Privacy & Cookies Policy

RIORI is a trading name of JNPR CO LTD.

Business address: 

3F1 Third floor, 3 Hill Street, Edinburgh, EH2 3JP.

Email: support@riori.co

This Privacy and Cookies Policy explains how RIORI collects, uses, shares and protects your personal information when you visit our website, place an order, contact us or otherwise interact with RIORI.

1. Who controls your information

JNPR CO LTD trading as RIORI, is the controller of the personal information covered by this policy.

For privacy questions, complaints or requests, contact:

Email: support@riori.co
Postal address: JNPR CO LTD trading as RIORI, 3F1 Third floor, 3 Hill Street, Edinburgh, EH2 3JP.

This postal address is for business correspondence and privacy enquiries. It is not a returns address unless we expressly confirm otherwise.

2. Information we collect

We may collect the following categories of personal information:

• Identity and contact information: your name, billing address, delivery address, email address, telephone number and account details.

• Order and transaction information: products purchased, order value, currency, payment status, delivery information, returns, refunds and guarantee claims.

• Payment information: payment provider, payment status, transaction identifiers and limited card information supplied by Shopify, PayPal or another payment processor. RIORI does not ordinarily receive or retain your complete card number.

• Technical and usage information: IP address, browser, device information, cookie identifiers, pages viewed, links clicked, referring website and approximate location.

• Marketing information: your marketing preferences, consent records, newsletter interactions and advertising attribution information.

• Communications and content: messages sent to customer support, reviews, photographs, survey responses and social-media interactions.

• Fraud and compliance information: information used to verify transactions, prevent fraud and comply with tax, customs, accounting and legal obligations.

We generally collect information directly from you, your device, Shopify, payment providers, carriers, fulfilment partners, analytics providers and advertising partners.

3. How and why we use your information

We use personal information for the following purposes:

• To process payments and fulfil your order.

• To arrange delivery, tracking, returns, refunds and replacements.

• To administer the RIORI One-Year Product Guarantee.

• To provide customer service and respond to enquiries.

• To maintain and secure our website and accounts.

• To detect and prevent fraud, abuse and unauthorised transactions.

• To improve our products, website and customer experience.

• To measure website and advertising performance.

• To send marketing communications where you have consented or another lawful permission applies.

• To meet tax, customs, accounting, product-safety and other legal obligations.

• To establish, exercise or defend legal claims.

Where UK data-protection law applies, our lawful bases include:

• Contract: where processing is necessary to accept, fulfil or manage your order.

• Legitimate interests: where necessary to operate and improve RIORI, prevent fraud, secure our services, maintain records or defend legal rights, provided those interests do not override your rights.

• Consent: for non-essential cookies and certain marketing or advertising activities.

• Legal obligation: where processing is required by law.

You may withdraw consent at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.

4. Payments

Payments may be processed through Shopify Payments, card networks, banks or PayPal.

These providers process payment information under their own terms and privacy policies. RIORI does not ordinarily store complete payment-card details.

5. Cookies, analytics and advertising

Our website uses cookies and similar technologies.

Essential cookies are used for checkout, website security, fraud prevention, shopping-basket functions and customer preferences.

With your consent where required, we may also use:

• Google Analytics;

• Meta advertising technologies;

• TikTok advertising technologies; and

• Shopify analytics and marketing tools.

These services may collect identifiers, device information, browsing activity and purchase-event information to measure website use, attribute advertising, create audiences and show more relevant advertisements.

Depending on the law where you live, the disclosure of information for targeted advertising may be considered a “sale,” “sharing” or use for targeted advertising, even though RIORI does not sell personal information for money.

You can manage non-essential cookies through our cookie banner or the “Your Privacy Choices” link where available. You can also control cookies through your browser, although blocking essential cookies may affect website functionality.

Where legally required and technically received, we will treat a recognised Global Privacy Control signal as a request to opt out of sale, sharing or targeted advertising for that browser or device.

6. Email and SMS marketing

We may send marketing messages where:

• You have given consent; or

• Another lawful permission applies, such as the UK soft opt-in for marketing similar products to existing customers.

You can unsubscribe through the link in a marketing message or by emailing support@riori.co.

We may retain a minimal suppression record to ensure that we respect your request. Order confirmations, delivery updates, guarantee information and other service communications are not marketing messages.

