Alnora Gold (“we”, “our”, “us”) is committed to protecting your privacy and your personal data in a manner that is consistent with applicable laws and with the ethical principles and values of Shariah (Islamic law), including honesty (ṣidq), trust (amānah) and the protection of rights (ḥifẓ al-ḥuqūq).
This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, mobile applications, and related services for purchasing Shariah-compliant gold jewellery and gold bars (collectively, the “Services”).
By accessing or using our Services, you agree to the terms of this Privacy Policy.
The data controller for your personal data is:
Alnora Gold
[Company Registration No.]
No 24-4, Tingkat 3, Jalan SP2/8, Taman Serdang Perdana, Seksyen 2, 43300 Seri Kembangan, Selangor
support@alnoragold.com
0196986998
If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us at the details above.
We may collect and process the following categories of personal data about you:
3.1 Identification and contact details
Name
Email address
Mobile/phone number
Billing address and delivery address
National ID or passport number (if required by law for gold-related transactions)
3.2 Account and usage information
Username and password
Order history and transaction records
Preferences, saved items and wishlists
Communications with us (emails, chats, messages)
3.3 Payment and transaction information
Partial payment card details (processed via secure payment gateway; we do not store full card details on our systems)
Bank transfer information and proof of payment
Payment status and refund records
3.4 Technical information
IP address
Browser type and version
Device type and operating system
Log data, cookies and similar technologies (as described in our Cookies Policy, if any)
We process your personal data on the following bases:
4.1 Contractual necessity
To register your account
To process and fulfil your orders for gold jewellery and gold bars
To provide customer support and handle your requests
4.2 Legal obligations
To comply with anti-money laundering (AML), counter-terrorism financing (CTF), tax, customs and other regulatory obligations related to trading in gold and high-value items
To maintain proper records as required by applicable law and regulatory authorities
4.3 Legitimate interests
To improve our Services, website performance and user experience
To prevent, detect and investigate fraud, misuse and security incidents
To protect our rights, property and the safety of our customers and staff
4.4 Consent
For sending you marketing communications, promotions and offers, where required by law
For the use of certain cookies or similar technologies (where consent is legally required)
Where consent is used as a basis, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
In line with Shariah principles, we only process data for fair and lawful purposes, and avoid any use of data that would support prohibited (ḥarām) activities such as interest-based (ribā) products, gambling (maysir), or deceptive practices.
We use your personal data only for purposes that are lawful and consistent with Shariah and applicable law, including to:
Process your registrations, logins and account management
Confirm, process, and deliver your orders for gold jewellery and gold bars
Provide order updates, invoices, receipts and shipping notifications
Respond to your inquiries, complaints and feedback
Provide post-sale services such as returns, exchanges and warranty support (if applicable)
Verify your identity where required by law or our internal risk policies
Conduct AML/CTF checks and other compliance screenings related to gold trading
Improve our website, products and Services based on aggregated usage data
Send you marketing communications, promotions and product recommendations, where permitted and with your consent where required
Protect against fraud, unauthorized transactions and misuse of our platform
We will not sell, rent or trade your personal data to any party. Any use of your data will respect the principles of confidentiality and trust (amānah) as emphasised in Shariah.
We may use cookies and similar technologies to:
Enable core site functionality such as login and shopping cart
Remember your preferences and settings
Analyse site traffic and usage to improve performance
You may manage your cookie preferences through your browser settings. However, disabling certain cookies may affect the functionality of the Services.
