Privacy Policy

When we use the term “personal information,” we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified. We may collect or process the following categories of personal information:

• ◆

  Contact Details: Name, billing address, shipping address, phone number, and email address.

• ◆

  Financial Information: Credit card, debit card, financial account numbers, transaction details, form of payment, and payment confirmation. (Note: We use secure third-party payment gateways and do not store raw credit card data on our own servers).

• ◆

  Account Information: Username, password, security questions, preferences, and settings.

• ◆

  Transaction Information: Items you view, put in your cart, add to your wishlist, purchase, return, exchange, or cancel, as well as past transaction history.

• ◆

  Communications: Information included in communications with us, such as customer support inquiries.

• ◆

  Device Information: Information about your device, browser, network connection, IP address, and other unique identifiers.

• ◆

  Usage Information: Details regarding your interaction with the Services, including how and when you navigate our website.

We collect personal information from the following sources:

• ◆

  Directly from You: When you create an account, make a purchase, or communicate with us.

• ◆

  Automatically: From your device when you use our products or visit our Next.js front-end, through the use of cookies, API calls to our backend, and similar technologies.

• ◆

  From Service Providers: When we engage third parties (such as WooCommerce hosting providers, payment processors, and analytics platforms) who process data on our behalf.

• ◆

  From Partners: Or other trusted third parties.

We may use personal information for the following purposes:

• ◆

  Provide, Tailor, and Improve the Services: To process payments, fulfil orders, manage your account, arrange shipping, facilitate returns, and remember your preferences.

• ◆

  Marketing and Advertising: To send promotional communications and show online advertisements based on your activity, subject to your consent where required by law.

• ◆

  Security and Fraud Prevention: To authenticate your account, ensure secure checkouts, and detect or investigate fraudulent or malicious activity.

• ◆

  Communicating with You: To provide responsive customer support and maintain our business relationship.

• ◆

  Legal Obligations: To comply with applicable UK laws, respond to legal processes, or enforce our terms and policies.

We may disclose your personal information to third parties for legitimate purposes, including:

• ◆

  Service Providers: Vendors operating our WooCommerce backend, payment processors, IT management, data analytics, and shipping partners.

• ◆

  Marketing Partners: To provide marketing services and relevant advertising.

• ◆

  With Your Consent: When you direct us to disclose information, such as using social media logins or specific integrations.

• ◆

  Corporate Restructuring: In connection with a business transaction like a merger.

• ◆

  Legal Requirements: To comply with legal obligations, enforce our Terms of Service, and protect the rights of Taha Gold and our users.

The Services are built using a custom Next.js frontend connected to a WordPress/WooCommerce backend. Information you submit to the Services will be transmitted to and securely processed by our WooCommerce infrastructure. We utilise specific plugins and third-party gateways to process orders and improve site functionality. These infrastructure partners process your data solely to provide the Services to you and are bound by strict data processing agreements.

Our site may contain links to third-party platforms. We do not guarantee and are not responsible for the privacy or security of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

The Services are not intended for children. We do not knowingly collect personal information from individuals under the age of majority in the UK. If you believe a child has provided us with personal data, please contact us to request its deletion.

While we implement robust security protocols across our Next.js and WooCommerce architecture, no system is completely impenetrable. We retain your personal information only as long as necessary to maintain your account, fulfil orders, comply with legal obligations, and resolve disputes.

As a resident of the UK (or EEA), under the UK GDPR, you have the following rights regarding your personal information:

• ◆

  Right to Access: Request a copy of the personal data we hold about you.

• ◆

  Right to Deletion: Request the erasure of your personal data.

• ◆

  Right to Correction: Request the correction of inaccurate data.

• ◆

  Right to Portability: Request the transfer of your data to another party.

• ◆

  Right to Object / Restrict: Ask us to stop or restrict processing for certain purposes (like direct marketing).

• ◆

  Right to Withdraw Consent: Withdraw your consent where we previously relied on it to process your data.

To exercise these rights, please contact us using the details below. We may need to verify your identity before processing your request.

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the UK’s supervisory authority, the Information Commissioner’s Office (ICO), at www.ico.org.uk.

If we transfer your personal information outside of the UK or the European Economic Area (e.g., if a server or service provider is located elsewhere), we will ensure it is protected by relying on recognised transfer mechanisms, such as the UK’s International Data Transfer Agreement (IDTA) or the European Commission’s Standard Contractual Clauses.

We may update this Privacy Policy periodically to reflect changes in our tech stack, legal requirements, or business practices. We will post the revised policy here and update the “Last Updated” date.