Privacy Policy

Effective date: 22 June 2026 Last updated: 22 June 2026

Rafiké ("Rafiké", "we", "us", or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains what personal data we collect, how we use and protect it, and the choices you have. It applies to our website at rafike.co, our online store, our newsletter, and any events or forms we run.

We handle personal data in accordance with the Personal Data Protection Act 2012 of Singapore (the "PDPA").

By using our website, placing an order, signing up for our newsletter, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy.

1. What personal data we collect

Depending on how you interact with us, we may collect the following:

  • Identity and contact details — your name, email address, phone number, and delivery and billing addresses.
  • Order information — the products you order, ring size, order history, and related preferences.
  • Payment information — payment is processed by our third-party payment providers. We do not store your full card details on our own systems.
  • Communications — messages you send us by email, through our contact form, social media, or other channels.
  • Newsletter and marketing data — your email address and subscription preferences when you sign up to hear from us.
  • Event information — your name, email, and any details you provide when you RSVP to or attend a Rafiké event (for example, dietary needs you choose to share).
  • Feedback — responses you give in our feedback or survey forms.
  • Technical and usage data — information collected automatically when you visit our website, such as your IP address, device and browser type, and pages viewed, gathered through cookies and similar technologies.

We only collect personal data that is reasonable and necessary for the purposes set out below.

2. How we collect your personal data

We collect personal data:

  • directly from you — when you place an order, create an account, subscribe to our newsletter, fill in a form, RSVP to an event, or contact us;
  • automatically — through cookies and analytics tools when you browse our website; and
  • from third parties — such as our e-commerce, payment, and delivery providers, where they share information needed to complete your order.

3. Why we collect and use your personal data

We use your personal data for the following purposes:

  • to process and fulfil your orders, including made-to-order production and dispatch;
  • to take payment and prevent fraudulent transactions;
  • to arrange delivery of your order;
  • to communicate with you about your order, enquiries, and customer support;
  • to manage event invitations, RSVPs, and attendance;
  • to send you newsletters, updates, and information about collections and events, where you have consented to receive them;
  • to understand how our website is used and to improve our products and service;
  • to maintain our business records; and
  • to comply with applicable laws and regulations.

We will seek your consent before using your personal data for a purpose that is not set out in this Policy, unless permitted or required by law.

4. Consent

By providing us with your personal data, you consent to our collection, use, and disclosure of it for the purposes described in this Policy.

You may withdraw your consent at any time by contacting us using the details in Section 12. If you withdraw consent, we may no longer be able to provide certain services to you, for example, we may be unable to fulfil an order. We will let you know the likely consequences before you withdraw.

You can unsubscribe from our marketing emails at any time using the link in any newsletter, or by contacting us directly.

5. Disclosure of your personal data

We do not sell your personal data. We may share it with the following, only to the extent needed to run our business:

  • E-commerce platform - Shopify, which hosts our online store and processes order data.
  • Payment providers - Shopify Payments, Stripe, PayPal, PayNow, which process your payment.
  • Delivery and logistics partners - Ninja Van, to deliver your order.
  • Email and form providers - Shopify email marketing for our newsletter, and Google (Google Forms and Google Drive) for event RSVPs and feedback.
  • Professional advisers and authorities - where required by law, regulation, or legal process.

These parties are only permitted to use your personal data to provide their services to us, and are expected to protect it appropriately.

6. Cookies and similar technologies

Our website uses cookies and similar technologies to keep your shopping cart working, remember your preferences, and understand how the site is used. You can manage or disable cookies through your browser settings, although some parts of the site may not work properly if you do.

Our store runs on Shopify, which sets cookies necessary for the store to function and for analytics. You can read more in Shopify's own privacy documentation.

7. How long we keep your personal data

We retain personal data only for as long as it is needed for the purposes set out in this Policy, or as required to meet legal, accounting, or reporting obligations. When personal data is no longer needed, we will take reasonable steps to delete or anonymise it.

8. How we protect your personal data

We take reasonable steps to protect personal data in our care against unauthorised access, collection, use, disclosure, copying, modification, or disposal. These include limiting access to personal data and relying on reputable service providers with their own security measures.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission where required under the PDPA.

9. Transfer of personal data outside Singapore

Some of our service providers (for example, our e-commerce, payment, and form providers) may store or process personal data outside Singapore. Where we transfer personal data overseas, we take reasonable steps to ensure it receives a standard of protection comparable to that under the PDPA.

10. Your rights

Under the PDPA, you may:

  • Access the personal data we hold about you and ask how it has been used or disclosed;
  • Correct any personal data that is inaccurate or out of date; and
  • Withdraw consent to our continued use of your personal data.

To make a request, please contact us using the details in Section 12. We may need to verify your identity before responding, and a reasonable fee may apply to certain access requests, as permitted under the PDPA. We will respond within the timeframes required by law.

11. Third-party links and minors

Third-party links. Our website and communications may contain links to other websites and platforms (such as our social media pages). This Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to read their policies.

Minors. Our products and website are intended for adults. We do not knowingly collect personal data from children without appropriate consent. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

12. Contact us and Data Protection Officer

If you have any questions about this Policy, wish to make an access or correction request, or want to withdraw consent, please contact our Data Protection Officer:

Rafiké
Email: hey@rafike.co
Instagram: @rafike.co

We will do our best to address your query promptly.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with a revised "Last updated" date. We encourage you to review it periodically.