Privacy policy
Privacy Policy
Last Updated: September 1, 2026
1. INTRODUCTION
Welcome to Lou Fine Jewels ("we", "us", "our", or the "Store"). This Privacy Policy explains how Lou Fine Jewels
collects, uses, stores, discloses, and otherwise processes personal data when you visit our website, create an
account, place an order, contact us, or otherwise interact with our Store.
Lou Fine Jewels operates this website, including all related information, content, features, tools, products, and
services (the "Services"), to provide you with a curated shopping experience. Our Services are powered by
Shopify Inc., which enables us to run our online store and provide the Services to you — see Section 8 below
for more on this relationship.
We are committed to protecting your privacy and handling your personal data in accordance with the
applicable laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law
(PDPL), its Implementing Regulations, the Regulation on Personal Data Transfer Outside the Kingdom, and
applicable provisions of the Saudi E-Commerce Law.
This Privacy Policy is intended to provide you with the information required under applicable Saudi data-
protection legislation and to explain your rights and how you may exercise them.
If there is a conflict between our Terms and Conditions and this Privacy Policy with respect to the collection,
processing, or disclosure of your personal data, this Privacy Policy will control.
2. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
The entity responsible for processing your personal data is:
Legal Name: Lou Fine Jewels
Trade Name: Lou Fine Jewels
Commercial Registration No.: 7054628511
VAT Registration No.: Not currently registered
Email: support@loufinejewels.com
Website: loufinejewels.com
For purposes of the Saudi PDPL, we generally act as the Controller of the personal data collected through our
Store.
3. PERSONAL DATA WE COLLECT
Depending on how you interact with our Store, we may collect the following categories of personal data:
A. Information you provide to us
• Full name
• Email address
• Telephone/mobile number
• Billing and delivery address• Account login information
• Order and purchase history
• Customer-service communications
• Any other information you voluntarily provide to us
B. Payment information
When you make a purchase, payment information may be collected and processed by our payment service
provider(s). Where applicable, we may receive limited payment-related information necessary to identify and
process your transaction, such as transaction references, payment status, or the last digits of a payment card.
We do not intend to store complete payment-card details on our own systems where payment processing is
handled by a third-party payment provider.
C. Information collected automatically
When you visit our website, certain technical information may be collected automatically, including:
• IP address
• Browser type and version
• Device type and operating system
• Website pages visited, and date and time of visits
• Referring website
• General website usage information
• Cookies and similar technologies
We only collect and process such information to the extent permitted by applicable law and as necessary for
the purposes described in this Privacy Policy.
4. HOW WE COLLECT YOUR PERSONAL DATA
We may collect personal data:
• Directly from you when you place an order;
• When you create or use an account;
• When you subscribe to communications;
• When you contact customer service;
• Automatically through your use of our website; and
• From third-party service providers involved in providing services to you, where legally permitted.
We aim to collect only the personal data that is necessary and relevant for the purposes for which it is collected,
consistent with Saudi privacy guidance on data minimization.
5. WHY WE PROCESS YOUR PERSONAL DATA
We may process your personal data for the following purposes:
A. Processing and fulfilling orders
• Processing purchases, confirming orders, and processing payments;
• Preparing, producing, and delivering your made-to-order piece;• Providing order and production updates;
• Managing damage or defect claims and refunds; and
• Providing customer support.
B. Managing your account
Where applicable, we may use your information to create and maintain your account, authenticate your
account, and maintain your order history.
C. Communicating with you
We may use your information to respond to enquiries, provide customer service, and communicate with you
about your order.
D. Operating and improving our website
We may process technical and usage information to maintain website security, detect and prevent fraud or
misuse, troubleshoot technical issues, analyze website performance, and improve our products and services.
E. Legal and regulatory obligations
We may process or retain personal data where necessary to comply with applicable Saudi laws, regulations,
legal obligations, court orders, governmental requirements, accounting requirements, or other lawful
obligations.
F. Marketing
We may use your personal data for direct marketing only where permitted by applicable law and, where
required, after obtaining the necessary consent. You will be provided with a clear and straightforward
mechanism to stop receiving marketing communications. Under the Saudi Implementing Regulations, direct
marketing requires consent, recipients must have an easy mechanism to stop receiving marketing material,
and once consent is withdrawn, marketing must stop without undue delay.