7. Who receives your information

We may disclose relevant personal information to:

• Shopify and providers of storefront, checkout, hosting and ecommerce services.

• Shopify Payments, PayPal, banks, card networks and payment processors.

• Carriers, customs agents and fulfilment partners.

• International fulfilment partners, including partners located in China, where necessary to prepare, deliver or return an order.

• Google, Meta and TikTok for analytics or advertising, subject to applicable consent and opt-out requirements.

• Email, SMS, customer-support, fraud-prevention, cloud, security and IT providers.

• Accountants, lawyers, insurers and professional advisers.

• Regulators, courts, law-enforcement bodies or public authorities where disclosure is legally required.

• A purchaser, investor or successor involved in a genuine sale, restructuring or transfer of the business, subject to suitable safeguards.

Service providers may process information on our instructions or act as independent controllers under their own privacy notices.

We do not authorise fulfilment partners to use customer information for their own marketing.

8. International transfers

RIORI is based in the United Kingdom and sells internationally. Personal information may therefore be processed in the United Kingdom, United States, China, Australia and other countries used by Shopify or our service providers.

Where UK or European data-transfer rules apply, we use an applicable adequacy regulation, approved contractual clauses or another lawful transfer safeguard. We may also assess whether supplementary protections are required.

You may contact support@riori.co for further information about relevant transfer safeguards, subject to lawful confidentiality restrictions.

9. How long we retain information

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including legal, accounting, tax, customs, fraud-prevention, product-safety and dispute requirements.

Generally:

• Core order, transaction and relevant customer-service records may be retained for six years.

• Returns, refunds and guarantee-claim records may be retained for as long as necessary to establish or defend legal rights.

• Marketing profiles are retained until you unsubscribe, withdraw consent or remain inactive for a prolonged period.

• Minimal suppression records may be retained to ensure that we do not resume unwanted marketing.

• Cookies are retained for the periods disclosed through our cookie-management tool.

Information may be retained for longer where there is an active dispute, legal hold or specific legal requirement. It will then be deleted or anonymised when no longer required.

10. Security

We use reasonable administrative, contractual and technical safeguards designed to protect personal information against loss, misuse and unauthorised access, alteration or disclosure.

These measures include access controls and the use of reputable ecommerce and payment providers. However, no internet or storage system can be guaranteed to be completely secure.

If a personal-data breach creates a legal notification obligation, we will notify affected individuals and regulators as required.

11. Automated fraud checks

Payment and fraud-prevention providers may automatically assess or block transactions.

Where an automated decision has a legal or similarly significant effect and applicable law provides relevant rights, you may ask for human review, express your point of view or contest the decision by contacting support@riori.co.

12. Your privacy rights

Depending on where you live and which laws apply, you may have the right to:

• Request access to your personal information.

• Ask us to correct inaccurate or incomplete information.

• Request deletion of your information.

• Restrict or object to certain processing.

• Receive certain information in a portable format.

• Withdraw consent.

• Object to direct marketing.

• Opt out of the sale or sharing of personal information or its use for targeted advertising.

• Limit certain uses of sensitive personal information.

• Appeal a refusal of a privacy request.

• Exercise privacy rights without discriminatory treatment.

To exercise a right, email support@riori.co and explain which right you wish to exercise.

We may ask for reasonable information to verify your identity and authority. An authorised representative may submit a request where applicable law permits.

Rights are not absolute. For example, we may retain information needed for tax compliance, fraud prevention, order administration or legal claims. We will explain any lawful refusal or fee.

14. Children

Our website is not directed to children under 16. We do not knowingly collect personal information from children under 16 for targeted advertising.

If you believe a child has provided personal information to us, contact support@riori.co so that we can investigate and delete it where required.

15. Links to other websites

Our website may contain links to third-party websites. RIORI does not control the privacy or security practices of those websites.

You should review the privacy policy of any third-party website before providing personal information.

16. Changes to this policy

We may update this policy when our practices, providers or legal obligations change.

The updated version will be published with a revised effective date. We will provide additional notice where required for a material change.

17. Contact us

We’re here to help. If you have a question about our jewellery, an existing order, delivery or returns, please get in touch with the RIORI team.

Email: support@riori.co

Telephone: +44 330 520 0549

Contact hours: 9:00am–5:00pm, Monday to Friday (UK time)