Privacy Policy

Last updated: 8 November 2026

This policy explains how Mustafa Jewellers Limited uses your personal information when you use this website, buy from us or sell to us.

1. Who is responsible for your information

Mustafa Jewellers Limited (company number 09218034), 171 Dunstable Road, Luton, LU1 1BT, is the controller of your personal information. You can call us on 01582 948298, or use the details on our Contact page.

2. What we collect

Orders: your name, address, phone number, email, what you bought and how you paid. We do not see or store your full card number.
Accounts: your name, email, phone number and a protected password.
Identity checks: the result of the check, your verified name, the date and a reference. Your ID images and selfie are handled by Stripe, and we do not receive them.
Selling gold or collecting an order: details from the photo ID and proof of address that you show us.
Enquiries: what you send us, and our replies.
Newsletter: your email address, if you sign up.
Zakat calculator: your email address, if you ask us to email your result.
Technical information: your IP address and browser details, in our website’s security and server logs.

3. Why we use it, and our legal reasons

To take, deliver and support your order and manage your account: to perform our contract with you.
To keep accounting and tax records and meet other legal duties: because the law requires it.
To prevent fraud and stolen goods, and to keep our website secure: our legitimate interests in protecting our customers and business, and legal duties where they apply.
To send our newsletter: your consent. You can stop at any time by contacting us.

4. Identity checks with Stripe

For delivery orders above the amount shown at checkout, we may ask you to verify your identity before paying. Stripe Identity asks for a photo of your ID and a selfie, and compares your face with the photo. This involves biometric data, so we only do it with your explicit consent, which you give at checkout. You can refuse and choose collection instead, showing photo ID in our shop. Stripe tells us whether the check succeeded and the verified name. We keep that result with your order. Stripe’s handling of your images is explained in the Stripe Privacy Policy.

Stripe: card and wallet payments, fraud prevention and identity checks.
Delivery companies: to deliver your order.
Hostinger: hosts this website and provides website tools.
Google: shows a map if you choose to open one on our website. We also connect our own Google Business Profile to show our Google rating and total number of reviews. This does not use any information about you.
Professional advisers, and authorities such as HMRC and the police, where the law requires it or to prevent crime.

We do not sell your personal information. Some of these companies process information outside the UK. Where they do, the transfer is protected by safeguards allowed under UK data protection law.

6. How long we keep it

Orders, invoices and sales: at least 6 years, for tax and accounting.
Identity check results and records of gold bought from customers: for as long as we need them to prevent fraud and meet legal duties, normally 6 years.
Accounts: until you ask us to delete yours. Sales records are kept as above.
Newsletter: until you ask us to stop.

7. Your rights

You can ask to see, correct or delete your information, ask us to limit or stop using it, ask for a copy to move elsewhere, and withdraw your consent at any time. Some information must be kept by law. To use your rights, please use the details on our Contact page.

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

8. Cookies and similar technologies

Cookies are small files saved by your browser. We use them as follows:

Shopping bag and checkout (WooCommerce): remember your bag and keep your order secure. These are essential.
Signing in (WordPress): keep you signed in to your account. These are essential.
Secure payments (Stripe): used at checkout to take payment and prevent fraud. These are essential.
Google Maps: our maps stay switched off until you press “Show map”. If you do, Google may set its own cookies.

Your browser also remembers your chosen currency and your saved “My List” items on your own device. These are not sent to us unless you share your list. You can block or delete cookies in your browser settings, but the bag and checkout will not work without the essential ones.

9. Children

Our website and services are for adults. We do not knowingly collect information from anyone under 18.

10. Changes

We may update this policy, and will show the date of the latest version at the top of this page.

Please also see our Terms & Conditions.