Privacy Policy

Last updated: 11/05/2026

1. Introduction

This Privacy Policy explains how Zoya Commodities (“we”, “us”, “our”) collects, uses, stores, and protects personal information when you:

visit our website;

purchase products;

sell materials to us;

use our storage services;

contact us;

or otherwise interact with our business.

We are committed to protecting your privacy and handling personal data in accordance with applicable UK data protection laws, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

2. Who We Are

Zoya Commodities is a UK-based business dealing in:

precious metals;

collectible bullion;

reclaimed precious-metal objects;

buyback services;

and storage arrangements.

Contact Details

Zoya Commodities
Robin Court, Lupus Street
SW1V 3ED, London
United Kingdom

Email: sola@zoyacommodities.uk

3. Information We Collect

We may collect and process the following categories of personal information.

3.1 Identity Information

Including:

full name;

date of birth;

government-issued identification;

passport or driving licence details;

and proof of address documentation.

3.2 Contact Information

Including:

email address;

telephone number;

billing address;

delivery address;

and communication preferences.

3.3 Transaction Information

Including:

purchases;

sales;

buybacks;

quotations;

payment history;

storage arrangements;

and serialized product records.

3.4 Financial Information

Including:

bank account details;

payment confirmations;

transaction references;

and limited payment-related information.

We do not store full payment card details unless processed through approved third-party payment providers.

3.5 Compliance Information

To comply with anti-money laundering and regulatory obligations, we may collect:

identification records;

source of funds information;

transaction monitoring information;

compliance notes;

and due diligence documentation.

3.6 Technical Information

When you use our website, we may collect:

IP address;

browser type;

operating system;

device information;

pages visited;

referral URLs;

and website interaction data.

3.7 Communications

Including:

emails;

messages;

customer support requests;

social media communications;

and phone call records where applicable.

4. How We Use Your Information

We may use personal information for the following purposes.

4.1 To Provide Products and Services

Including:

processing orders;

arranging delivery;

managing storage services;

facilitating buybacks;

and providing customer support.

4.2 Identity Verification and Compliance

Including:

anti-money laundering checks;

fraud prevention;

customer due diligence;

sanctions screening;

and regulatory compliance.

4.3 Transaction Administration

Including:

invoicing;

payment processing;

authentication;

provenance tracking;

serialization records;

and archival documentation.

4.4 Website Improvement

Including:

analytics;

security monitoring;

debugging;

and improving user experience.

4.5 Marketing Communications

Where permitted by law, we may send:

product announcements;

collection releases;

archive updates;

storage service information;

newsletters;

and promotional communications.

You may unsubscribe at any time.

5. Legal Basis for Processing

Under UK GDPR, we process personal information based on:

contractual necessity;

legal obligations;

legitimate business interests;

consent where applicable;

and fraud prevention or compliance obligations.

6. Anti-Money Laundering and Compliance

As a precious-metals business, we are subject to anti-money laundering laws and regulations.

We may:

verify identity;

monitor transactions;

retain compliance records;

request source of funds information;

and report suspicious activity where legally required.

Failure to provide requested information may result in:

delayed transactions;

refusal of service;

cancellation of orders;

or reporting obligations.

7. Sharing Your Information

We may share personal information with trusted third parties where reasonably necessary.

7.1 Service Providers

Including:

payment processors;

shipping providers;

insurers;

IT providers;

customer management systems;

and website hosting providers.

7.2 Storage and Vaulting Providers

Where clients use secure storage services, relevant information may be shared with third-party vaulting or logistics providers.

7.3 Compliance and Legal Authorities

We may disclose information:

where required by law;

to regulatory authorities;

law enforcement agencies;

tax authorities;

or fraud prevention organisations.

7.4 Professional Advisers

Including:

accountants;

auditors;

insurers;

compliance consultants;

and legal advisers.

8. International Transfers

Certain service providers may process information outside the United Kingdom.

Where international transfers occur, we take reasonable steps to ensure appropriate safeguards are in place in accordance with applicable data protection laws.

9. Data Retention

We retain personal information only for as long as reasonably necessary, including for:

legal obligations;

anti-money laundering compliance;

tax requirements;

dispute resolution;

operational recordkeeping;

and security purposes.

Retention periods may vary depending on the nature of the relationship and applicable regulations.

10. Security Measures

We implement reasonable technical and organisational security measures designed to protect personal information from:

unauthorised access;

misuse;

loss;

disclosure;

alteration;

or destruction.

However, no method of transmission or storage can be guaranteed as completely secure.

11. Cookies and Analytics

Our website may use:

cookies;

analytics tools;

and similar technologies

to improve website functionality and understand visitor behaviour.

These technologies may collect:

IP addresses;

browser information;

usage patterns;

and interaction data.

You may manage cookie preferences through your browser settings.

12. Marketing Communications

Where permitted by law, we may send marketing communications relating to:

new collections;

archival releases;

precious-metal products;

storage services;

events;

and company updates.

You may opt out of marketing communications at any time by:

clicking unsubscribe links;

or contacting us directly.

13. Your Rights

Under applicable data protection laws, you may have rights including:

access to your personal information;

correction of inaccurate information;

deletion of information in certain circumstances;

restriction of processing;

objection to processing;

withdrawal of consent;

and data portability where applicable.

Certain rights may be limited where legal or regulatory obligations apply.

14. Complaints

If you have concerns regarding our handling of personal information, please contact us first.

You may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Information Commissioner's Office

15. Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices or content of external websites.

16. Children’s Privacy

Our services are not intended for individuals under the age of 18.

We do not knowingly collect personal information from children.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

Continued use of our services constitutes acceptance of any updates.

18. Contact Us

Zoya Commodities LTD
Robin Court, Lupus Street
SW1V 3ED, London
United Kingdom

Email: sola@zoyacommodities.uk