Version 1.9, 31 July 2026. English text. An Arabic version is published alongside this policy and, under UAE law, the Arabic text governs.
1.1 This policy explains what personal data Pieceunyq - F.Z.C ("Pieceunyq", "we", "us") collects when you use our website, why we collect it, who we share it with, and what you can ask us to do about it. Pieceunyq - F.Z.C is a Free Zone Company licensed by the Ajman Free Zone Authority under Licence No. 55111, with its registered address at Ajman Free Zone, P.O. Box 92363, Ajman, United Arab Emirates.
1.2 We are the controller of the personal data described here. Our Terms of Sale govern your purchase; this policy governs your data. Where the two overlap, for example on the screening checks in clause 9 of the Terms, this policy describes the data side of the same process.
1.3 Pieceunyq is a dealer in precious metals and stones. That makes us a Designated Non-Financial Business or Profession supervised by the UAE Ministry of Economy and Tourism, and it is the reason parts of this policy describe checks and record-keeping we cannot switch off at your request. Our registered goAML organisation identifier is 34960.
2.1 Account data. Your email address, and the password you set, which is stored only in hashed form by our authentication provider. We never see your password.
2.2 Design data. The text prompts you write in the design studio, the design attributes you choose such as jewellery type and material, and the images generated from them. Please treat a design prompt as you would any other message you send us, and do not put personal information into it that the design itself does not need.
2.3 Quotation and order data. The pieces you request, the quotations we issue, the orders you place, and the status of each.
2.4 Delivery data. The recipient's name, address, city, state or emirate, postal code, country and telephone number, for the address you ask us to ship to.
2.5 Payment data. The status of your payment, the amount, and the identifiers our payment provider returns to us. Your card number, expiry date and security code are entered directly into a field hosted by our payment provider and are never sent to, seen by, or stored on, our systems.
2.6 Verification data. Your name, your country of residence, and your date of birth. Where someone other than you pays for your order, we also collect the name on the card and that person's year of birth. Where a check calls for it, we may ask you for a copy of an identification document, which we keep, and for information about where your funds come from. Clause 5 explains when each of these applies, and clause 11.4 explains how long each is kept.
2.7 Usage data. A small set of product analytics events. Clause 7 explains what these contain, where we ask your permission before collecting any of them, and how to turn them off wherever you are.
2.8 Contact preferences. Whether you have agreed to marketing email, when that was recorded and on which screen. If you unsubscribe, we also keep your email address on the suppression list described in clause 8.5.
2.9 Technical data. Your IP address reaches our hosting and infrastructure providers whenever you load a page, as it does with any website, and appears in the server logs they keep under their contracts with us. We serve our own typefaces, so loading a page discloses it to no font service, as clause 9.4 describes. Those provider logs are the one place your IP address is written down, they are held by processors acting for us under contract, and we can ask to see them. We put it to two further uses of our own, and neither of those stores it. Our analytics endpoint reads it in memory to limit how many requests a single address can make. Our hosting provider derives from it the country your connection appears to come from, which is how we know whether clause 7.3 requires us to ask your permission. Beyond those provider logs we keep no record of your IP address in our own systems, and we do not record which country you were in.
3.1 To provide the service you asked for. Creating your account, generating and storing your designs, issuing quotations, taking your order, producing your piece and delivering it. Without this data we cannot perform the contract between us.
3.2 To comply with the law. Sanctions and anti-money-laundering screening, the record-keeping described in clause 11, and any report we are required to make to a UAE authority. We do not need, and will not ask for, your consent to do these, and you cannot ask us to stop doing them while you are transacting with us.
3.3 To keep the service secure. Rate-limiting, fraud prevention and abuse detection. Keeping the service working, and keeping it free of abuse, is part of providing it to you under our contract. Where a check exists because of our anti-money-laundering obligations, clause 3.2 applies to it instead.
3.4 To understand how the site is used. Product analytics. Where the law requires your permission before anything is stored on your device, we ask for it first and rely on that permission; clause 7.3 explains where that is. Everywhere else, understanding how our own site is used is part of providing and improving it, and clause 7.4 is how you turn it off. See clause 7.
