Privacy Policy

Please read these policy carefully before using our website or placing an order.

United Kingdom Last updated: March 2026

1. Introduction

Welcome to AMOLIH. This Privacy Policy explains how AMOLIH Jewels Pvt. Ltd. ("AMOLIH", "we", "us", or "our"), a company incorporated in India with its principal place of business at Jaipur, Rajasthan, India, collects, uses, and protects your personal data.

We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation ("UK GDPR") as retained in UK law by the European Union (Withdrawal) Act 2018, and the Data Protection Act 2018. AMOLIH acts as the Data Controller with respect to the personal data you provide when using our services.

By visiting our website or purchasing from us, you confirm your agreement to this Privacy Policy. If you do not agree, please discontinue using our services.

2. Key Definitions

For the purposes of this policy:

Personal Data: Any information that can identify you as an individual (e.g., name, email, address)
Data Subject: You, the individual whose personal data we process
Controller: AMOLIH Ltd., which determines how and why personal data is processed
Processor: A third party that processes personal data on behalf of AMOLIH
Processing: Any operation performed on personal data (collection, storage, use, sharing, deletion)
Consent: A freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data

3. Information We Collect

3.1 Information You Provide

Identity & Contact Data: Full name, email address, phone number, and account details
Address Data: Delivery address and billing address (including postcode)
Financial Data: Payment card information — processed by PCI-DSS compliant third-party payment processors. We do not store raw card data.
Special Dates: Birthdays, anniversaries, and other milestones you choose to share for personalised reminders and gifting suggestions
Jewellery Preferences: Style preferences, metal type, gemstone interests, ring sizes, and purchase history

3.2 Information Collected Automatically

Technical Data: IP address, browser type, operating system, device identifiers, and referring URLs
Usage Data: Pages visited, products viewed, time spent on pages, and click-stream data
Marketing & Communications Data: Your preferences for receiving marketing from us
Cookies & Similar Technologies: Session cookies, persistent cookies, and web beacons (see Section 8)

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. We rely on the following:

Contractual Necessity: Processing your order, managing your account, and delivering your purchases
Legitimate Interests: Preventing fraud, improving our services, and understanding customer behaviour
Consent: Sending marketing communications and using non-essential cookies — you may withdraw consent at any time
Legal Obligation: Complying with applicable UK laws, tax obligations, and regulatory requirements

5. How We Use Your Information

Order Management: Processing payments, fulfilling orders, arranging delivery, and handling returns
Account Services: Creating and managing your AMOLIH account
Customer Support: Responding to queries, complaints, and after-sales requests
Personalisation: Recommending jewellery based on your preferences and purchase history
Special Occasion Reminders: Sending timely reminders and curated suggestions for your saved dates
Marketing: Sending you newsletters and promotions where you have consented. You can opt out at any time via the unsubscribe link in any email or by contacting us.
Analytics & Improvement: Understanding site usage and enhancing our products and website
Security & Fraud Prevention: Detecting and preventing fraudulent or unauthorised activity
Legal Compliance: Meeting obligations under UK law

6. Sharing of Your Data

We do not sell or rent your personal data. We share your data only with carefully selected service providers who act as Data Processors on our behalf:

Payment Processors: For secure transaction handling (e.g., Stripe, Worldpay, or similar PCI-compliant providers)
Delivery & Logistics Partners: To fulfil and ship your orders within the UK and internationally
Technology & Hosting Providers: For website infrastructure, cloud storage, and IT services
Analytics Providers: To help us improve our website and services

All processors are bound by Data Processing Agreements and are prohibited from using your data for any purpose beyond what we instruct. Any international transfers of personal data are carried out in accordance with UK GDPR requirements, including the use of Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.

7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, or as required by law. Order records and transaction data are retained for a minimum of 6 years in line with UK tax and accounting regulations. You may request erasure of your data (subject to legal exceptions) by contacting us.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance your experience, remember your preferences, and analyse site performance. We obtain your consent before placing non-essential cookies. You may manage your cookie preferences at any time via our Cookie Preference Centre or your browser settings.

9. Your Rights Under UK GDPR

As a UK data subject, you have the following rights:

Right of Access (Subject Access Request): Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure ('Right to be Forgotten'): Request deletion of your data where there is no compelling reason for its continued processing
Right to Restrict Processing: Request that we limit how we use your data in certain circumstances
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
Rights in Relation to Automated Decision-Making: Not be subject to solely automated decisions that significantly affect you

To exercise any of these rights, contact us at: privacy@amolih.co.uk. We will respond within one calendar month as required by UK GDPR.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk or by calling 0303 123 1113.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption, access controls, and secure data storage. Despite these measures, no online transmission is entirely risk-free, and we encourage you to use a strong, unique password for your account.

11. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we hold data about a child, please contact us and we will take steps to delete it.

12. Updates to This Policy

We may revise this Privacy Policy periodically. Material changes will be communicated by updating the Effective Date on this page and, where appropriate, by direct notification. Continued use of our services after changes are posted constitutes your acknowledgment of the revised policy.