We may disclose your personal data to the following categories of recipients, on a need-to-know basis and with appropriate safeguards:
7.1 Service providers
Payment gateways and financial institutions processing your payments
Logistics and courier companies delivering your orders
IT, hosting, cloud storage, cybersecurity and analytics service providers
Customer support and communication platforms used to serve you
7.2 Professional and regulatory parties
Auditors, legal advisors, Shariah advisors and consultants
Government authorities, law enforcement agencies, regulators and tax authorities, where required by law
7.3 Business transfers
In connection with any merger, acquisition, sale of assets, restructuring or financing involving our business, where permitted by law and subject to confidentiality obligations
We require all third parties who receive your personal data to respect its confidentiality, use it only for specified lawful purposes, and implement appropriate security measures. We will not knowingly share your personal data with third parties engaging in activities that contradict Shariah principles, such as conventional interest-based financing or gambling operations, where we can reasonably avoid such association.
Your personal data may be transferred to and processed in countries other than your own, where our servers, group companies or service providers are located. In such cases, we will:
Ensure that the receiving country affords an adequate level of data protection under applicable law; or
Implement appropriate safeguards (such as standard contractual clauses or equivalent mechanisms) to protect your personal data.
We will take reasonable technical and contractual measures to ensure that your data remains secure and is used only in a manner consistent with this Privacy Policy and Shariah principles.
We will retain your personal data only for as long as reasonably necessary to:
Fulfil the purposes for which it was collected
Perform our contractual obligations to you
Comply with legal, regulatory, accounting and reporting requirements, particularly those applying to gold and high-value goods
When your personal data is no longer needed for these purposes, we will securely delete, anonymise or irreversibly de-identify it, unless we are required by law to retain it for a longer period.
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. These measures may include:
Use of encryption and secure protocols (such as HTTPS)
Access controls and authentication for staff and systems
Regular security reviews, updates and monitoring
Restricting access to personal data to employees and service providers who need it to perform their duties and are bound by confidentiality obligations
While we strive to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are encouraged to protect your account credentials, use strong passwords and log out after use.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
Right to access: To request a copy of the personal data we hold about you
Right to rectification: To request correction of inaccurate or incomplete data
Right to erasure: To request deletion of your personal data, subject to legal retention requirements
Right to restriction: To request limitation of the processing of your personal data
Right to data portability: To request that your data be provided to you or to another controller in a structured, commonly used and machine-readable format, where applicable
Right to object: To object to certain types of processing, including direct marketing
Right to withdraw consent: Where processing is based on consent, to withdraw that consent at any time
To exercise your rights, please contact us using the details provided in Section 2. We may need to verify your identity before responding to your request.
Our Services are not intended for, and we do not knowingly collect personal data from, children below the minimum legal age in your jurisdiction without verifiable parental or guardian consent. If we become aware that we have collected personal data from a child in violation of applicable law, we will take steps to delete such data as soon as reasonably practicable.
As a company offering Shariah-compliant gold jewellery and gold bars, we aim to ensure that our handling of personal data aligns not only with applicable data protection laws but also with Shariah ethics and values. In particular:
We treat personal data as a trust (amānah) that must not be misused or disclosed unjustly.
We avoid using your data for promoting unlawful (ḥarām) products or services, including interest-based financial products, gambling, or deceptive schemes.
We cooperate with our Shariah advisors and Shariah committee (where applicable) to ensure that our practices, including data-related practices, are consistent with Shariah governance requirements.
Our website or applications may contain links to third-party websites, apps or services. We are not responsible for the privacy practices, content or Shariah compliance of these third parties. We encourage you to review their privacy policies before providing any personal data.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or Shariah governance guidelines. When we make material changes, we will update the “Last updated” date at the top of this policy and, where required, notify you through our website, email or other appropriate means.
Your continued use of the Services after such changes take effect constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, requests or complaints regarding this Privacy Policy or our handling of your personal data, please contact:
Alnora Gold
[Data Protection/Privacy Officer, if any]
No 24-4, Tingkat 3, Jalan SP2/8, Taman Serdang Perdana, Seksyen 2, 43300 Seri Kembangan, Selangor
support@alnoragold.com
0196986998
We will do our best to respond promptly and fairly, in a manner consistent with our legal obligations and our commitment to Shariah-compliant ethical conduct.
