Home

Privacy Policy

Last updated October 2026

alfalah is the data controller responsible for your personal data under the General Data Protection Regulation (GDPR). This policy explains what we collect and why.

Data we collect

  • Name, email address and shipping address — to fulfil your order.
  • Payment details — processed securely by Stripe; we never see or store your card number.
  • Order history and, if you create one, your account and wishlist — to provide your account and service.

How we use your data

We use your data to process and deliver your order, send you order and shipping updates, and provide customer support. With your consent, we may also send you marketing emails — you can unsubscribe at any time.

Legal basis

We process your data on the basis of the contract with you (to fulfil your order), our legitimate interests (service emails and security), and your consent where you ask for marketing.

Sharing

We share your data only with the processors needed to run the shop — our payment provider (Stripe), shipping carriers, and email platform. We never sell your data.

Retention

We keep your data only as long as needed to provide the service and meet legal and tax obligations, then delete it or anonymise it.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these rights, email support@alfalah.uk.

Contact

For any question about your data, contact us at support@alfalah.uk.