6. LEGAL BASIS FOR PROCESSING
Depending on the circumstances, we may process your personal data on one or more lawful bases permitted
under Saudi law, including:
• Processing necessary to perform an agreement or fulfill an order with you;
• Compliance with a legal obligation;
• Processing necessary to protect your interests in circumstances permitted by law;
• Legitimate interests where permitted under the PDPL and where those interests do not adversely
affect your rights and interests; or
• Another lawful basis permitted under the PDPL and its Implementing Regulations.
Where processing is based on consent, you may withdraw your consent at any time, subject to applicable legal
requirements and limitations. Withdrawal of consent does not affect the lawfulness of processing carried out
before the withdrawal.
7. DISCLOSURE OF PERSONAL DATA
We may disclose or provide access to personal data to third parties where necessary and legally permitted,
including:• Payment service providers;
• Our shipping and logistics partner, UPS (via its authorized service provider in Saudi Arabia);
• Our e-commerce platform provider, Shopify;
• Website hosting and technology providers;
• Customer-service providers;
• IT and cybersecurity providers;
• Analytics and marketing providers;
• Professional advisers;
• Government authorities, courts, regulators, or law-enforcement authorities where legally required;
and
• Other service providers acting on our behalf.
We do not sell your personal data. Third parties that process personal data on our behalf may process it only
for the purposes for which we have engaged them and subject to appropriate contractual, organizational, and
technical safeguards as required by applicable law.
8. RELATIONSHIP WITH SHOPIFY
Our Services are hosted by Shopify Inc., which collects and processes personal data about your access to and
use of the Services in order to provide and improve the Services for us and for other Shopify merchants.
Information you submit through our Store is transmitted to and shared with Shopify, and may be processed by
Shopify in countries other than the one in which you reside.
In these circumstances, Shopify is responsible for its own processing of your personal data, including for
responding to requests to exercise your rights over the use of your personal data for those purposes. To learn
more about how Shopify collects and uses personal data, and about any rights you may have in relation to
Shopify's own processing, please see the Shopify Consumer Privacy Policy
(www.shopify.com/legal/privacy/app-users) and the Shopify Privacy Portal (privacy.shopify.com/en).
9. INTERNATIONAL TRANSFERS OF PERSONAL DATA
Some of our service providers may process personal data outside the Kingdom of Saudi Arabia. This currently
includes our e-commerce platform provider, Shopify, and may also include payment service providers and
analytics or marketing providers, depending on which of these we use at any given time.
Where personal data is transferred or disclosed outside the Kingdom, we will comply with the applicable
requirements of the PDPL and the Regulation on Personal Data Transfer Outside the Kingdom, including
applicable safeguards, conditions, and procedures governing international transfers, so that transferred
personal data receives protection that is not less than the protection required under Saudi law.
10. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies to operate the website, remember preferences,
understand website usage, improve performance, and, where applicable, support marketing activities. Cookies
may include:
• Essential cookies — necessary for the website to function;
• Preference cookies — used to remember settings;• Analytics cookies — used to understand website usage and performance; and
• Marketing cookies — where applicable, used for advertising or measuring marketing effectiveness.
Where applicable, you may manage your cookie preferences through our cookie settings or your browser
settings.
11. DATA RETENTION
We retain personal data only for as long as reasonably necessary to fulfill the purposes for which it was
collected, unless a longer retention period is required or permitted by applicable law. The retention period
may depend on the nature and purpose of the data, whether it is necessary to provide services to you, legal,
accounting, tax, or regulatory requirements, the resolution of disputes, and the establishment, exercise, or
defense of legal claims.
When personal data is no longer necessary and there is no legal requirement to retain it, we will take
appropriate steps to destroy, delete, anonymize, or otherwise dispose of it in accordance with applicable
requirements.
12. SECURITY OF PERSONAL DATA
We take appropriate organizational, administrative, and technical measures designed to protect personal data
against unauthorized access, disclosure, alteration, loss, destruction, or other unlawful processing. These
measures may include access controls, authentication procedures, security monitoring, encryption where
appropriate, secure systems, and other safeguards appropriate to the nature and risks of the personal data
being processed. However, no method of transmission or electronic storage can be guaranteed to be
completely secure.
