Privacy Policy

Effective Date: 22 June 2026

1. Introduction

Hadiya (“Hadiya”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you:

Visit or use our website.
Place an order for our products.
Contact our customer service team.
Subscribe to our marketing communications.
Interact with us through social media, advertisements, or other digital channels.

By using our website or submitting your personal information to us, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Information We Collect

We collect only the information reasonably required to operate our business, process orders, provide delivery services, improve the customer experience, and comply with applicable legal obligations.

2.1 Information You Provide to Us

Depending on how you interact with Hadiya, we may collect:

Full name.
Email address.
Mobile phone number.
Billing address.
Delivery address.
Recipient name and contact details.
Order and purchase information.
Product preferences and selected colors.
Gift messages or delivery instructions.
Customer service enquiries and correspondence.
Reviews, feedback, or survey responses.
Marketing communication preferences.
Any other information you choose to provide.

When you provide personal information relating to another person, such as a gift recipient, you confirm that you are authorised to provide that information for order fulfilment and delivery purposes.

2.2 Payment Information

Payments may be processed through authorised third-party payment service providers.

Hadiya does not generally store complete debit or credit card information. Payment providers may collect and process payment details directly in accordance with their own privacy and security policies.

We may receive limited payment-related information, such as:

Payment status.
Transaction reference.
Payment method type.
Billing confirmation.
Refund or cancellation status.

2.3 Information Collected Automatically

When you access or use our website, certain technical information may be collected automatically, including:

Internet Protocol address.
Browser type and version.
Device type and operating system.
Pages viewed and time spent on the website.
Referring website or advertising source.
Website interactions and navigation activity.
Approximate geographic location.
Cookie identifiers and similar technologies.
Technical error, performance, and security information.

This information helps us maintain website security, understand customer behaviour, improve website performance, and provide a more relevant shopping experience.

2.4 Information Received from Third Parties

We may receive information from third parties involved in providing our services, including:

Payment service providers.
Delivery and logistics companies.
Website hosting and e-commerce platforms.
Analytics and advertising providers.
Social media platforms.
Customer service and communication tools.
Fraud prevention and security providers.

Information received from these parties will be handled in accordance with this Privacy Policy and applicable law.

3. How We Use Personal Information

We may use personal information to:

Create and manage customer orders.
Process and confirm payments.
Prepare, package, and deliver products.
Contact customers or recipients regarding delivery.
Confirm delivery addresses, dates, times, and locations.
Process approved returns, refunds, or exchanges.
Provide customer service and respond to enquiries.
Send order confirmations and delivery updates.
Detect and prevent fraud, misuse, or security incidents.
Maintain and improve our website and services.
Analyse website performance and customer preferences.
Personalise website content and product recommendations.
Manage customer reviews, feedback, and surveys.
Send promotional communications where permitted.
Comply with legal, accounting, regulatory, or tax obligations.
Establish, exercise, or defend legal claims.
Protect the rights, property, and safety of Hadiya, our customers, and third parties.

We will not use personal information for purposes that are materially different from those described in this Privacy Policy unless permitted by law or communicated to you appropriately.

4. Legal Grounds for Processing

Where required under applicable law, we process personal information on one or more of the following grounds:

Your consent.
Performance of a contract with you, including processing and delivering an order.
Compliance with a legal or regulatory obligation.
Protection of our legitimate business interests, where permitted by law and where those interests do not override your privacy rights.
Establishment, exercise, or defence of legal claims.
Protection of the rights or safety of customers, recipients, employees, or third parties.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal will not affect processing that occurred lawfully before the consent was withdrawn.

5. How We Share Personal Information

We may share personal information only when reasonably necessary for the purposes described in this Privacy Policy.

5.1 Service Providers

Information may be shared with trusted third-party providers that assist us with:

Website hosting and e-commerce operations.
Payment processing.
Order management and fulfilment.
Delivery and logistics.
Customer support.
Email, SMS, or messaging services.
Website analytics.
Advertising and marketing.
Data storage and cloud services.
Cybersecurity and fraud prevention.
Professional legal, accounting, and advisory services.

These providers are permitted to process information only for authorised purposes and are expected to apply appropriate confidentiality and security measures.

5.2 Delivery Partners

We may provide delivery companies and drivers with information required to complete an order, including:

Customer or recipient name.
Mobile phone number.
Delivery address.
Delivery date or time.
Location instructions.
Relevant order information.

Delivery partners must use this information only to coordinate and complete delivery or address a delivery-related issue.

