Privacy policy

Last Updated: September 7, 2026

GR Enterprises operates the Rawayat London store and website, rawayatlondon.co.uk, including all related information, content, features, tools, products and services provided to customers (the “Services”). Our online store is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how we collect, use, process and disclose your personal information when you visit or use our website, make a purchase or other transaction, create an account, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy will apply.

Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read and understood how your personal information is handled as described below.

Personal Information We Collect or Process

When we use the term “personal information”, we mean information that identifies you or can reasonably be linked to you. It does not include information that has been anonymised or de-identified so that it can no longer reasonably identify you.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact Details: Your name, billing address, shipping address, telephone number and email address.
Financial Information: Payments are securely processed by authorised third-party payment service providers. Rawayat London does not directly store customers’ full payment card details. Payment processing is subject to the terms, conditions and privacy policies of the relevant payment provider.
Account Information: Information associated with your customer account, such as your username or login credentials, preferences and account settings, where applicable.
Transaction Information: Information relating to products you view, add to your cart, purchase, return, exchange or cancel, together with relevant order and transaction information.
Communications: Information you provide when contacting us through email, WhatsApp or other customer-support channels.
Device Information: Information about your device, browser, network connection, IP address and other technical identifiers.
Usage Information: Information about how you access, browse and interact with our website and Services.

Sources of Personal Information

We may collect personal information from the following sources:

Directly from You: When you browse our website, create an account, place an order, contact us, subscribe to communications or otherwise provide information to us.
Automatically through the Services: Certain information may be collected automatically from your device when you use our website, including through cookies and similar technologies.
From Service Providers: We may receive information from service providers that assist us with payment processing, technology, website operation, customer support, fulfilment, logistics or other business functions.
From Business or Marketing Partners: Where applicable, we may receive information from advertising, analytics, e-commerce or marketing partners in accordance with applicable law.

How We Use Your Personal Information

We may use your personal information for the following purposes:

Providing and Improving the Services: To process orders and payments, arrange delivery, manage returns, provide customer accounts where available, maintain our website and improve the customer experience.
Order Fulfilment: To process, pack, dispatch and deliver your purchases and provide relevant information to fulfilment and logistics providers where necessary.
Marketing and Advertising: Subject to applicable law and your communication preferences, we may use your information to send promotional communications and provide or measure advertising relating to our products and Services.
Security and Fraud Prevention: To protect customers, verify transactions where appropriate, detect or prevent fraudulent or unlawful activity and maintain the security of our Services.
Communicating with You: To respond to enquiries, provide customer support, send transactional communications and maintain our relationship with you.
Legal and Regulatory Purposes: To comply with applicable laws, regulatory requirements, legal processes, tax or financial record-keeping requirements and to establish, exercise or defend legal rights.

How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary for legitimate business purposes and in accordance with applicable law.

These parties may include:

Platform and Service Providers: Shopify, IT service providers, authorised third-party payment processors, hosting or cloud service providers and customer-support service providers where necessary to operate and provide the Services.
Fulfilment and Logistics Providers: Courier, logistics, fulfilment and operational partners where necessary to process, pack and deliver customer orders.
Business, Analytics and Marketing Partners: Service providers or partners that help us operate, analyse, advertise or improve our Services, subject to applicable privacy and marketing requirements.
At Your Direction or With Your Consent: Where you request, authorise or consent to the disclosure of your information, including where you interact with third-party or social-media services.
Legal Authorities and Business Transactions: Where disclosure is required by applicable law, legal process or regulatory authority, to protect our legal rights or those of others, or in connection with a legitimate corporate restructuring, sale, transfer or similar business transaction.

Relationship with Shopify

Our online store is powered by Shopify. Shopify may collect and process personal information relating to your access to and use of the Services in order to provide and improve its services.

Information you submit through our store may therefore be transmitted to and processed by Shopify and relevant service providers, including providers that may operate outside your country of residence.

Shopify may process certain information in accordance with its own privacy practices. You can learn more by reviewing the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

Cookies and Similar Technologies

Our website and the services that support it may use cookies and similar technologies to operate the website, remember preferences, understand website usage, improve performance, support security and, where permitted, provide or measure advertising.

Where required by applicable law, we will seek consent before using non-essential cookies or similar technologies.

You may be able to control certain cookies through your browser settings and any cookie-preference tools made available through our website. Disabling certain cookies may affect the functionality or performance of some parts of the Services.

Third-Party Websites and Links

Our Services may contain links to third-party websites, platforms or services.

We do not control and are not responsible for the privacy, security or content practices of third parties. We encourage you to review the privacy policies of third-party services before providing them with personal information.

Information you choose to post or disclose through public or semi-public platforms, including social-media services, may be visible to other users and should be shared with appropriate care.

Children's Privacy

The Services are not intended for children, and we do not knowingly collect personal information from children in circumstances where such collection would be prohibited by applicable law.

If you are a parent or guardian and believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and, where appropriate, take steps to delete the information.

We do not knowingly sell or share the personal information of individuals under the age of 16 for purposes prohibited by applicable law.

Security of Your Information

We take reasonable administrative, technical and organisational measures designed to protect personal information.

However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure. You should therefore take appropriate care when providing information online.

Retention of Personal Information

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing the Services, fulfilling orders, maintaining appropriate business and transaction records, resolving disputes and complying with legal, tax, accounting or regulatory obligations.

The appropriate retention period may vary depending on the nature of the information, why it was collected and applicable legal requirements.

International Data Transfers

Because Rawayat London operates using service, operational and fulfilment arrangements that may involve the United Kingdom, Pakistan and other countries in which our service providers operate, personal information may be processed outside your country of residence.

For example, information reasonably necessary to fulfil an order, such as customer contact and delivery information, may be processed by our operational, fulfilment or logistics partners.

Where personal information is transferred internationally, we take appropriate steps to ensure that such transfers are handled in accordance with applicable data-protection laws.

Your Rights and Choices

Depending on your location and applicable law, including UK data-protection law where relevant, you may have certain rights regarding your personal information.

These may include:

Right of Access: You may request information about the personal data we hold about you and, where applicable, obtain a copy.
Right to Correction: You may request correction of inaccurate or incomplete personal information.
Right to Deletion: You may request deletion of personal information in certain circumstances, subject to legal, regulatory and record-keeping requirements.
Right to Data Portability: Where applicable, you may request certain personal information in a portable format or request its transfer as permitted by law.
Right to Object or Restrict Processing: In certain circumstances, you may object to or request restriction of particular processing activities.
Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing undertaken before consent was withdrawn.
Marketing Preferences: You may unsubscribe from promotional emails using the unsubscribe option included in our marketing communications. Transactional communications relating to your orders or customer service may still be sent where necessary.

We will not unlawfully discriminate against you for exercising your applicable privacy rights.

We may need to verify your identity before responding to certain requests in order to protect your personal information.

Complaints

If you have a concern or complaint about how we handle your personal information, please contact us first so that we can review and respond to your concern.

If you are located in the United Kingdom and are dissatisfied with our response, you may also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or another competent supervisory authority.

Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes to our practices, Services, legal requirements or other operational circumstances.

When we make changes, we may update the “Last Updated” date at the top of this Privacy Policy. Where required by law, we will provide additional notice of material changes.