3.5 To contact you about your order. Quotation, order, payment and delivery notifications, which are part of providing the service. These are transactional, and you cannot unsubscribe from them while you have an order with us, because they are how we perform our side of it.
3.6 To tell you about new pieces, if you have asked us to. Marketing email is separate from clause 3.5 and is described in clause 8.
4.1 Your design prompts and design images are processed by third-party artificial-intelligence services in order to generate the renderings you see and to produce the technical bill of materials our production partners work from. Your prompts are also screened by an automated moderation step before an image is generated, which is how we enforce clause 3.3 of the Terms of Sale.
4.2 The bill-of-materials step sends the design image and a technical instruction. It does not send your name, your address or your account details.
4.3 Your designs and the images generated from them are stored in private storage. They are not publicly accessible. When a design needs to be displayed, our systems mint a link that expires, by default after one hour.
4.4 Sharing a design. If you use the Share Design feature, we mint a link that stays valid for thirty (30) days so that the person you send it to can open it. Anyone holding that link can view that design image for as long as it is valid, and an individual share link cannot be withdrawn once created. It does stop working once the image itself is erased, so deleting the design under clause 11.6 also ends the link within the period described there. Please only share a design with people you intend to see it.
5.1 We are required to screen our customers and their orders. When you place an order we check the names involved against international sanctions, watch and politically-exposed-person lists through a specialist screening provider. We maintain the ability to route a check to a second provider if the first is unavailable.
5.2 What we send to the screening provider is the name being screened, the country, and where we hold it a date or year of birth, which is used to reduce false matches between people with similar names. We do not send your design data, your order contents or your payment details.
5.3 Screening does not depend on how much you spend. What we ask you for does. We screen every order, whatever its value. Separately, we give every customer a risk rating of low, medium or high, and that rating decides what we ask you for. We work it out from your country of residence, the destination you are shipping to, the country your card was issued in, the value and pattern of your orders, and the fact that we sell online and never meet you in person. We ask for your date of birth and your country of residence once, and we reuse those answers on later orders.
5.3.1 What each rating means for you. At low risk we ask for nothing beyond what you have already given us, and we may complete your order before verifying your identity, up to a cumulative limit we set and review. At medium or high risk, and for any order at or above AED 55,000 whatever your rating, we ask you for a copy of a passport, a national identity card or a driving licence, and we may take payment before the check is complete. Clause 11.4 explains how long we keep it. At high risk we also ask where your funds come from, and our Money Laundering Reporting Officer approves the order before payment is taken.
5.3.2 What holds an order. An order is held before payment where a screening result is not clear, where the pattern of your orders calls for a closer look, where you have previously been the subject of a report, or where our Money Laundering Reporting Officer has flagged your account. An unfinished identity check does not by itself hold your order. Some things raise your rating without holding your order: a card in a name other than yours, being resident outside the UAE without a State-issued identity card, and shipping to a country on a list that calls for closer monitoring. Orders placed close together may be considered together.
5.4 Where the person paying is not the person receiving the piece, we screen both, and your risk rating is raised, which may mean we verify your identity before payment under clause 5.3.1. The arrangement does not by itself hold your order.
5.5 We record the result of every check, including the response we received from the screening provider, so that we can show a supervisory authority how a decision was reached. Clause 11 explains how long we keep it.
5.6 If a screening result requires it, we are obliged to make a report to the UAE Financial Intelligence Unit. Where that happens we are prohibited by law from telling you that we have done so.
6.1 Some checks run automatically. An order can be declined, or held for manual review, without a person looking at it first, and a design prompt can be declined automatically by the moderation step.
6.2 Where an order is held or declined for a reason we are permitted to explain, you may ask us to have it looked at by a person. Write to support@pieceunyq.com. Where the reason is a sanctions or anti-money-laundering matter, there are limits on what we are allowed to tell you.
