logo
search

Help Center

Browse FAQs, Shipping & Returns, Privacy Policies, and Terms & Conditions from one central place.

Privacy & Cookies Policy

How we collect, use, store, and protect your personal information.

1. Introduction

We are committed to protecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website and services.

This policy applies when we act as the data controller, meaning we decide why and how your information is processed.

We use cookies to operate and improve your experience on our website. Where required, we will request your consent when you first visit our site.

"Riwaya", "we", "us", and "our" refer to the Riwaya team operating the platform.

2. The Personal Data We Collect

We collect the following categories of personal data:

2.1 Contact Data

Information that allows us to contact you, such as your name, email address, phone number, postal address, or social media handles.

2.2 Account Data

Information connected to your website account, including your login details, profile information, business name, settings, and marketing preferences.

2.3 Customer Relationship Data

Information used to manage our relationship with you (or your business), including communications, classification in our CRM system, and support history.

2.4 Transaction Data

Information relating to purchases made through the platform, including contact details, billing information, and transaction records. Payment details are processed by our payment providers.

2.5 Communication Data

Any messages or correspondence sent between you and Riwaya, including metadata generated by our contact forms.

2.6 Usage Data

Information about how you navigate and interact with the site, such as IP address, device type, location, browser version, page views, time spent, and site navigation patterns. This is collected through analytics tools.

3. How and Why We Use Your Data

We process your personal data for the following purposes:

3.1 Operating the Platform

To run the website, process orders, manage payments, and deliver services.

Legal basis: Legitimate interests.

3.2 Publishing Seller Content

To publish seller profiles or product information when explicitly requested.

Legal basis: Consent.

3.3 Customer Support & Communication

To communicate, manage relationships, and handle enquiries or complaints.

Legal basis: Legitimate interests.

3.4 Personalisation

To personalise content, recommendations, and experiences.

Legal basis: Legitimate interests.

3.5 Direct Marketing

To send marketing updates and offers, where permitted.

Legal basis: Legitimate interests. You may opt out at any time.

3.6 Analytics & Improvements

To understand user interaction and improve performance.

Legal basis: Legitimate interests or consent (depending on the tool used).

3.7 Record Keeping

To maintain accurate business and support records.

Legal basis: Legitimate interests.

3.8 Security & Fraud Prevention

To protect the platform, users, and business from fraud or misuse.

Legal basis: Legitimate interests.

3.9 Insurance & Risk Management

To manage risks and obtain legal or professional advice.

Legal basis: Legitimate interests.

3.10 Legal Claims

To establish, exercise, or defend legal claims.

Legal basis: Legitimate interests.

3.11 Legal Obligations & Vital Interests

To comply with laws or protect someone's vital interests.

Legal basis: Legal obligation.

4. Sharing Your Data

We may share your data with:

  • Companies within our group (where applicable)
  • Professional advisers or insurers
  • Payment service providers (for payments, refunds, and fraud checks)
  • Selected third-party sellers when you enquire about their products
  • Authorities where legally required

Each third party acts as its own data controller and will provide their own privacy policy.

5. Data Retention

We only retain your personal data for as long as necessary to fulfil the purposes outlined in this policy.

Data Type
Retention Period
Order history
7 years (tax/accounting)
Marketing consent
Until withdrawn
Account data
Until account deletion
Support communications
3 years after resolution

We may retain data longer if required by law.

6. Security

We take appropriate technical and organisational measures to protect your data.

  • Data is stored on secure servers and devices.
  • Sensitive information (e.g., names, contact info, passwords, card data) is encrypted.
  • Website interactions involving payments or enquiries are encrypted.

You are responsible for keeping your account password secure.

7. Your Rights

Under data protection law, you have the following rights:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data.
  • Right to restrict processing: Limit how we use your data.
  • Right to object: Object to processing or direct marketing.
  • Right to data portability: Receive your data in a portable format.
  • Right to complain: Lodge a complaint with your data protection authority.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please submit a written request through our contact form or email us directly.

8. Updating Personal Information

It is important that the personal data we hold about you is accurate and up to date. Please keep us informed if your personal information changes during your relationship with us. You can update your account details at any time by logging into your account settings.

9. What Are Cookies?

Cookies are small text files placed on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and understanding how you use our platform.

10. Cookies Riwaya Uses

We use the following types of cookies:

  • Authentication cookies: To keep you logged in during your session.
  • Shopping cart cookies: To remember items you've added to your basket.
  • Security cookies: To detect and prevent fraudulent activity.
  • Analytics cookies: To understand how visitors use our site and improve performance.
  • Advertising cookies: To show relevant ads and measure campaign effectiveness.
  • Consent cookies: To remember your cookie preferences.

11. Cookies Used by Service Providers

We use third-party services that may set cookies on your device:

  • Google Analytics: To analyse website traffic and user behaviour.
  • Google AdSense: To deliver personalised advertising.
  • Payment processors: To securely process transactions.

These service providers have their own privacy policies governing how they use cookies.

12. Managing Cookies

You can control and manage cookies through your browser settings. Here are links to popular browsers:

13. Cookie Preferences and Consent

When you first visit our website, we'll ask for your consent to use non-essential cookies. You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website.

14. Amendments

We may update this privacy policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make significant changes, we will notify you by email or through a prominent notice on our website. Please review this policy periodically to stay informed about how we protect your information.

15. Contact Details

Riwaya owns and operates this website. If you have any questions about this privacy policy or how we handle your personal data, please contact us: