Privacy policy

Last updated: 4 May 2026

About this policy

This Privacy Policy explains how Abiza (UK) Ltd ("we", "us", "our") collects, uses, shares and protects your personal data when you visit abiza.co.uk, place an order, sign up for marketing, leave a review or otherwise interact with us.

We are the "data controller" for the personal data we hold about you. That means we are responsible for how it's looked after.

Company: Abiza (UK) Ltd, trading as Abiza
Registered office: 31 Hough Green, Chester, CH4 8JQ, United Kingdom
Company number: 07755032
VAT number: GB264108812
ICO registration number: ZB133846
Email for privacy queries: info@abiza.co.uk

What information we collect

Depending on how you interact with us, we may collect:

Identity and contact data: name, billing and delivery address, email address, phone number.
Order and personalisation data: the items you've bought, personalisation details you've supplied (initials, names, dates, photos, handwriting samples, paw prints), order history and any custom requests.
Payment data: we don't store full card details on our servers — payment is handled directly by our payment providers. We hold the last four digits of your card, the card type and the transaction reference for our records.
Account data: if you create an account on abiza.co.uk, your login credentials, saved addresses, order history and any preferences you've set.
Communications: the contents of emails, contact form submissions, social media messages and reviews you send to us.
Technical and usage data: IP address, browser type, device, operating system, pages viewed, referring URL, time on site and similar information collected through cookies and analytics tools.
Marketing preferences: whether you've opted in to marketing emails or SMS, and your interactions with our campaigns.

How we collect your information

Directly from you — when you place an order, create an account, contact us, sign up for our newsletter, leave a review or send a message via social media.
Automatically — when you use the website, through cookies, server logs and analytics tools.
From third parties — including our payment processors (for fraud and identity checks), Royal Mail (for delivery updates) and our review partner Judge.me.

Why we collect it and how we use it (lawful basis)

Under UK GDPR, we must have a lawful basis for using your personal data. Here is what we use it for and why we're allowed to:

To process and fulfil your orders — including taking payment, arranging delivery and dealing with returns. Lawful basis: performance of a contract.
To answer your questions and provide customer service. Lawful basis: performance of a contract or our legitimate interest in supporting our customers.
To make our jewellery — including personalised pieces. Personalisation details are stored only as long as needed to make and check the item, plus a reasonable record retention period. Lawful basis: performance of a contract.
To manage your account if you choose to register one — including login, saved addresses, order history and preferences. Lawful basis: performance of a contract.
To request and publish reviews. A review request is sent automatically by Judge.me a couple of weeks after your order arrives. Lawful basis: legitimate interest in collecting honest customer feedback. You can unsubscribe from review requests at any time.
To send you marketing emails or SMS about new collections, restocks and offers. Lawful basis: your consent (when you sign up) or our legitimate interest in marketing similar items to existing customers (the "soft opt-in"). You can unsubscribe at any time using the link in any email or by replying STOP to any SMS.
To improve the website, our products and our marketing — using analytics and aggregated insight. Lawful basis: legitimate interest in improving our business.
To prevent fraud, abuse and chargebacks. Lawful basis: legitimate interest in protecting our business and our customers.
To meet our legal and tax obligations — including keeping accounting records. Lawful basis: legal obligation.

Who we share your information with

We only share your data with the suppliers and partners we genuinely need to in order to run our business. We do not sell your data to anyone, ever.

Shopify — our ecommerce platform, which hosts the site, processes orders and handles our transactional and marketing emails.
Shopify Payments and PayPal — our payment processors.
Royal Mail and equivalent international carriers — for fulfilment and delivery.
Judge.me — our review partner, who emails you a couple of weeks after delivery to invite a review.
Google (Analytics, Tag Manager), Meta (Facebook/Instagram Pixel) and TikTok Pixel — for analytics and advertising. Cookies and similar technologies are explained in the section below.
Our accountants, advisors and HMRC — for tax, accounting and regulatory purposes.
Law enforcement and authorities — only when we are legally required to.

We have written agreements in place with our suppliers requiring them to protect your data and only use it for the purposes we've agreed.

International data transfers

Some of the suppliers above are based outside the United Kingdom — typically in the European Economic Area or the United States. Where your data is transferred internationally, we rely on UK GDPR-approved safeguards such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or transfers to countries the UK has assessed as offering adequate protection. You can ask us for more detail by emailing info@abiza.co.uk.

Cookies and similar technologies

Like most websites, abiza.co.uk uses cookies — small text files stored on your device — and similar technologies to make the site work, remember your preferences, measure how the site is used, and personalise advertising.

We use four broad categories:

Strictly necessary cookies that make the site work (cart, checkout, login). These don't need consent.
Functional cookies that remember your preferences (currency, recently viewed items).
Analytics cookies (e.g. Google Analytics) that help us understand how the site is used so we can improve it.
Marketing cookies (e.g. Meta Pixel, TikTok Pixel, Google Ads) that help us show relevant advertising on other websites and measure the effectiveness of campaigns.

You can accept, reject or manage cookies using the cookie banner that appears the first time you visit the site, and you can change your choice at any time using the cookie settings link in our footer. You can also block or delete cookies through your browser settings.

Marketing communications

We'll only send you marketing emails or SMS where you've opted in, or where you've bought something similar from us before and we're allowed to under the "soft opt-in" rules in UK direct marketing regulations.

You can unsubscribe at any time:

by clicking the "unsubscribe" link at the bottom of any marketing email;
by replying STOP to any marketing SMS;
or by emailing info@abiza.co.uk.

Even if you unsubscribe from marketing, we'll still send you transactional emails about orders you've placed (order confirmations, dispatch notifications, delivery updates).

How long we keep your information

We keep your data only for as long as we genuinely need it:

Order records: 7 years after the order, to meet UK accounting and tax requirements.
Personalisation files (custom photos, handwriting, paw prints): typically 6 months after the order, then deleted.
Account data: for as long as your account is active. If you ask us to close the account, we delete it within 30 days, except where we need to keep order records for tax purposes.
Marketing data: until you unsubscribe, then we retain only a minimal record (your email and an unsubscribed flag) so we don't accidentally email you again.
Customer service emails: 3 years after the last contact.

Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances (also known as the "right to be forgotten").
Restrict how we use your data in certain circumstances.
Object to our use of your data — including for direct marketing, where you have an absolute right to object.
Portability — receive your data in a structured, commonly used, machine-readable format and ask us to transfer it to another controller.
Withdraw consent at any time, where consent is the basis we rely on.

To exercise any of these rights, email info@abiza.co.uk. We'll respond within one calendar month and may ask you to verify your identity. There's normally no charge.

Children's data

Our website and products are not directed at children under 16. We don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with their data, please email info@abiza.co.uk and we'll delete it.

Security

We use industry-standard technical and organisational measures to protect your data — including HTTPS encryption across the site, encrypted payment processing, restricted internal access to personal data, and reputable third-party suppliers with their own security obligations. No system is 100% secure, but we take it seriously.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always the one published on this page, with the "Last updated" date at the top. Material changes will be communicated to you by email where appropriate.

How to complain

If you're not happy with how we've handled your data, please tell us first by emailing info@abiza.co.uk. We'll always try to put it right.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO):

Website: ico.org.uk/make-a-complaint
Helpline: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Contact us

For any privacy-related questions, please email info@abiza.co.uk or write to us at: Abiza (UK) Ltd, 31 Hough Green, Chester, CH4 8JQ, United Kingdom.

Currency