PRIVACY POLICY

This Privacy Policy (the “Policy”) sets out the basis on which Layla K Jewellery LLC, a company duly incorporated in the United Arab Emirates (“Layla K”, the “Company”, “we”, “us” or “our”), collects, uses, processes, stores, and discloses personal data obtained from users (“User”, “you” or “your”) of the website (the “Website”).

This Policy is issued in accordance with applicable data protection laws of the United Arab Emirates, including Federal Decree-Law No. (45) of 2021 on the Protection of Personal Data (the “PDPL”).

By accessing or using the Website, you acknowledge that you have read and understood this Policy and agree to the collection and use of your personal data in accordance with its terms.

1. COLLECTION OF PERSONAL DATA

1.1 General Collection

The Company may collect personal data directly from you or automatically through your use of the Website.

1.2 Categories of Personal Data

The categories of personal data collected may include:

• Identification Data: including your name, email address, telephone number, and delivery and billing address.
• Transaction Data: including details of purchases, orders, and payment confirmations.
• Technical Data: including IP address, browser type, device information, and usage data.
• Communication Data: including any correspondence, inquiries, or feedback submitted by you.

2. PURPOSE OF PROCESSING

2.1 Processing Purposes

The Company shall process personal data for the following purposes:

• To process, manage, and fulfil orders and transactions.
• To communicate with you regarding orders, inquiries, or customer support matters.
• To operate, maintain, and improve the Website and services.
• To comply with applicable legal and regulatory obligations.
• To detect, prevent, and investigate fraud or unauthorized activities.

2.2 Limitation of Purpose

The Company shall not process personal data for purposes incompatible with those set out in this Policy.

3. LEGAL BASIS FOR PROCESSING

The Company processes personal data on the basis of:

• Performance of a contract, including order fulfilment.
• Compliance with legal obligations.
• Legitimate business interests, provided such interests do not override your rights.
• Your consent, where required under applicable law.

4. PAYMENT INFORMATION

4.1 Payment Processing

All payment transactions shall be processed through secure and authorized third-party payment service providers.

4.2 Card Information

The Company does not store, sell, share, rent, or lease any credit or debit card details to any third parties. All payment transactions are processed through secure and authorized payment service providers. The Company shall not pass any debit or credit card details to third parties.

5. DISCLOSURE OF PERSONAL DATA

5.1 Disclosure to Third Parties

The Company may disclose personal data to:

• Service providers and contractors, including payment processors and delivery partners, strictly for the purpose of providing services.
• Competent authorities, regulators, or law enforcement agencies where required by law.
• Professional advisors, including legal and financial consultants, where necessary.

5.2 No Sale of Personal Data

The Company shall not sell, rent, or commercially exploit personal data.

6. DATA SECURITY

6.1 Security Measures

The Company shall implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, disclosure, alteration, or destruction.

6.2 Internet Risk

Notwithstanding the foregoing, the User acknowledges that no method of transmission over the internet is entirely secure.

6.3 No Absolute Guarantee

While the Company implements appropriate security measures, it does not guarantee the absolute security of any information disclosed online.

7. DATA RETENTION

7.1 Retention Period

Personal data shall be retained only for as long as necessary to fulfil the purposes outlined in this Policy, or as required by applicable laws.

7.2 Deletion or Anonymization

Upon expiry of the retention period, personal data shall be securely deleted or anonymized.

8. DATA SUBJECT RIGHTS

8.1 Your Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request erasure of personal data, where legally permissible.
• Object to or restrict certain processing activities.

8.2 How to Submit Requests

Requests may be submitted using the contact details set out below, and the Company shall respond within a reasonable timeframe in accordance with applicable law.

9. COOKIES AND TRACKING TECHNOLOGIES

9.1 Use of Cookies

The Website may use cookies and similar technologies to enhance functionality, improve performance, and analyze usage.

9.2 Browser Controls

You may control or disable cookies through your browser settings; however, certain features of the Website may be affected.

10. THIRD-PARTY WEBSITES

The Website may contain links to third-party websites. The Company shall not be responsible for the privacy practices or content of such websites. If you access third-party websites through links on this Website, different rules regarding the collection and use of personal data may apply. The Company shall not be responsible for such practices.

11. INTERNATIONAL DATA TRANSFERS

Where personal data is transferred outside the United Arab Emirates, the Company shall ensure that such transfers are carried out in compliance with applicable legal requirements and adequate safeguards.

12. AMENDMENTS TO THIS POLICY

The Company reserves the right to amend this Policy at any time. Any amendments shall become effective upon publication on the Website. Continued use of the Website constitutes acceptance of the updated Policy.

13. CONTACT INFORMATION

For any inquiries or requests relating to this Policy or personal data, please contact: