PRIVACY POLICY

WHAT WE LOOK FOR

Cara Jewellers (“us”, “we”) takes the protection of your online privacy seriously and this Privacy Policy sets out how we use and protect any personal information we obtain from dealings which arise from you using this website. Cara Jewellers is not responsible for the privacy practices of any websites which may be linked from the Cara Jewellers website, so please check these separately.

We may change this Privacy Policy from time to time by updating this page so please check our Privacy Policy for any changes when you revisit our website.

WHAT PERSONAL INFORMATION DO WE COLLECT?

We ask for your personal information for instances including but not limited to making a purchase, register, sign up for promotions, offers or competitions, or to receive news submitting user-generated reviews or ratings, engaging in any social media functions on our services. Depending on which of these services you use, even if you do not complete your purchase, we may collect:

Information you give us

• Personal identification information such as your name, date of birth, and gender;
• Contact information such as email address and telephone number;
• Demographic information, such as postal address;
• Financial information, such as credit/debit card numbers;
• Your purchase history;
• If you have completed a survey or entered a competition with us;
• If you contact us by phone, email or otherwise, we will keep a record of that correspondence; and
• Your marketing preferences, including any consents you have given us when you subscribe to our newsletter or set up an online account.

Information you provide if you report a problem with our website

Information we collect automatically

• Information related to the browser, device, or operating system you use to access our Services;
• Your I.P. address, the website you came from, information on actions taken on our Services including but not limited to pages viewed, dated and times of visits, time spent on each page, products viewed, clicked on, added to your basket and purchased.

Information we receive from third parties

Sometimes we receive personal data about you from third parties when you engage with our Services through social media, or other non-Cara Jewellers FZCO sites or applications, those sites will share personal data with us including, but not limited to:

• The content you have viewed or interacted with;
• About adverts within the content which you have been shown or clicked on;
• Your I.P. address, registered beacons or GPS (geo location) signals you have received;
• Publicly available information; and
• Non-personal information used to supplement existing information, such as demographics and affluence metrics (e.g. social-demographic groupings through matching postcodes).

The privacy notices for these sites and applications will contain more detail about this and how to change your privacy settings on those sites and applications.

HOW DO WE USE THIS INFORMATION, AND WHAT IS THE LEGAL BASIS FOR THIS USE?

We process your personal data for the following purposes:

To fulfil a contract, or take steps linked to a contract including fulfilling any orders you place

This includes:

• Processing your order, registration for the Services, or entry to a competition;
• Providing the Services, to communicate with you about them or your account with us;
• Communicating with you (including by email and SMS) and providing our customer services;
• Verifying your identity, and sending you information about changes to our terms or policies.

To conduct our business and pursue our legitimate interests

In particular:

• We will use your personal data to provide the products and Services you have requested and respond to any comments or complaints you may send us;
• We monitor use of our Services, and use your personal data to help us monitor, improve and protect our products, content, Services and websites, both online and offline;
• We use your personal data to personalize our products and Services for you;
• To prevent, investigate, and/or report fraud, misrepresentation, security incidents, or crime in accordance with applicable law;
• We use the information you provide to investigate any complaints received from you or from others about our website or our products or services;
• We will use data in connection with legal claims, compliance, regulatory and investigative purposes as necessary, including disclosure of such information in connection with legal process or litigation.

Where you give us your consent

We will use your personal data:

• To send you newsletters and other promotional material about our Services and to use technologies to check if these have been received and opened to help make our communications relevant to you;
• To place cookies and use similar tracking technologies to personalise content and advertising for you and to make our content function better;
• To invite you to take part in market research, where consent is required; and
• On other occasions where we ask you for consent, we will use the data for the purpose which we explain at that time.

For purposes which are required by law

• In response to requests by government or law enforcement authorities conducting an investigation.

WHO WILL WE SHARE THIS DATA WITH, WHERE AND WHEN?

With your consent, where required, we share your personal data with trusted third-party service providers, suppliers, affiliates, divisions, partners, sponsors, agents and representatives we have engaged to perform business-related functions on our behalf. For example, to:

1. Conduct research and analytics;
2. Create content;
3. Provide customer support services;
4. Conduct or support marketing;
5. Fulfil orders;
6. Handle payments;
7. Host Services;
8. Administer contests; and
9. Maintain databases.

In all cases, the third party is acting on Cara Jewellers’ express instructions and in accordance with this Policy, confidentiality and levels of security.

Without your consent, we share your personal data:

• With third-party platforms such as Facebook or Google to send you targeted advertisements on our behalf;
• In response to legal process, for example, in response to a court order or a subpoena, a law enforcement or government agency’s request;
• With third parties if this will help us to enforce our policies and terms of use, to check for potential illegal activity, such as copyright infringement or fraud, or to protect the safety of other users of the Services; and
• If we, or one of our business units, undergoes a business transition, like a merger, acquisition by another company, or sale of all or part of our assets.

HOW LONG WILL WE RETAIN YOUR DATA?

Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this, to allow us to implement your requests. We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.

Data from both primary and backup servers can be purged within 30 days in case of Client request.

WHAT RIGHTS DO I HAVE?

You have the right to ask us for a copy of your personal data; to correct, delete or restrict (stop any active) processing of your personal data; to obtain the personal data you provide to us for a contract or with your consent in a structured, machine-readable format; and to ask us to share (port) this data to another controller.

You can object to the processing of your personal data in some circumstances, in particular where we do not have to process the data to meet a contractual or other legal requirement, or where we are using the data for direct marketing.

These rights may be limited, for example if fulfilling your request would reveal personal data about another person, where they would infringe the rights of a third party, including our rights, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. We will inform you of relevant exemptions we rely upon when responding to any request you make.

To exercise any of these rights, or to obtain other information, such as a copy of a legitimate interests balancing test, you can get in touch with us using the details set out below. If you have unresolved concerns, you have the right to complain to an E.U. data protection authority where you live, work or where you believe a breach may have occurred.

Where we require your personal data to comply with legal or contractual obligations, provision of such data is mandatory. If such data is not provided, then we will not be able to manage our contractual relationship with you or meet obligations placed on us.

WITHDRAWING CONSENT OR OTHERWISE OBJECTING TO DIRECT MARKETING

Wherever we rely on your consent, you will always be able to withdraw that consent, although we may have other legal grounds for processing your data for other purposes, such as those set out above. In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests.

You have an absolute right to opt out of direct marketing we carry out at any time. You can do this by clicking on the unsubscribe link at the bottom of our emails or by contacting us using the details set out below.

SECURITY MEASURES

We have put in place physical, electronic, and managerial procedures designed to help prevent unauthorised access, maintain data security, and correctly use the personal data we collect online. These safeguards vary based on the sensitivity of the personal data that we collect and store.

Although we take appropriate measures to safeguard against unauthorised disclosures of personal data, we cannot assure you that your personal data will never be disclosed, altered or destroyed in a manner that is inconsistent with this privacy notice.

CHILDREN’S PRIVACY

Our Services do not target and are not intended to attract children under the age of 16. We do not knowingly solicit personal data from children under the age of 16 or send them requests for personal information.

WHO IS THE DATA CONTROLLER?

The data controller for your information is Cara Jewellers FZCO which you have a relationship with or which manages the website you have visited.

If you have any concerns about how we process your data, or would like to opt out of direct marketing, you can get in touch at marketing@cara.ae or by writing to:

Cara Jewellers FZCO

2008, Building 2

Gold and Diamond Park

Sheikh Zayed Road

P.O. Box 117973

Dubai, UAE

We hope that we can satisfy any queries you may have about the way we process your data.

This Privacy Policy was updated in July 2020.