5.3 Legal and Regulatory Disclosures

We may disclose personal information where reasonably necessary to:

Comply with applicable law or a lawful request.
Respond to a court order or regulatory authority.
Investigate suspected fraud or unlawful activity.
Protect the rights, safety, or property of Hadiya or another person.
Enforce our Terms and Conditions.
Establish or defend legal claims.

5.4 Business Transfers

If Hadiya undergoes a merger, acquisition, restructuring, sale, or transfer of business assets, personal information may be transferred as part of that transaction, subject to applicable confidentiality and data protection requirements.

6. Sale of Personal Information

Hadiya does not sell or rent customers’ personal information to third parties.

We may use selected service providers for analytics or advertising purposes, as explained in this Privacy Policy and our cookie settings.

7. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage, and similar technologies to operate correctly and understand how visitors use the website.

Cookies may include:

Essential Cookies

These cookies are required for core website functions, such as:

Shopping cart operation.
Checkout.
Secure account access.
Payment processing.
Fraud prevention.
Website security.

Functional Cookies

These cookies may remember preferences such as:

Language.
Region.
Recently viewed products.
Display or website preferences.

Analytics Cookies

These cookies help us understand:

How visitors use the website.
Which pages and products are viewed.
How customers navigate through the website.
Whether errors or performance issues occur.

Advertising Cookies

These cookies may be used to:

Measure advertising performance.
Display more relevant advertisements.
Understand whether a customer arrived through an advertising campaign.
Limit repeated advertising.

Where required, non-essential cookies will be used only after obtaining appropriate consent.

You may manage cookies through your browser settings or any cookie preference tool available on our website. Disabling certain cookies may affect website functionality.

8. Marketing Communications

Where permitted, we may send promotional communications about:

New products.
Special collections.
Seasonal gifting.
Offers and promotions.
Events and brand updates.

You may unsubscribe at any time by:

Selecting the unsubscribe option in an email.
Following the opt-out instructions in a message.
Contacting us using the details provided below.

Unsubscribing from marketing communications will not prevent us from sending essential transactional messages relating to active orders, payments, deliveries, refunds, or customer service matters.

9. Data Retention

We retain personal information only for as long as reasonably necessary to:

Fulfil orders and provide our services.
Maintain transaction and accounting records.
Process refunds, exchanges, or customer enquiries.
Meet legal, regulatory, tax, and reporting requirements.
Resolve disputes.
Prevent fraud and maintain security.
Enforce agreements and protect legal rights.

Retention periods may differ depending on the type of information, the purpose for which it was collected, and applicable legal requirements.

When personal information is no longer required, we will take reasonable steps to securely delete, anonymise, or otherwise dispose of it.

10. Data Security

We apply reasonable administrative, technical, and organisational measures designed to protect personal information against:

Unauthorised access.
Accidental loss.
Misuse.
Alteration.
Disclosure.
Destruction.

These measures may include access controls, secure hosting, encrypted transmission where appropriate, restricted staff access, monitoring, and security procedures.

No website, electronic transmission, or storage system can be guaranteed to be completely secure. Customers should protect their devices, passwords, and account information and should contact us promptly if they suspect unauthorised activity.

Where required by applicable law, we will notify the relevant authorities and affected individuals of qualifying personal data breaches.

11. International Data Transfers

Some service providers or technology platforms used by Hadiya may process or store personal information outside the United Arab Emirates.

Where personal information is transferred internationally, we will take reasonable measures to ensure that the transfer is made in accordance with applicable data protection requirements, including through recognised safeguards, contractual protections, or transfers to jurisdictions providing an appropriate level of protection.

12. Your Privacy Rights

Subject to applicable law and any permitted limitations, you may have the right to:

Request information about the personal data we process.
Request access to your personal information.
Request correction of inaccurate or incomplete information.
Request deletion of personal information in certain circumstances.
Request restriction or suspension of certain processing.
Object to certain uses of personal information.
Withdraw consent where processing relies on consent.
Request a portable copy of eligible personal information.
Request transfer of eligible information to another controller where technically feasible.
Object to certain automated decisions where applicable.
Submit a complaint regarding the processing of your information.

We may request information to verify your identity before processing a privacy request. We may also retain certain information where required or permitted by law.

To exercise a privacy right, contact us using the details listed in the Contact Us section.

13. Third-Party Websites and Services

Our website may contain links to websites, payment platforms, social media services, or applications operated by third parties.

Hadiya is not responsible for the privacy, security, or content practices of third-party services. We encourage you to review their privacy policies before providing personal information.

14. Children’s Privacy

Our website and products are not directed specifically at children, and we do not knowingly collect personal information from children without appropriate authorisation where required.

If you believe that a child has provided personal information to us improperly, please contact us so that we can review and take appropriate action.