Privacy Policy
Last updated October 2026
alfalah is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR). This policy explains what we collect and why.
Data we collect
- Name, email address and shipping address — to fulfil your order.
- Payment details — processed securely by Stripe; we never see or store your card number.
- Order history and, if you create one, your account and wishlist — to provide your account and service.
How we use your data
We use your data to process and deliver your order, send you order and shipping updates, and provide customer support. With your consent, we may also send you marketing emails — you can unsubscribe at any time.
Legal basis
We process your data on the basis of the contract with you (to fulfil your order), our legitimate interests (service emails and security), and your consent where you ask for marketing.
Sharing
We share your data only with the processors needed to run the shop — our payment provider (Stripe), shipping carriers, and email platform. We never sell your data.
Retention
We keep your data only as long as needed to provide the service and meet legal and tax obligations, then delete it or anonymise it.
Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email support@alfalah.uk.
Contact
For any question about your data, contact us at support@alfalah.uk.