Privacy policy

This Privacy Policy explains how Ayaani Ltd, trading as Ayaani, collects, uses, shares and protects personal information when you visit www.ayaani.co.uk, purchase from us, create or use a customer account, join Subscribe & Save, submit a review, contact us or otherwise interact with Ayaani.

Ayaani Ltd is the controller of personal information used for Ayaani's own business purposes. Shopify and other service providers may also process personal information as processors, service providers or independent controllers depending on the service involved.

Who we are

• Company: Ayaani Ltd, trading as Ayaani
• Company number: 14928080
• Registered in: England and Wales
• Registered office: 167–169 Great Portland Street, Fifth Floor, London W1W 5PF, United Kingdom
• Email: support@ayaani.co.uk

Personal information we collect

The information we collect depends on how you interact with Ayaani and may include:

• Identity and contact details: name, email address, telephone number, billing address, delivery address and country or region.
• Order and transaction details: products purchased, basket contents, order value, discounts, delivery method, tracking information, returns, refunds, payment status and order history.
• Payment-related information: payment details are handled by Shopify and the payment providers available at checkout. Ayaani generally does not receive or store your complete payment-card number. We may receive limited transaction information such as the payment method, authorisation or payment status, billing details and information needed to manage refunds or disputes.
• Customer account information: email address, profile details, saved addresses, order history, preferences and account activity. Ayaani uses Shopify's new customer accounts, which may authenticate customers using one-time codes or other supported secure methods. Ayaani does not ask customers to create or provide an Ayaani account password.
• Subscription information: subscribed product, price, discount, billing and delivery frequency, next billing date, delivery address, payment status, renewal history, subscription status and changes such as skips, delays, pauses or cancellations.
• Communications and support information: messages, emails, contact-form submissions, chat conversations, complaint details and information you provide when asking for help. Please do not include medical records or unnecessary health information in a review or support message.
• Reviews and user-generated content: rating, review text, display name, photographs or other content you choose to submit. Published reviews may be visible to other visitors.
• Marketing information: newsletter sign-up, communication preferences, campaign interactions and whether you opened, clicked or unsubscribed from a message where that information is available.
• Device, website and usage information: IP address, approximate location derived from IP, browser, device type, operating system, language, time zone, cookie or pixel identifiers, referring pages, pages viewed, searches, clicks, basket activity, checkout activity and information about how you use the website.
• Fraud and security information: signals used to identify suspicious transactions, misuse, account security issues, chargebacks or other potentially unlawful activity.

How we collect personal information

We collect personal information:

• directly from you when you browse, place an order, create or access an account, subscribe, complete a form, submit a review, contact us or communicate with us;
• automatically through Shopify, cookies, pixels, logs and similar technologies when you use the website;
• from payment providers, delivery carriers, review providers, customer-support tools, fraud-prevention services and other suppliers involved in providing our services;
• from advertising, analytics and social-media platforms when you interact with an Ayaani advertisement, campaign or connected feature, subject to your settings and applicable consent requirements; and
• from publicly available sources or professional advisers where reasonably necessary for legal, security or business-administration purposes.

How we use personal information and our lawful bases

Under UK data-protection law, Ayaani must have a lawful basis for each purpose for which personal information is used. Depending on the activity, we rely on contract, legal obligation, legitimate interests and consent.

Contract

We use personal information where necessary to take steps at your request or perform our contract with you, including to:

• process and fulfil purchases;
• take payment and issue refunds;
• arrange delivery, tracking, returns and customer support;
• create and manage customer accounts;
• create, bill, deliver and manage Subscribe & Save orders; and
• send service messages about an order, payment, account or subscription.

Legal obligations

We use and retain information where necessary to comply with legal requirements, including tax and accounting rules, consumer-protection obligations, product-safety responsibilities, regulatory requests, court orders and the prevention or reporting of unlawful activity where required.

Legitimate interests

We use personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. These purposes may include:

• operating, securing, testing and improving the website, customer experience and business;
• responding to enquiries, complaints and service issues;
• preventing fraud, misuse, cyber incidents and unauthorised access;
• understanding product and website performance;
• managing reviews, customer feedback and product quality;
• maintaining business, legal and audit records;
• establishing, exercising or defending legal claims; and
• sending relevant direct marketing where permitted by law, including where the soft opt-in applies, while always providing an unsubscribe option.

