Privacy

zarif is a house dealing in hand-knotted Persian carpets, operating from the United Kingdom. For the purposes of UK data protection law, zarif is the controller of the personal information described in this policy. Questions and requests can be sent to zarif.boutique@outlook.com.

When you write to us, submit an enquiry or acquisition request, apply to the trade programme or subscribe to our notes, we receive the details you choose to give: typically your name, contact details, location, and the substance of your enquiry — which, for sourcing briefs, may include preferences such as sizes, colours and budget.

When an acquisition proceeds, we additionally hold the information needed to invoice, deliver and insure: billing and delivery addresses, and records of payments made against invoices. We do not see or store card details; payment is handled through secure invoicing.

Browsing the site itself requires no account. Preferences you set here — your bag, recently viewed pieces, country and currency — are stored in your own browser and are not transmitted to us. See the cookie policy for detail.

We use your information to answer you, to conduct searches you have commissioned, to confirm availability, to issue invoices and receive payment, and to arrange viewings, delivery and insurance. The legal basis for this is the performance of a contract with you, or the steps you have asked us to take before one.

We keep records of acquisitions and correspondence about them on the basis of our legitimate interest in maintaining the provenance history of the pieces we handle, and to meet legal and accounting obligations. We send our occasional letter only to those who have subscribed, on the basis of consent, which every letter allows you to withdraw in one step.

We do not sell personal information, share it for advertising, profile visitors, or add anyone to lists they did not ask to join.

Personal information is shared only where the work requires it: with specialist carriers and insurers to deliver a piece, with payment and invoicing providers to process a transaction, and with the professional advisers and IT providers who support the business — each bound to use it solely for that purpose. We may also disclose information where the law requires it.

Where a provider processes information outside the United Kingdom, we ensure appropriate safeguards recognised by UK law are in place, such as adequacy regulations or standard contractual clauses.

Enquiries that do not lead to an acquisition are retained for up to two years, then deleted. Records of acquisitions — invoices, delivery records and related correspondence — are retained for as long as the law requires for tax and accounting purposes, and, in summary form, as part of the provenance record of the piece. Newsletter details are kept until you unsubscribe.

You have the right to ask what information we hold about you and to receive a copy; to have it corrected or completed; to have it deleted where there is no continuing reason to keep it; to restrict or object to particular uses; and to receive information you provided in a portable form. Where processing rests on consent, you may withdraw that consent at any time.

To exercise any of these rights, write to zarif.boutique@outlook.com; we respond promptly and without ceremony. You also have the right to complain to the Information Commissioner's Office (ico.org.uk), though we would welcome the chance to resolve any concern directly first.

If our practices change — for example, when online checkout or client accounts are introduced — this policy will be updated before the change takes effect, and the date below revised. This version was last updated in July 2026.