Privacy policy

Last Updated: [02, February 2026]

At Rafy London, we are committed to protecting the privacy and security of our clients. This Privacy Policy outlines how we collect, use, and safeguard your personal data when you interact with us online or in-store.

1. DATA CONTROLLER

Rafy London is the "Data Controller" for the information you provide. If you have any questions regarding your data, please contact our Data Privacy Team at: info@rafylondon.com

2. DATA WE COLLECT

We collect information that allows us to provide a premium shopping experience:

• Identity Data: Name, surname, and title.

• Contact Data: Billing address, delivery address, email, and phone number.

• Financial Data: Payment card details (processed securely via encrypted gateways; we
do not store full card numbers).

• Transaction Data: Details about products you have purchased from us.

• Technical Data: IP address, browser type, and location data via cookies.

3. HOW WE USE YOUR DATA

We only process your data when we have a legal basis to do so:

• Order Fulfillment: To process and deliver your purchases (Contractual Necessity).

• Client Support: To manage returns, exchanges, and inquiries (Contractual Necessity).

• Marketing: To send you updates on new collections and exclusive events (Consent - you can opt-out at any time).

• Site Improvement: To optimize our website for a better user experience (Legitimate
Interest).

4. DATA SHARING & THIRD PARTIES

We do not sell your personal data. To fulfill your orders, we share necessary information with trusted partners:

• Logistics: Courier services (e.g., DPD, DHL) for delivery.

• Payments: Secure payment processors (e.g., Stripe, PayPal).

• Marketing: Email platforms (e.g., Klaviyo, Mailchimp) only if you have opted in.

5. YOUR LEGAL RIGHTS

Under UK law, you have the following rights regarding your personal data:

• Access: The right to request a copy of the data we hold about you.

• Correction: The right to ask us to fix inaccurate information.

• Erasure: The right to ask us to delete your data (the "Right to be Forgotten").

• Object/Restrict: The right to stop us from using your data for certain purposes (like
marketing).

6. DATA RETENTION

We keep your data only as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements (typically 6 years for tax purposes in the UK).

7. COOKIES

Our website uses cookies to distinguish you from other users and keep track of your shopping bag. You can manage your cookie preferences through your browser settings or our on-site cookie banner.

8. CONTACT THE REGULATOR

If you are unhappy with how we use your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.