Privacy policy

Last updated: 26, July, 2026

1. Who we are

RÜYA&CO LIMITED, trading as Ruya&Co, is the controller of the personal information described in this Privacy Policy. We are registered in England and Wales under company number 16001445, with a registered office at 230 Kings Road, Chorlton-cum-Hardy, Manchester, England, M21 0XQ.

Privacy enquiries can be sent to contact@ruyaandco.com.

2. What this policy covers

This policy explains how we collect and use personal information when you visit ruyaandco.com, create an account, place an order, join our mailing list, submit a review, contact us or interact with our services.

3. Personal information we collect

• Contact and identity information, such as your name, email address, telephone number, billing address and delivery address.

• Order and transaction information, such as products viewed or purchased, order value, returns, refunds and customer service history.

• Account information, such as login details, saved preferences and wishlist activity where these features are enabled.

• Payment information processed by our payment providers. We do not receive or store complete payment card details.

• Device and usage information, such as IP address, browser, device type, pages viewed, referral source and interactions with the website.

• Marketing preferences and information about how you engage with emails, advertising or promotional messages.

• Content you provide, including reviews, photographs, messages and customer support enquiries.

4. How we collect information

We collect information directly from you, automatically through cookies and similar technologies, and from service providers or partners that help us operate the store. These may include Shopify, payment providers, Royal Mail, analytics providers, advertising platforms, review tools and customer communication services.

ONLY INCLUDE TOOLS THAT ARE REALLY ACTIVE.]

5. Why we use personal information and our lawful bases

• To process and fulfil orders, take payment, arrange delivery, provide order updates and manage returns - necessary to perform our contract with you.

• To respond to enquiries and provide customer service - necessary for our contract and our legitimate interest in supporting customers.

• To prevent fraud, secure the website and protect our business and customers - our legitimate interests and, where relevant, legal obligations.

• To maintain business, tax and accounting records - compliance with legal obligations.

• To improve products, website performance and customer experience - our legitimate interests, using consent where required for cookies or similar technologies.

• To send marketing by email, SMS or other channels - your consent, or another lawful basis where permitted. You can unsubscribe at any time.

• To personalise advertising and measure marketing performance - consent where required and subject to your cookie choices.

6. Cookies and similar technologies

We use essential cookies to operate the website, keep the basket working, support security and remember privacy choices. With your permission, we may also use analytics, personalisation and advertising cookies. Non-essential cookies should not be activated until valid consent has been collected where the law requires it.

You can manage your choices through the cookie banner or cookie settings link. More detail should be provided in a separate Cookie Policy, including cookie names, providers, purposes and durations.

7. Who we share information with

• Shopify, which hosts and operates the ecommerce platform.

• Payment providers used to authorise and process payments.

• Delivery and fulfilment providers, including Royal Mail, to deliver orders.

• Technology providers that support customer service, email, reviews, analytics, fraud prevention, hosting or website functionality.

• Professional advisers, insurers, regulators, law enforcement or courts where required or reasonably necessary.

• A buyer, investor or successor in connection with a business sale, merger or restructuring, subject to appropriate safeguards.

8. International transfers

Some service providers may process personal information outside the United Kingdom. Where this happens, we use appropriate safeguards required by UK data protection law, such as adequacy regulations or approved contractual protections.

9. How long we keep information

We keep personal information only for as long as needed for the purpose for which it was collected, including to provide services, maintain records, comply with legal obligations, resolve disputes and prevent fraud. Retention periods vary by record type. Marketing information is kept until you unsubscribe or we determine it is no longer needed, subject to any suppression record required to respect your choice.

10. Security

We use reasonable organisational and technical measures designed to protect personal information. No online system is completely secure, so please avoid sending sensitive payment or identity information through unprotected email or social media messages.

11. Your data protection rights

Depending on the circumstances, you may have the right to:

• ask for access to your personal information;

• ask us to correct inaccurate information;

• ask us to delete information;

• ask us to restrict or stop certain processing;

• object to processing based on legitimate interests or direct marketing;

• withdraw consent where processing relies on consent;

• receive certain information in a portable format; and

• complain to the Information Commissioner's Office (ICO).

To exercise a right, contact privacy@ruyaandco.com. We may need to verify your identity before responding. You can also complain to the ICO if you are unhappy with how we have handled your information.

12. Children

Our store is not intended for children to use independently, and we do not knowingly collect personal information from children where parental or guardian consent is required. Contact us if you believe a child has provided personal information to us.

13. Third-party websites

Links to third-party websites or social platforms are governed by those organisations' own privacy notices. We are not responsible for websites we do not control.

14. Changes to this policy

We may update this policy when our services, providers or legal obligations change. We will publish the revised version on this page and update the date at the top.

15. Contact us

Email: contact@ruyaandco.com
Telephone: +44 7745 065667
Postal address: RÜYA&CO LIMITED, 230 Kings Road, Chorlton-cum-Hardy, Manchester, England, M21 0XQ.