Privacy and data handling policy

Who this notice covers

This notice covers personal data handled through the IslamicVisuals storefront, customer accounts, checkout, digital delivery and customer support. Contact customer support for any privacy question or request.

Information we use

• Account and contact data, such as your name, email address and any optional phone number you provide.
• Order data, including products, price, currency, billing country, transaction references and download access records.
• Technical and security data needed to run the site, keep a cart or session, prevent abuse and diagnose errors.
• Messages and evidence you provide when you ask for support, exercise a legal right or make a complaint.

Why we use it

We use personal data to form and perform a sales contract, take payment, provide digital content, operate accounts, answer support requests and meet legal, tax, accounting, fraud-prevention and security obligations.

Where we rely on legitimate interests, those interests are operating and securing the store, preventing fraud, keeping reliable business records and improving support. We do not use consent as a condition for unrelated marketing.

Payments, recipients and transfers

Card details are entered into the hosted payment checkout. The IslamicVisuals storefront receives payment status and transaction references, not the full card number or card security code.

We disclose only the data necessary to providers that host or support the store, process payments, prevent fraud, deliver email or professional services, and to authorities where the law requires it. If a provider processes data outside the UK, we require an applicable legal transfer mechanism and safeguards.

Retention, cookies and security

We retain information only for as long as needed for the purpose collected, legal record-keeping, disputes and security. Retention depends on the type of record and any applicable limitation, tax or accounting period.

The store uses storage technologies needed for carts, authentication, security and checkout. Any non-essential analytics or marketing technology must remain off until a valid choice is offered.

We use access controls, encryption in transit and operational safeguards appropriate to the data. No internet service can promise absolute security.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where consent is the legal basis. We may need to verify your identity before acting.

You may complain to the Information Commissioner’s Office at ico.org.uk. Contact us first if you would like us to investigate or correct a problem.