Privacy Policy

1. Who We Are

Ridha is a London-based modest fashion brand. This policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect the following personal data:

• Name and email address (when you subscribe, place an order, or contact us)
• Delivery address and phone number (when you place an order)
• Payment information (processed securely through Stripe; we do not store card details)
• Messages you send through our contact form
• Browsing data via essential cookies

3. How We Use Your Data

• To process and fulfil your orders
• To respond to your enquiries
• To send you newsletter updates (only with your consent)
• To improve our website and services

4. Legal Basis

We process your data based on: consent (newsletter), contract (order fulfilment), and legitimate interest (website improvement and security).

5. Data Sharing

We do not sell your data. We share information only with: Stripe (payment processing), Royal Mail or courier services (delivery), and our hosting provider (website operation).

6. Data Retention

Order data is retained for 6 years for legal and accounting purposes. Newsletter subscriptions are kept until you unsubscribe. Contact form submissions are retained for 12 months.

7. Your Rights

Under UK GDPR, you have the right to access, rectify, erase, restrict processing of, and port your data. You also have the right to object to processing and withdraw consent at any time.

To exercise these rights, email us at [email protected].

8. Cookies

We use essential cookies to ensure the website functions correctly (e.g., shopping basket, session management). We do not use tracking or advertising cookies.

9. Contact

For any privacy-related queries, contact us at [email protected].