requests, contact us at concierge@afridazzles.com.

2. What we collect

We may process categories of data including:

Account and contact details — e.g. name, email, phone, and delivery or billing addresses when you register, place an order, or contact concierge.
Transaction data — order contents, payment references, and fulfillment details. Payment card data is handled by our payment partner (e.g. PayPal); we do not store full card numbers on our servers.
Marketing sign-ups — if you join our mailing list in the site footer, we store your email address to send occasional updates you asked for. You may remove yourself anytime at /newsletter/unsubscribe or by contacting us below.
Technical and usage data — IP address, device type, browser, approximate location derived from IP, and cookies or similar technologies as described in our Cookie policy.
Communications — messages you send to us and our responses.

3. Purposes and lawful bases

We use personal data to:

Perform our contract with you — process and deliver orders, manage accounts, and provide customer support.
Pursue legitimate interests — secure our platform, prevent fraud, improve our website, and understand aggregate usage (where not outweighed by your rights).
Comply with legal obligations — such as tax, accounting, or regulatory requirements.
Marketing — where permitted, based on consent or soft opt-in rules applicable in your jurisdiction.

4. Sharing and international transfers

We may share data with service providers (hosting, payments, email delivery, analytics where enabled) who process it on our instructions. Some providers may be outside the UK or EEA; where required we use appropriate safeguards such as the UK/EU standard contractual clauses.

5. Retention

We keep personal data only as long as needed for the purposes above, including statutory retention for tax and transactional records, then delete or anonymise it.

6. Your rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, or object to certain processing, and to data portability. You may lodge a complaint with the ICO (UK) or your local supervisory authority. To exercise rights, email concierge@afridazzles.com.

7. Children

Our services are not directed at children under 16, and we do not knowingly collect their personal data.

8. Updates

We may update this policy from time to time. Material changes will be reflected on this page with a revised “last updated” date. Related documents: Terms of use, Cookie policy.

Last updated: January 2026.

2. What we collect

We may process categories of data including:

Account and contact details — e.g. name, email, phone, and delivery or billing addresses when you register, place an order, or contact concierge.

Transaction data — order contents, payment references, and fulfillment details. Payment card data is handled by our payment partner (e.g. PayPal); we do not store full card numbers on our servers.

Marketing sign-ups — if you join our mailing list in the site footer, we store your email address to send occasional updates you asked for. You may remove yourself anytime at /newsletter/unsubscribe or by contacting us below.

Technical and usage data — IP address, device type, browser, approximate location derived from IP, and cookies or similar technologies as described in our Cookie policy.

Communications — messages you send to us and our responses.

3. Purposes and lawful bases

We use personal data to:

Perform our contract with you — process and deliver orders, manage accounts, and provide customer support.

Pursue legitimate interests — secure our platform, prevent fraud, improve our website, and understand aggregate usage (where not outweighed by your rights).

Comply with legal obligations — such as tax, accounting, or regulatory requirements.

Marketing — where permitted, based on consent or soft opt-in rules applicable in your jurisdiction.