Privacy Policy
Privacy Policy
At DAKHEEL LTD, your privacy is of paramount importance to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a purchase, or interact with our brand. We are fully committed to compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
DAKHEEL LTD is the data controller responsible for your personal data. For any privacy-related enquiries, you can contact us at:
- Company: DAKHEEL LTD
- Email: hello@dakheel.co.uk
- Registered Office: Suite 14 3 Soothouse Spring, St Albans, Hertfordshire, AL3 6PP
What Data We Collect
We collect only the data necessary to provide you with our products and services. This includes:
Information You Provide Directly
- Identity: Full name, title
- Contact: Email address, phone number, billing and shipping addresses
- Payment: Billing details (card type, last four digits). Full payment data is processed securely by our payment providers (Stripe, Shopify Payments, PayPal, Klarna). We do not store full card details on our servers.
- Account: Email and password (encrypted) if you create a DAKHEEL account
- Marketing: Preferences for newsletters, offers, and communications
- Subscriptions: Details related to The Ritual subscription plans, including plan type, billing cycle, and delivery preferences
Information Collected Automatically
- Device & Browser: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, referring URLs, click patterns
- Location: Approximate location derived from IP address
- Cookies: See our Cookie Policy section below
Information from Third Parties
- Order and customer data from Shopify (our e-commerce platform)
- Marketing engagement data from Klaviyo (email platform)
- Analytics data from Google Analytics and Meta Pixel
How We Use Your Data
We process your personal data for the following lawful purposes under the UK GDPR:
| Purpose | Description | Legal Basis |
|---|---|---|
| Order Fulfilment | Processing payments, packing, shipping, and delivering your orders | Contract performance (Art. 6(1)(b)) |
| Customer Service | Responding to enquiries, handling returns, resolving disputes | Contract performance / Legitimate interest |
| Marketing | Sending newsletters, product launches, exclusive offers (only with consent) | Consent (Art. 6(1)(a)) |
| Analytics & Improvement | Understanding how customers use our website to improve the experience | Legitimate interest (Art. 6(1)(f)) |
| Legal Compliance | Fraud prevention, tax records, regulatory obligations | Legal obligation (Art. 6(1)(c)) |
| Subscriptions | Managing The Ritual subscription billing, delivery, and cancellations | Contract performance |
Cookie Policy
Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyse website traffic. Cookies are small text files placed on your device when you visit our site.
Types of Cookies We Use
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Required for the website to function (shopping cart, checkout, security) | Session |
| Analytics Cookies | Google Analytics - understand visitor behaviour and site performance | Up to 24 months |
| Marketing Cookies | Meta Pixel, TikTok Pixel, Klaviyo - track ad performance and personalise content | Up to 12 months |
| Functional Cookies | Remember preferences (language, recently viewed products) | Up to 12 months |
You can manage or disable non-essential cookies at any time through the cookie consent banner on our website or via your browser settings. Disabling certain cookies may affect website functionality.
Third-Party Services
We share specific data with trusted third-party service providers who help us operate our business. Each provider has its own privacy policy:
- Shopify - E-commerce platform hosting our store. Processes order data, customer details, and payment information. Shopify Privacy Policy
- Stripe / Shopify Payments - Payment processing. Handles card transactions securely. Stripe Privacy Policy
- PayPal - Alternative payment method. PayPal Privacy Policy
- Klaviyo - Email marketing and automation. Processes email engagement data. Klaviyo Privacy Policy
- Google Analytics - Website analytics. Processes anonymised usage data. Google Privacy Policy
- Meta (Facebook/Instagram) - Advertising and audience measurement. Meta Privacy Policy
- Royal Mail / DPD / DHL - Delivery partners. Receive name, address, and order information for shipping purposes only.
- Judge.me - Product reviews platform. Processes review data and order verification.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy:
| Data Type | Retention Period |
|---|---|
| Order and transaction records | 6 years (for tax and accounting compliance under HMRC regulations) |
| Customer account data | Duration of account + 2 years after last activity |
| Marketing data (with consent) | Until you unsubscribe or withdraw consent |
| Website analytics | 26 months (Google Analytics default) |
| Customer service correspondence | 2 years after resolution |
Your Rights Under UK GDPR
As a data subject, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure (Right to be Forgotten): Request deletion of your personal data, subject to legal exceptions.
- Right to Restrict Processing: Request that we limit how we use your data.
- Right to Data Portability: Receive your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent for marketing communications at any time.
- Right to Lodge a Complaint: You may complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.
To exercise any of these rights, please email us at hello@dakheel.co.uk. We will respond within 30 days, as required by law.
International Data Transfers
Some of our third-party service providers (e.g., Shopify, Klaviyo, Meta) may process data outside the UK. We ensure that all international transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or the UK International Data Transfer Agreement, in compliance with UK GDPR requirements.
Data Security
We implement robust technical and organisational measures to protect your personal data, including:
- SSL/TLS encryption for all data transmitted via our website
- PCI DSS-compliant payment processing via Shopify and Stripe
- Restricted access to personal data on a need-to-know basis
- Regular security reviews and staff training
- Secure deletion protocols when data is no longer needed
Children's Privacy
Our website and products are intended for individuals aged 18 and over. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.
Last updated: July 2026. DAKHEEL LTD, Suite 14 3 Soothouse Spring, St Albans, Hertfordshire, AL3 6PP.