7.1 We run a small first-party analytics measurement of our own. It records the name of an event, such as a page being opened, the path it happened on, the two identifiers described in clause 7.2, your user identifier if you are signed in, and a few technical values such as page-loading speed. It does not record your IP address, your name, your email address, anything you have typed, or the contents of any design.
7.2 The two identifiers. The first is a session identifier: a random string held in your browser's session storage, which your browser clears when you close the tab. The second is a visitor identifier: a random string held in your browser's local storage for twelve (12) months, which lets us recognise that a browser has visited us before, so that someone returning for a birthday or a holiday is counted as a returning visitor rather than as a new one. Neither is a cookie, and neither follows you to other websites. The visitor identifier is capable of linking your visits to one another, so we treat it as personal data even though no name is attached to it.
7.3 Whether we ask you first depends on where you are. If you are in the United Kingdom or the European Economic Area, the law there requires your permission before anything is stored on your device for this purpose. So we ask on your first visit, and until you answer we store nothing on your device and send nothing to ourselves. If you decline, the measurement stays off and the events held in your browser's memory are discarded without ever reaching us. To know whom we must ask, our hosting provider tells us the country your connection appears to come from, as clause 2.9 describes; if we cannot tell where you are, we ask. Everywhere else, including the United Arab Emirates, the measurement is on when you arrive and we do not interrupt you to ask. Clause 7.4 applies to you wherever you are. Whichever way you answer, we record that answer so that we can honour it, as described in clause 9.2.
7.4 You can turn it off, wherever you are, and it stays off. Use the control at the bottom of this page, or the Analytics switch in your account settings. If you are signed in when you make the choice, we record it against your account, so it applies on every device you sign in on and we do not ask you again. If you are not signed in, the choice is stored in that browser and applies there; you would need to make it again on another device or in another browser. Where the two ever disagree, your account setting is the one we follow. Turning analytics off does not limit any part of the service.
7.5 We do not use Google Analytics, the Meta pixel, Google Tag Manager, or any advertising or cross-site tracking technology. We do not sell personal data, and we do not share it with data brokers or advertising networks.
8.1 What we send. Occasional email about new collections and bespoke pieces. We do not send email on behalf of anyone else, we do not sell or rent your address, and we do not share it with advertising networks or data brokers.
8.2 Why we are allowed to send it. Because you agreed to receive it, when you created your account, at checkout, or in your account settings. We record where and when you agreed. You can withdraw that agreement whenever you like, and clause 8.4 explains how.
8.3 What it never affects. Refusing marketing email, or unsubscribing later, does not stop the messages described in clause 3.5. You will still be told about your quotations, your orders, your payments, your deliveries and anything we need from you for the checks in clause 5. Those are part of the service and are not marketing.
8.4 How to stop it. Every marketing message carries an unsubscribe link, and your email program may also offer its own one-click unsubscribe. Either one takes effect immediately. You do not need to sign in, confirm, or give a reason. You can also turn marketing email off at any time in your account settings.
8.5 We keep a record of your unsubscribe, and that is deliberate. When you unsubscribe we add your email address to a suppression list. We keep that record permanently, and we keep it even if you close your account, so that a later sign-up with the same address does not start sending to you again. It holds your email address and the fact that you unsubscribed, it is used for nothing else, and clause 11.8 is the retention entry for it. The record itself is never deleted. What you can change is whether it is still stopping our email: to start receiving marketing email again, turn it back on in your account settings, or, if you no longer have an account, write to support@pieceunyq.com.
8.6 The law behind this section. We are established in the United Arab Emirates, so UAE consumer-protection law applies to how we advertise. If you are somewhere with its own marketing rules, such as the United Kingdom or the European Economic Area, those rules apply as well to email we send you there. Clauses 8.1 to 8.5 apply to you wherever you are.
9.1 We do not use advertising or tracking cookies.
9.2 Strictly necessary storage. When you sign in, our authentication provider stores a sign-in token in your browser so that you stay signed in. This is required for the service to work and is not subject to the choice in clause 7. Your choice about analytics is itself stored in your browser so that we can honour it and, where clause 7.3 applies, so that we do not ask you again.