13. PERSONAL DATA BREACHES
If we become aware of a personal data breach, we will assess and handle the incident in accordance with
applicable Saudi laws and regulations. Where a breach meets the applicable regulatory threshold, we will notify
the competent authority — the Saudi Data and Artificial Intelligence Authority (SDAIA) — within the period
required by the PDPL Implementing Regulations.
Under Article 24 of the Implementing Regulations, qualifying personal-data breaches must be reported to the
competent authority within 72 hours of becoming aware of the incident where the breach may cause harm to
the personal data, the data subject, or their rights or interests. Where required, affected individuals will also
be notified without undue delay in clear and simple language.
14. YOUR RIGHTS
Subject to the conditions and exceptions provided under Saudi law, you may have the right to:
• Be informed about the legal basis and purposes for collecting your personal data;
• Access personal data held by us;
• Request your personal data in a clear and readable format;
• Request that inaccurate, incomplete, or outdated personal data be corrected, completed, or
updated;• Request the destruction of your personal data, where the applicable legal requirements are satisfied;
and
• Withdraw consent where processing is based on your consent.
These rights are expressly recognized under the Saudi PDPL and its Implementing Regulations. Your rights may
be subject to certain exceptions and limitations under applicable law — for example, we may need to retain
certain information to comply with a legal obligation or to establish, exercise, or defend legal claims.
If you are located outside the Kingdom of Saudi Arabia, you may also have rights under the data protection
laws of your own country or region — for example, the EU/UK General Data Protection Regulation or applicable
US state privacy laws. Where such laws apply to our processing of your personal data, we will honor the rights
they provide in accordance with their requirements.
15. HOW TO EXERCISE YOUR RIGHTS
To exercise any applicable privacy right, submit a privacy-related request, or raise a complaint about how we
handle your personal data, contact us at:
Email: support@loufinejewels.com
Please provide sufficient information for us to verify your identity and understand your request. We may
request additional information where reasonably necessary to verify your identity and protect your personal
data from unauthorized disclosure. We will handle requests in accordance with the applicable requirements
and time periods under Saudi law.
If you are not satisfied with our response, you may have the right to lodge a complaint with the Saudi Data and
Artificial Intelligence Authority (SDAIA) or, if applicable, your local data protection authority.
16. MARKETING COMMUNICATIONS
If you have provided the required consent to receive promotional communications, we may contact you by
email or other permitted electronic means regarding products, offers, promotions, or other marketing
communications.
Every marketing communication will provide an appropriate mechanism to stop receiving further marketing
communications. You may withdraw your marketing consent at any time by clicking the unsubscribe link where
available, using the opt-out mechanism provided in the message, or contacting us at
support@loufinejewels.com.
We will process your request to stop marketing communications without undue delay.
17. CHILDREN'S PRIVACY
Our Store is not intended to knowingly collect personal data from children in circumstances where such
collection is not permitted under applicable Saudi law. If you believe that a child has provided us with personal
data in circumstances where collection was not permitted, please contact us at support@loufinejewels.com.
Where processing requires the consent of a legal guardian under applicable law, we will follow the applicable
requirements.
18. THIRD-PARTY WEBSITESOur website may contain links to third-party websites, applications, or services. We are not responsible for the
privacy practices, security, or content of third-party websites or services. We encourage you to review the
privacy policies of any third-party service you access through our website.
19. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business
practices, or applicable laws and regulations. When we make material changes, we will provide an appropriate
notice where required by applicable law. The updated version will be posted on our website with a revised
"Last Updated" date.
20. GOVERNING LAW
This Privacy Policy is governed by the applicable laws and regulations of the Kingdom of Saudi Arabia, including
the Saudi Personal Data Protection Law and its Implementing Regulations. Nothing in this Privacy Policy is
intended to limit or exclude any mandatory right or protection available to individuals under applicable Saudi
law.
21. CONTACT US
If you have questions about this Privacy Policy, our handling of personal data, or your privacy rights, please
contact us:
Store: Lou Fine Jewels
Legal Name: Lou Fine Jewels
Email: support@loufinejewels.com
Website: loufinejewels.com
Last Updated: September 1, 2026