Privacy Policy

This Privacy Policy explains how BHIM JEWELLERY LLC (“we”, “us”, “our”, or “Aurelia & Stone”), registered in Dubai, United Arab Emirates, collects, processes, stores, and protects the personal data of clients who visit our digital boutique, purchase fine jewellery, or interact with our private concierge team.

We act as the official Data Controller under UAE PDPL. We ensure that all personal data is processed lawfully, fairly, transparently, and solely for specified, explicit, and legitimate commercial purposes.

Depending on how you interact with our platform, we collect the following categories of information:

We process personal data strictly for defined purposes, including:

• Order Processing & Fulfilment: Casting, sizing, verifying authenticity, dispatching, and providing insured delivery of your selected jewellery items.
• Client Care & Concierge Communication: Answering sizing queries, managing bespoke custom design consultations, issuing certificates of authenticity, and processing warranty inquiries.
• WhatsApp Dispatch Alerts: Sending real-time courier tracking updates, estimated arrival times, and one-time delivery verification codes directly to your WhatsApp.
• Fraud Prevention & Regulatory Compliance: Performing automated 3D Secure verification, mitigating payment fraud, and adhering to UAE Central Bank AML/CFT reporting obligations for precious metal traders.
• Boutique Service Optimization: Improving digital boutique performance, monitoring server security, and refining our product curation.

BHIM JEWELLERY LLC does not sell, rent, or lease your personal information to third-party marketing brokers. We share data only with trusted, bound service partners under strict non-disclosure and data processing agreements:

• Insured Courier & Armored Transit Carriers: (e.g. DHL Express, FedEx, Aramex, and specialized local UAE security couriers) to execute delivery and confirm recipient signatures.
• Certified Payment Gateways: To authorize and settle financial transactions securely under international banking standards.
• Independent Gemmological Laboratories: (GIA, IGI, HRD) strictly for issuing laboratory grading certificates when stones are submitted for certification.
• Legal & Regulatory Authorities: Competent UAE judicial, tax (FTA), or law enforcement agencies only when strictly mandated by UAE federal legislation.

Financial security is paramount when purchasing fine jewellery online. All online transactions are processed through Level 1 PCI-DSS (Payment Card Industry Data Security Standard) compliant payment gateways utilizing 256-bit SSL/TLS encryption.

During payment, your sensitive payment details are submitted directly to the payment gateway through end-to-end encrypted tokenization. BHIM JEWELLERY LLC employees and systems never have visibility into or access to your complete credit card numbers or security CVV codes.

To ensure reliable, insured delivery of your precious jewellery:

• We share the recipient’s name, delivery address, and telephone number with our contracted, vetted courier service.
• The courier will use your contact number to coordinate delivery timeframes and verify identity via SMS or WhatsApp OTP.
• Couriers are contractually prohibited from using your contact data for any purpose other than executing the specific shipment.

Clients frequently appreciate the convenience of coordinating ring sizing, bespoke design proofs, and delivery schedules via WhatsApp.

If you initiate contact or opt in to receive updates via WhatsApp, we will utilize your WhatsApp profile information and phone number strictly for customer service, order updates, and design approvals. You may opt out of WhatsApp communications at any time by messaging “STOP” or notifying our concierge.

Our website uses essential and functional cookies to deliver a seamless shopping experience:

• Strictly Necessary Cookies: Required to maintain your cart contents, preserve currency preferences, and navigate between secure checkout screens.
• Performance & Analytics Cookies: Help us measure anonymous traffic patterns, identify technical glitches, and optimize page load speeds.
• Functional Cookies: Remember your preferred language and wishlisted items across browsing sessions.

You can adjust your web browser settings to block or notify you about cookies; however, disabling essential cookies may impact checkout functionality.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Order & Invoicing Records: Retained for a minimum of 5 years to comply with UAE Federal Tax Authority (FTA) auditing requirements and commercial accounting standards.
• Warranty & Craftsmanship Archives: Kept for the lifetime of your bespoke or catalog piece to honour future resizing, gem maintenance, and authentication requests.
• Marketing Subscriptions: Maintained until you choose to unsubscribe via the one-click link present in every newsletter.

BHIM JEWELLERY LLC implements robust technical, physical, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or accidental destruction.

These measures include TLS 1.3 cryptographic data transmission, cloud server firewalls, role-based multi-factor authentication for authorized staff, regular vulnerability assessments, and strict physical security protocols at our Dubai corporate vaults and design studios.

Under UAE Federal Decree-Law No. 45 of 2021 (PDPL), you hold fundamental rights regarding your personal information:

• Right of Access: Request a confirmation and copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where retention is no longer legally mandated.
• Right to Restrict or Object to Processing: Object to processing for direct marketing or request restrictions under specific conditions.
• Right to Data Portability: Request transmission of your data in a structured, machine-readable format.

To exercise any of your statutory rights or submit questions regarding our privacy practices, please contact our designated Data Protection Officer: