Privacy policy

Who is responsible for your data

Yaalvi Direct, Northolt, London, UK, is the data controller for the personal data described here. For any privacy question, email info@yaalvidirect.com.

What we collect

• Account details — your name, email address and phone number.
• Delivery addresses you add to your account.
• Order history — what you bought, when, and what you paid.
• Wholesale applications — business name, address, contact details and any VAT or company number you give us.
• Technical data — IP address and browser information in server logs, used for security and diagnosing faults.

We do not collect or store your card details. Card payments are handled by Stripe on their own systems.

Why we use it, and our lawful basis

• To fulfil your order — performance of our contract with you.
• To operate a trade account — performance of a contract, and our legitimate interest in verifying business customers.
• To keep accounting and VAT records — our legal obligation.
• To secure the site — our legitimate interest in preventing fraud and abuse.
• To send marketing, if you have asked for it — your consent, which you can withdraw at any time.

Transactional messages — order confirmations, delivery updates, password resets — are part of providing the service and are not marketing.

Who we share it with

• Stripe — to take payment.
• Our hosting and email providers — to run the site and send order emails.
• ImageKit — image delivery. It receives no customer personal data.
• HMRC, and professional advisers — where we are legally required to.

We do not sell your personal data.

How long we keep it

Order and invoice records are kept for six years to meet UK tax requirements. Account details are kept while your account is open. If you close your account we remove your personal details but keep the minimum transaction record the law requires.

Your rights

Under UK GDPR you have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected — you can edit most of it yourself in your account;
• ask us to delete data we no longer need to keep;
• object to, or ask us to restrict, certain processing;
• ask for your data in a portable format;
• withdraw consent to marketing at any time.

Email info@yaalvidirect.com to exercise any of these. We will respond within one month.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Cookies

See our cookie policy for what we store in your browser and why.