Who we are

Rida From Madinah is operated by Maria Iqbal, a sole trader trading as "Rida From Madinah", of 34 Davidson Way, Livingston, EH54 8HQ, United Kingdom. For the purposes of UK data protection law, we are the "data controller" of the personal data described in this policy. You can contact us at concierge@ridafromadina.com.

Information we collect

We collect the following categories of personal data:

• Order and contact data: name, email address, phone number, shipping and billing address, and order contents, collected at checkout.
• Account data: if you create an account, your name, email address, phone number, and a securely hashed password.
• Communications: messages you send us via WhatsApp, email, or the site contact form, including any information you choose to share in them.
• Technical data: your approximate location (country, derived from your IP address) used only to show pricing in the right currency, and basic session identifiers stored in cookies.
• Marketing and welcome-offer data: your email address, optional first name, consent and verification timestamps, and any single-use discount code issued when you subscribe, until you unsubscribe.

Payment information

Checkout is processed securely by Stripe, Inc. Rida does not receive or store your full card number, CVC, or other sensitive payment details — Stripe handles and stores that directly under its own privacy and security practices, and is itself a data controller for that payment data. See Stripe's privacy policy at stripe.com/privacy.

How we use your information, and our legal basis

• To fulfil your order (processing payment, shipping, customer support) — necessary to perform our contract with you.
• To send order confirmations, shipping updates, and respond to support requests — necessary to perform our contract with you.
• To send marketing emails (new drops, offers) — only with your consent, given when you subscribe; you can withdraw this at any time.
• To prevent fraud and keep the site secure — our legitimate interest in operating a safe store.
• To meet our legal obligations, such as keeping financial records for tax purposes.

We do not sell your personal data to third parties, and we do not use your data for automated decision-making that produces legal or similarly significant effects on you.

Who we share your data with

We share personal data with the following service providers (data processors), strictly to run the store:

• Stripe — payment processing.
• Resend — sending transactional, email-verification, and requested discount emails.
• Netlify — website hosting, and hosting of our order/customer database.
• Meta (WhatsApp) — if you choose to message us via WhatsApp.
• Google Analytics — optional website usage and ecommerce measurement after you consent.
• Meta Pixel — optional advertising measurement and campaign attribution after you consent.

Some of these providers are based outside the UK, including in the United States. Where that happens, we rely on their standard contractual clauses or equivalent safeguards recognised under UK data protection law to ensure your data remains protected.

Cookies

We use necessary browser storage to operate the store and optional analytics technologies only when you consent:

• A currency preference cookie, so prices display correctly on return visits.
• Your shopping bag, saved in your browser's local storage.
• A login session cookie if you sign in to your account.
• A privacy-choice record so we remember whether you accepted or declined optional analytics.
• Google Analytics and Meta Pixel cookies after consent, used to measure visits, product interactions, checkout activity, purchases, and advertising performance.

Optional analytics and advertising tools remain disabled unless you select "Accept analytics". You can withdraw consent by clearing this site's browser storage and choosing "Decline" when the privacy prompt appears again.

Data retention

We keep order and transaction records for 6 years to meet UK tax and accounting obligations. Account data is kept for as long as your account is active, plus a reasonable period afterward, unless you ask us to delete it sooner and we have no legal reason to retain it. Marketing email addresses are kept until you unsubscribe.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected;
• Ask us to delete your data, where we have no legal reason to keep it;
• Restrict or object to certain processing;
• Receive your data in a portable format;
• Withdraw consent at any time, for anything based on consent (e.g. marketing emails).

To exercise any of these rights, email concierge@ridafromadina.com. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, though we'd appreciate the chance to resolve any concern directly first.

Children's privacy

Rida is not directed at children and we do not knowingly collect information from minors.

Changes to this policy

We may update this policy from time to time. Continued use of the site after changes means you accept the updated policy.

Contact us

Questions about this policy can be sent to concierge@ridafromadina.com.