Privacy Policy

BYORO, a brand of TOP TEN JEWELLERY L.L.C ("BYORO", "we", "us", "our")

Last updated: 30 September 2026

This Privacy Policy explains how we collect, use, share and protect personal data when you visit byoro.ae, use our online concierge chat, visit our showroom, or contact us on WhatsApp, Instagram or other messaging channels. By using these services you confirm you have read this policy.

1. Who we are

BYORO is a fine jewellery brand based in Dubai, United Arab Emirates, with a showroom in JBR. The brand is operated by TOP TEN JEWELLERY L.L.C, which is the controller of the personal data described in this policy.

• Legal entity: TOP TEN JEWELLERY L.L.C (Limited Liability Company, Single Owner), Dubai Commercial License No. 894512
• Address: Al Fattan Marine Towers, Shopping Center, Shop 27, 1st Floor, JBR, Dubai, United Arab Emirates
• Contact: info@byoro.ae

2. Personal data we collect

Information you give us

• Name, email address, phone number, billing and shipping address, and your order history and preferences.
• Details of your enquiry or order: pieces you are interested in, budget, ring size, occasion, preferences, dates of visits, deliveries and appointments.
• The content of your messages to us: text, photos, videos, voice messages, documents and any other files you send on our website chat, WhatsApp, Instagram or other channels.
• Payment details are entered with our payment providers, not with us. We only receive confirmation of the payment and its status.

Information we receive from messaging platforms

When you write to us on WhatsApp or Instagram, the platform provides us with information about you and your message, for example:

• your WhatsApp phone number and profile name;
• your Instagram account ID, username, display name and profile picture;
• the time, delivery and read status of messages;
• if you came from one of our ads (Click-to-WhatsApp or Click-to-Instagram), the ad and click identifiers that let us know which ad you responded to.

Information collected automatically on our website

IP address, browser type and device information, pages visited, time spent, referring website and cookie identifiers, including advertising identifiers (see section 10).

3. How we use personal data

• To answer your questions, recommend and show pieces, send photos, videos and price information, and arrange showroom visits, appointments and delivery.
• To take, produce, deliver, resize, repair and service orders, including custom orders, and to honour warranties.
• To send order updates and confirmations.
• To process payments, issue invoices and keep accounting records.
• To manage our customer records and conversations in our customer management system (CRM), so that any member of our team can continue a conversation with full context.
• To provide our online concierge and to help our team write replies (see section 5).
• To improve our products, services, website and team performance, including reviewing the speed and quality of replies.
• To measure and improve our advertising, and to show our ads to people likely to be interested (see section 9).
• To send you marketing messages (new collection announcements, exclusive offers, brand updates) where you have agreed to receive them. You can unsubscribe at any time using the unsubscribe link in our emails or by contacting us.
• To prevent fraud and abuse, keep our systems secure, resolve disputes and comply with the law.

4. Messaging on WhatsApp, Instagram and other channels

• We use the WhatsApp Business Platform and Instagram messaging provided by Meta Platforms, and messaging service providers that help us run them (currently Wazzup, and our own messaging software). Messages you send to us through these channels pass through these services. Your use of WhatsApp and Instagram is also governed by their own terms and privacy policies.
• We reply to messages you send us. We send you messages on our own initiative only where you have asked us to, or where the platform rules and the law allow it. On WhatsApp we use approved message templates where required.
• Conversations are stored in our systems so that our team can see the history. Photos, videos and files you send are stored so that we can answer you and, for orders, reproduce what you asked for.
• Voice messages may be converted to text automatically so that our team can read them.
• You can stop receiving messages from us at any time by telling us in the chat or by writing to info@byoro.ae.

5. Our AI concierge and AI-assisted replies

• Our online concierge chat on byoro.ae is powered by artificial intelligence provided by third-party AI service providers (currently Anthropic). Your messages in the chat are sent to the provider so that it can produce a reply.
• On messaging channels, our team may use an AI assistant that reads the conversation and the details of the piece you are asking about and proposes a draft reply. A member of our team reads, edits and sends the message. The assistant does not send messages to you on its own, and no decision that has legal or similarly significant effect on you is made by AI alone.
• We share with AI providers only what is needed to produce the reply: the conversation, details of the piece and, where relevant, basic information in your customer record. Please do not send us sensitive information that is not needed for your enquiry.

6. Who we share data with

We do not sell your personal data. We share it with:

• Messaging and social platforms: Meta Platforms (WhatsApp and Instagram) and our messaging service providers, to deliver messages.
• Customer management and business software: Zoho (CRM, Books, Inventory) and similar tools we use to manage customers, orders, invoices and stock.
• Website and shop platform: Shopify and related services.
• Payment processors: for example Stripe and card terminals, to take payments.
• AI service providers: to provide the concierge and assisted replies (section 5).
• Shipping and delivery companies: to deliver your order.
• Workshops and production partners: only the details needed to make or repair your piece.
• Cloud hosting, storage, security and IT providers: to run our systems and store data.
• Advertising platforms such as Meta and Google: as described in section 9.
• Professional advisers, authorities and courts: where we are required or permitted by law.

These providers may only use the data for the services they provide to us and under appropriate confidentiality and security obligations.

7. International transfers

Our service providers may be located or store data outside the United Arab Emirates, including in the European Union, the United Kingdom and the United States. Where we transfer personal data abroad we take steps to ensure it remains protected as required by applicable law.

8. How long we keep data

We keep personal data only as long as needed for the purposes in this policy, including to serve you, to honour warranties and provide after-sales service for our jewellery, to keep tax and accounting records, and to resolve disputes. Conversation records are kept for as long as you remain a customer or prospective customer and for a reasonable period afterwards. When data is no longer needed we delete or anonymise it. You can ask us to delete your data at any time (section 12).

9. Advertising and measurement

We advertise on Meta platforms (Facebook and Instagram) and other channels. To measure results and to show our ads to relevant audiences we may share with these platforms information such as your contact details in encrypted (hashed) form, the fact that you enquired or bought, and ad and click identifiers. You can control ad personalisation in your Facebook, Instagram and Google settings and can opt out by contacting us.

10. Cookies

Our website uses cookies and similar technologies to make the site work, remember your basket and preferences, analyse traffic and support marketing. You can disable cookies in your browser settings; some parts of the website may then not work properly.

11. Security

We use technical and organisational measures to protect personal data, such as access controls for our team, encrypted connections and restricted access to conversation records. No system is completely secure, so please take care with the information you choose to send.

12. Your rights and how to delete your data

Subject to applicable law, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you may:

• ask for access to the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your data;
• object to or restrict certain processing, and withdraw consent (for example for marketing) at any time;
• ask for a copy of your data in a commonly used format.

To exercise any of these rights, including deleting your WhatsApp, Instagram or chat conversation data, write to info@byoro.ae from the email address you use with us, or message us on the channel you used, with the subject "Data request" and your phone number or Instagram username so that we can find your records. We may need to verify your identity. We will respond within 30 days. Some data we must keep by law (for example invoices); we will tell you if that applies.

13. Third-party links

Our website and messages may contain links to external websites. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies separately.

14. Children

Our services are not directed at people under 18 and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. The latest version is always on this page, with the date of the last update at the top.

16. Governing law and contact

This policy is governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai. For any question about this policy or your data, contact us at info@byoro.ae.