9.3 Payment pages. Our payment provider's software loads only on pages where you are paying, and it may set its own cookies there for fraud prevention. It is not loaded when you are browsing the rest of the site.
9.4 Fonts. We serve our typefaces from our own site. Loading a page does not disclose your IP address to Google or to any other font service, and no cookie is set by this.
10.1 We use the following categories of service provider, each of which processes personal data on our behalf and under contract: hosting and application infrastructure; database, authentication and file storage; payment processing; sanctions and anti-money-laundering screening; artificial-intelligence design generation and moderation; and transactional email delivery. We do not name our providers here because they change; a current list of the providers we use is available on request from support@pieceunyq.com.
10.2 We also share what is necessary with our manufacturing and shipping partners so that your piece can be made and delivered to you, and with our professional advisers where we need advice.
10.3 We disclose personal data to a UAE authority, court or regulator where we are required to.
10.4 Transfers outside the UAE. Several of the service providers described in clause 10.1 operate outside the United Arab Emirates, so your personal data is processed outside the UAE. We select providers that offer contractual protections for the data they handle for us.
11.1 The principle. We keep each kind of data for as long as the law requires, and where the law sets no period, for as long as the purpose in clause 3 lasts. When a period ends we delete the data or anonymise it so that it can no longer be linked to you.
11.2 Anti-money-laundering records. We are required to keep the records described in clause 5, together with your transaction records, for at least five (5) years from the completion of the transaction or the end of our business relationship with you, whichever is the later. Clause 11.4 explains how identification documents are treated: where we ask for one, we keep it. This obligation comes from UAE anti-money-laundering law: the duty to keep the records is at Article 19(1)(f) of Federal Decree-Law No. 10 of 2025, and the five-year period is set by Article 25(1) of its Implementing Regulation, Cabinet Resolution No. 134 of 2025. We cannot delete these records at your request within that period, and a request to delete your account does not shorten it.
11.3 Orders, quotations, invoices and payment records. Seven (7) years from the end of the financial year in which the transaction falls. These are also tax records, and Article 56 of Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses requires them to be kept for that period.
11.4 Identification documents and source-of-funds evidence. Where a check calls for an identification document, we keep the copy you give us and the result of the check on exactly the footing clause 11.2 sets: at least five (5) years from the completion of the transaction or the end of our business relationship with you, whichever is later. The source-of-funds declaration is kept the same way. UAE anti-money-laundering law requires it, and the supervisory guidance on customer due diligence is unqualified that copies or records of official identification documents such as passports and identity cards must be kept. We deliberately do not keep any of it for the longer period in clause 11.3: this is among the most sensitive material we hold, and the tax obligation does not require it.
11.4.1 We take no photograph of your face. The check reads the document you give us and nothing else. Our provider's consent screen mentions biometric data because it covers all of that provider's services, not ours.
11.4.2 Most customers are never asked for a document at all, as clause 5.3.1 explains. Where you are not asked, nothing described in clause 11.4 or 11.4.1 is held about you.
11.5 Your account. For as long as your account is open. To close your account, write to support@pieceunyq.com. We delete or anonymise your account data within thirty (30) days of your request, except for anything clause 11.2, 11.3, 11.4 or 11.8 requires us to keep. Where we must keep an order record, we keep the order and remove your account identifiers from anything that does not need them.
11.6 Designs, prompts and generated images. For as long as your account is open. If a design became an order, we keep it for the period in clause 11.3, because it is the specification your piece was made to, it is the evidence behind the warranty, and it is what we would rely on if a design were ever challenged under clause 3 of the Terms of Sale. If you delete a design that never became an order, it is removed from your account straight away, and the generated image file is erased from our storage by an automatic clean-up that runs every week and clears image files created more than seven (7) days earlier, so the file is gone within fourteen (14) days at the latest. Until it is erased, the file is no longer reachable from your account or from anyone else's account, but a share link you created under clause 4.4 still opens it: as clause 4.4 says, a share link stops working when the file itself is erased, which here is up to fourteen (14) days after you delete the design. If you want it gone sooner, write to support@pieceunyq.com.
