Privacy policy
Last updated: 27 September 2026
This privacy policy explains what personal data we collect when you visit shoptawakkul.com or buy from us, why we collect it, who we share it with, how long we keep it and what your rights are. We only collect what we need to run the shop.
1. Who we are
Tawakkul (توكل) is run by Ibrahima Sidibe, a sole trader based in England. For UK data protection law (the UK GDPR and the Data Protection Act 2018) we are the controller of your personal data.
Address: Flat 3, 14 Baden Powell Close, Surbiton, KT6 7SW, United Kingdom
Email: tawakkul.uk@gmail.com
2. What we collect and why
| What | Why we use it | Lawful basis |
|---|---|---|
| Name, email, delivery and billing address, phone number (if you give it), order details | To take your order, deliver it, send order and delivery updates, and handle returns and refunds | Contract |
| Payment details | To take payment. Card details are handled directly by our payment providers (for example Shopify Payments / Shop Pay). We never see or store your full card number. | Contract |
| Order and payment records | To keep the accounts and tax records the law requires | Legal obligation |
| Messages you send us (contact form, email, social media) | To answer you and help with your order | Legitimate interests (customer service) |
| Email address you give us on our waiting list ("Me prévenir") or when you tick the marketing box at checkout | To tell you about new collections and offers. You can unsubscribe at any time with the link in every email. | Consent |
| Device and connection data (IP address, browser, pages viewed) collected by essential cookies and our platform | To make the site and checkout work, keep it secure and prevent fraud | Legitimate interests (running a secure shop) |
| Analytics and advertising data collected by Google Analytics, Google Ads and Google Merchant Center tags | To understand how the site is used and measure our adverts. These tags only run if you accept them in our cookie banner. | Consent |
You don't have to give us your data, but we can't process an order without a name, email and delivery address. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We do not sell your personal data.
3. Cookies
We use essential cookies to make the shop work. Analytics and advertising cookies are only set if you accept them in our cookie banner. You can change your choice at any time using the Cookie preferences link at the bottom of every page. Full details are in our Cookie Policy.
4. Who we share your data with
- Shopify, which hosts our shop and runs the checkout. Shopify may also use information about your visit to provide its own services (such as Shop Pay and fraud protection); for that use Shopify is responsible, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal. You can also opt out of data sharing for targeted advertising on our Your Privacy Choices page.
- Payment providers (for example Shopify Payments / Shop Pay) to take payment and prevent fraud.
- Our suppliers and delivery companies, who receive your name, delivery address and phone number only to prepare and deliver your order.
- Google (Analytics, Ads, Merchant Center), only if you have accepted analytics or advertising cookies.
- Authorities such as HMRC, the police or a court, where the law requires it.
5. Transfers outside the UK
Some of these providers are based outside the UK, including in the United States and, for some of our suppliers, in China. When your data leaves the UK we rely on UK adequacy regulations where they exist, or on safeguards such as the UK International Data Transfer Agreement / Addendum, or, for sending your delivery details to a supplier to fulfil your order, on the transfer being necessary to perform our contract with you.
6. How long we keep your data
- Order, payment and tax records: 6 years after the end of the tax year of the order, as HMRC requires.
- Customer service messages: up to 2 years after the conversation ends.
- Waiting list / marketing email: until you unsubscribe, or 2 years after you last opened or clicked one of our emails.
- Google Analytics data: no more than 14 months.
7. Your rights
Under UK data protection law you have the right to: access a copy of your data; have it corrected; have it deleted; restrict or object to how we use it (including an absolute right to object to direct marketing); receive it in a portable format; and withdraw your consent at any time (this does not affect what we did before you withdrew it). To use any of these rights, email tawakkul.uk@gmail.com. It's free, and we will reply within one month. We may ask you to confirm your identity first.
8. Complaints
If you're unhappy with how we handle your data, please tell us first at tawakkul.uk@gmail.com. We will acknowledge your complaint within 30 days and tell you what we are doing about it. You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, phone 0303 123 1113.
9. Children
Our shop is not aimed at children under 13 and we do not knowingly collect their data.
10. Security
Our shop runs on Shopify, which uses encryption (HTTPS) and PCI-compliant payment processing. We limit access to your data to what is needed to run the shop.
11. Changes
If we change this policy we will update the date at the top of this page. If the change is significant, we will tell you by email if we have your address.