Consent

We rely on consent where required, including for certain email marketing, non-essential cookies, analytics technologies, personalised advertising or other optional processing. You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

Orders, accounts and subscriptions

Information supplied at checkout is used to process the order, verify payment, arrange delivery, provide support and meet legal record-keeping requirements. Some details are required to enter into and perform the purchase contract. If required information is not provided, we may be unable to accept or fulfil the order.

Customer accounts are provided through Shopify. Shopify may send a one-time code or offer another supported authentication method to verify access. Customers should protect access to their email account and devices and contact Ayaani promptly if they believe an account or order has been accessed without permission.

When you select Subscribe & Save, Ayaani and Shopify process the information needed to create and manage recurring payments and deliveries. Eligible subscriptions can be viewed and managed through Manage subscriptions.

Shopify

Our store is hosted by Shopify. Shopify processes personal information when you visit, browse, create an account or make a purchase from Ayaani. This includes information needed to host the store, operate checkout, process payments, provide customer accounts, manage orders and subscriptions, prevent fraud, provide analytics and support other commerce services.

Depending on the Shopify services enabled and your consent or opt-out choices, Shopify may also process information to provide services and enhanced features based on your interactions with Ayaani, with other Shopify merchants and with Shopify. Information may be shared with Shopify and relevant third parties, including organisations located in other countries, to provide these services.

For information about Shopify's own processing and privacy rights, read the Shopify Consumer Privacy Policy. You can also use the Shopify privacy portal to review choices relating to Shopify's processing, including withdrawing consent or objecting to certain advertising-related processing where available.

Cookies, analytics and advertising

Ayaani, Shopify and approved partners use cookies, pixels, tags, local storage and similar technologies. These technologies may be used to:

• keep the website, basket, checkout, account and security features working;
• remember choices and improve functionality;
• measure traffic, engagement, campaigns and website performance;
• understand how visitors find and use Ayaani; and
• show or measure advertising, including personalised advertising where permitted and consented to.

Essential technologies are used where necessary to provide the website and requested services. Where applicable law requires consent, non-essential analytics and advertising technologies are not used until consent is provided through the cookie banner or compatible consent tool.

More information is available in our Cookie Policy. You can change available cookie choices through the website's privacy or cookie controls. Browser settings can also block or delete cookies, although doing so may affect website functionality.

Marketing communications

We may send marketing by email or another permitted channel where you have consented or where another lawful permission applies. Marketing messages include an unsubscribe link. You may also opt out by emailing support@ayaani.co.uk.

Opting out of marketing does not stop necessary service communications about an order, delivery, payment, refund, account, subscription, security issue or policy change. We may keep a limited suppression record so that we can honour an unsubscribe request.

How we share personal information

We disclose only the information reasonably necessary for the relevant purpose. Recipients may include:

• Shopify and commerce providers that host the website and provide checkout, payments, customer accounts, subscriptions, order management, fraud screening, analytics and related services;
• payment providers and financial institutions that authorise transactions, process payments, manage chargebacks and issue refunds;
• warehousing, fulfilment, delivery and customs providers that pack, ship, track and deliver orders or process international declarations;
• customer-service, messaging, forms, email and subscription providers used to communicate with customers and operate recurring orders;
• review and user-generated-content providers used to collect, verify, moderate and publish product reviews;
• analytics, advertising, search and social-media providers used to measure performance, understand audiences and run campaigns, subject to consent and opt-out requirements;
• technology, security, hosting and professional-service providers that help us operate, protect and administer the business;
• accountants, lawyers, insurers, auditors and other professional advisers where reasonably necessary;
• regulators, courts, law-enforcement bodies, tax authorities or other public authorities where disclosure is required or permitted by law; and
• prospective buyers, investors or advisers in connection with a genuine business reorganisation, financing, sale or transfer, subject to appropriate confidentiality and legal safeguards.

Service providers are required to handle information in accordance with applicable law and their contractual responsibilities. Some providers may also act as independent controllers for particular services and apply their own privacy policies.