11.7 Analytics and operational records. Analytics events are deleted ninety (90) days after they are recorded, automatically and every night. They carry no name or email address, and they are linked to your account only if you were signed in when they were recorded; the visitor identifier described in clause 7.2 still links one visit to another, which is why clause 7.2 treats it as personal data. The session identifier they carry expires when you close the tab. The visitor identifier lasts twelve (12) months, which is deliberately longer than the events themselves: it lets us recognise a returning visitor across a seasonal gap, at a point when the record of what they did on an earlier visit has already been deleted. We also keep a log of the notifications we have sent you, and a log of the events our payment provider sends us, which is how we avoid acting on the same event twice. Both logs are deleted on the same ninety (90) day cycle. Neither is the order or payment record itself, which clause 11.3 keeps for seven (7) years. A notification that failed to send may be kept longer so that we can find out why.
11.8 Contact preferences and the suppression list. Your marketing setting is kept for as long as your account is open. If you unsubscribe, the suppression record described in clause 8.5 is kept permanently, including after your account is closed, because it is the only way to be sure a later sign-up with the same address does not start sending to you again. This is an exception to clause 11.5, and clause 13.3 explains what it means for your right to erasure.
11.9 Backups. Data can survive in encrypted backups for a short period after we delete it from our live systems. It is not used for anything, and it is overwritten on the normal backup cycle.
12.1 Design files, renderings, any identification document you give us and any source-of-funds evidence are held in private storage and served only through links that expire. The identification document and the source-of-funds evidence are reachable only by our Money Laundering Reporting Officer, and never by a production or shipping partner. Access to customer records is otherwise restricted by role, so that a production partner sees only what it needs to make your piece.
12.2 Card details never reach our systems, as set out in clause 2.5.
12.3 No system is perfectly secure. If a breach occurs that puts your personal data at risk, we will act on our notification obligations.
13.1 Subject to clause 13.3, you may ask us to give you a copy of the personal data we hold about you, correct it if it is wrong, delete it, restrict or object to how we use it, or provide it in a portable form. Where we rely on your consent, you may withdraw it at any time: that covers marketing email, which clause 8.4 explains how to stop, and analytics wherever clause 7.3 requires us to ask your permission first. Where analytics runs without our having asked, because clause 7.3 does not require it, you may object to it, and clause 7.4 is the quickest way to do so.
13.2 To exercise any of these, write to support@pieceunyq.com. We may need to verify your identity before we act, particularly on a request to delete or export data.
13.3 These rights are not absolute. Where we are legally required to keep something, in particular the anti-money-laundering records in clause 11.2, the tax records in clause 11.3 and the source-of-funds evidence in clause 11.4, we will keep it and tell you that we have. If you have unsubscribed from marketing email, we also keep the suppression record described in clauses 8.5 and 11.8, because erasing it would restart the email you told us to stop; clause 8.5 explains how to start receiving that email again if you ever want to. Clause 11.9 applies as well: for a short period after we delete something it can still exist in an encrypted backup. Where the law prohibits us from disclosing something, in particular a report of the kind described in clause 5.6, we will not disclose it, and in that case we cannot tell you what we have kept either.
13.4 If you are not satisfied with how we have handled your data, write to us first at support@pieceunyq.com. You may also complain to the UAE Data Office.
14.1 Our service is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to support@pieceunyq.com and we will delete it, subject to clause 13.3: if an order was completed, the anti-money-laundering records in clause 11.2 and the tax records in clause 11.3 have to be kept for their periods, and we will tell you what we have kept, so far as the law allows us to.
15.1 If we change this policy we will publish the new version here with a new version number and date. Where a change materially affects how we use your data, we will tell you.
Pieceunyq - F.Z.C, Ajman Free Zone, P.O. Box 92363, Ajman, United Arab Emirates. Email: support@pieceunyq.com.
This policy is governed by the laws of the United Arab Emirates, and the courts of the United Arab Emirates have jurisdiction over any dispute.
You have not chosen yet, so analytics is off.