Privacy Policy

Privacy and Cookie Policy

Last updated: 21 August 2026

Who we are

This website is operated by AYA Jewels Limited ("AYA", "we", "us", "our"), a company registered in England and Wales under company number 09316794, with its registered office at 1 Kings Avenue, London, N21 3NA, United Kingdom. We are the data controller for the personal information described in this policy. We are registered with the Information Commissioner's Office under registration reference ZB137029.

We respect the privacy of everyone who visits our website and buys from us, and we take care of the information you give us. If you have any question about this policy, or about how we handle your information, please email us at info@aya.co.uk or write to us at the address above.

This policy does not apply to other websites we link to. Please read their policies before giving them your details.

What we collect

When you place an order: your name, email address, phone number, billing address and delivery address, and the details of what you have bought. Your card details are handled directly by our payment providers and are never stored by us.
When you create an account: your name, email address and password, and any addresses you choose to save.
When you subscribe to our emails: your email address, and whether you open or click the emails we send.
When you contact us or make a bespoke enquiry: whatever you choose to tell us, together with our correspondence with you.
Automatically, when you browse: your IP address, device and browser type, approximate location, the pages you view, and how you arrived at our site.

Why we use it, and our lawful basis

To take, process and deliver your order — because we need to in order to perform our contract with you.
To handle returns, exchanges, repairs and customer service — to perform our contract with you, and for our legitimate interest in running the business properly.
To prevent fraud and verify identity — for our legitimate interest in protecting the business and our customers, and to meet our legal obligations.
To send you marketing emails — with your consent, which you may withdraw at any time. Every marketing email we send includes an unsubscribe link.
To keep accounting, tax and transaction records — to meet our legal obligations.
To improve our website and understand how it is used — with your consent to non-essential cookies, or for our legitimate interest where no cookie is involved.

Who we share it with

We do not sell your personal information, and we do not share it with third parties for their own marketing purposes. We do share it with the service providers who help us operate, and only so far as they need it to do their job for us:

Our e-commerce and website platform, and our IT and hosting providers
Our payment providers
Our delivery and logistics partners
Our email marketing platform
Fraud prevention and identity verification providers
Our accountants and professional advisers

All of our providers are required to keep your information secure and to use it only on our instructions. We may also disclose information where the law requires it, or in order to establish, exercise or defend legal claims.

Where your information goes

Some of our service providers are based outside the United Kingdom. Where your information is transferred out of the UK, we make sure it keeps an equivalent level of protection — either because the destination country is covered by UK adequacy regulations, or by putting an International Data Transfer Agreement (or the UK Addendum to the EU Standard Contractual Clauses) in place with the provider.

How long we keep it

Order and transaction records: six years from the end of the financial year in which the order was placed, so that we can meet our tax and accounting obligations and deal with any claim.
Account details: for as long as your account remains open, and for two years after your last order or sign-in, after which we delete or anonymise it.
Marketing preferences: until you unsubscribe. We then keep a minimal record of your unsubscribe so that we do not email you again by mistake.
Enquiries and correspondence: two years from our last contact with you, unless it relates to an order or a bespoke commission, in which case it is kept with the order record.
Website and analytics data: up to 26 months.

Your rights

Under UK data protection law you have the right to:

ask us for a copy of the personal information we hold about you;
ask us to correct it if it is inaccurate or incomplete;
ask us to delete it;
ask us to restrict how we use it;
ask us to provide it to you, or to another provider, in a portable format;
object to us using it for a particular purpose, including direct marketing; and
withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, email us at info@aya.co.uk. We will respond within one month. There is no charge, and we may ask you to confirm your identity first so that we do not disclose your information to anyone else.

If you are unhappy with how we have handled your personal information, you have the right to complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would appreciate the chance to put things right first, so please do come to us before you go to them.

Cookies

A cookie is a small file placed on your device when you visit a website. We use four kinds:

Strictly necessary cookies make the website work — your basket, your sign-in, and the security of your session. These are always on, because the site cannot function without them.
Analytics cookies help us understand how our website is used so that we can improve it.
Preference cookies remember choices you have made, such as your country or currency, so the site feels more personal.
Advertising cookies help us show you relevant advertising and measure how well our campaigns work.

We only set analytics, preference and advertising cookies if you agree to them. You can change your mind at any time using the cookie preferences on our site, or by clearing or blocking cookies in your browser settings. If you block cookies, some parts of the site may not work as they should. You can find more general guidance about cookies at ico.org.uk.

Keeping your information safe

We take appropriate technical and organisational measures to protect your personal information, including encryption of data in transit. Payments are processed through secure, industry-standard payment gateways, and we do not store your full card details. No transmission over the internet can be guaranteed completely secure, but we take reasonable care to protect the information you give us.

Children

Our website is not intended for children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, please contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top of this page, and where the change is significant we will tell you by email or by a notice on our website.