Sale, sharing and targeted advertising choices

Ayaani does not sell personal information for money. However, certain uses of advertising, analytics or Shopify enhanced services may be treated as a “sale”, “sharing” or “targeted advertising” under some privacy laws.

Where these rights apply, you can use Your Privacy Choices to submit an opt-out. A supported Global Privacy Control signal may also be recognised in regions where applicable. You may separately manage Shopify-specific choices through the Shopify privacy portal.

International transfers

Shopify and some of our other providers operate internationally. Personal information may therefore be processed in the United Kingdom, European Economic Area, Canada, United States and other countries where Ayaani's providers or their subprocessors operate.

Where personal information is transferred from the United Kingdom to a country that is not covered by an applicable adequacy regulation, we or the relevant provider use an approved safeguard where required, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, another legally recognised transfer mechanism, and appropriate security measures.

How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to provide services, maintain records, comply with law, resolve disputes and protect legal rights. Retention periods depend on the nature of the information and the reason it is held.

• Order, transaction, subscription, tax and accounting records are commonly retained for up to six years after the relevant transaction, accounting period or customer relationship, and may be kept longer where required for a dispute, investigation or legal obligation.
• Customer account information is retained while the account or customer relationship remains active and afterwards where needed for orders, subscriptions, security, legal obligations or rights requests.
• Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer needed. A limited suppression record may be retained to prevent further marketing.
• Support messages, complaints, reviews and business correspondence are retained for as long as reasonably necessary to manage the matter, maintain an accurate record and establish or defend legal rights.
• Cookie and device information is retained according to the relevant cookie, provider setting and purpose described in our Cookie Policy.

Information may remain temporarily in secure backups after deletion until the relevant backup cycle is completed.

Security

We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, misuse, alteration, loss or disclosure. These measures may include access controls, secure authentication, encryption provided by our platforms, supplier checks, monitoring and staff or contractor confidentiality obligations.

No online system is completely secure. Customers should protect their email accounts and devices and should not send payment-card details, passwords or unnecessary sensitive information by ordinary email.

Your data-protection rights

Depending on your location and the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to your personal information;
• request correction of inaccurate or incomplete information;
• request deletion of information in certain circumstances;
• request restriction of processing in certain circumstances;
• receive certain information in a portable format and ask for it to be transferred where applicable;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw consent where processing relies on consent; and
• raise a concern with a data-protection regulator.

These rights are not absolute and exemptions may apply. To exercise a right, email support@ayaani.co.uk. Please describe your request and identify the email address or order connected with it. We may request reasonable information to verify identity and protect customer data. We normally respond within one month, subject to any extension or exception permitted by law.

Customers in the United Kingdom can complain to the Information Commissioner's Office. Details are available at ico.org.uk. We would appreciate the opportunity to address the concern first.

Automated processing and profiling

Shopify, payment providers, fraud-prevention services and advertising or analytics providers may use automated systems to assess transactions, detect fraud, protect accounts, personalise services or measure and select advertising. This may include profiling based on device, browsing, purchase or campaign information.

Ayaani does not ordinarily make decisions based solely on automated processing that produce legal or similarly significant effects for customers. Where such processing applies, we will provide any information and safeguards required by law.

Children

Ayaani products and purchasing services are intended for adults. You must be at least 18 years old to place an order. We do not knowingly collect personal information directly from children. A parent or guardian who believes that a child has provided personal information should contact support@ayaani.co.uk.

Third-party websites and services

The website may link to services, social platforms or websites controlled by third parties. Their own terms and privacy policies apply when you use those services. Ayaani is not responsible for the privacy practices of an independent third party, although we remain responsible for our own use of personal information.

Changes to this Privacy Policy

We may update this Privacy Policy when our services, providers, technology or legal obligations change. The updated version will be published here with a revised date. Where required, we will give additional notice of a significant change.

Contact us

For privacy questions or rights requests, contact:

Ayaani Ltd
Email: support@ayaani.co.uk
Registered office: 167–169 Great Portland Street, Fifth Floor, London W1W 5PF, United Kingdom

Please do not send products, returns or parcels to the registered office unless Ayaani has first provided written return instructions and confirmed the correct return address.

Last updated: 14 July 2026.