Privacy policy

Last Updated: March 2026

Welcome to Ghafara (“we,” “our,” or “us”). We are committed to protecting your privacy and personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable international data protection regulations.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website www.ghafara.com and make purchases from our online store.

1. Information We Collect

Personal Information

When you visit our website, register an account, or make a purchase, we may collect the following information:

• Full name
• Email address
• Phone number (including UAE mobile number)
• Shipping and billing address
• Payment information (credit/debit card details processed securely through our payment gateway)
• Order history and preferences

Automatically Collected Information

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the collected information for the following purposes:

• To process and fulfill your orders for abayas, scarves, and other products
• To send order confirmations, shipping updates, and delivery notifications
• To communicate with you regarding your purchases or inquiries
• To improve our website, products, and customer service
• To send promotional emails and offers (only with your consent)
• To comply with legal obligations under UAE law
• To prevent fraud and ensure website security

3. Payment Security

All payment transactions are processed through our trusted payment gateways — Paymob, Stripe, and PayPal. We do not store your full credit card details on our servers. All payment data is encrypted using SSL (Secure Socket Layer) technology and handled in compliance with PCI-DSS (Payment Card Industry Data Security Standard) requirements.

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your data with:

• Shipping Partners: To deliver your orders (e.g., Quickup)
• Payment Processors: To process your payments securely via Paymob, Stripe, and PayPal
• Legal Authorities: When required by UAE law or court order
• Service Providers: Third-party services that help us operate our website (hosting, analytics, email services)

5. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your experience. We use the following types of cookies:

• Essential Cookies: Required for the website to function properly (shopping cart, login sessions, checkout process). These cannot be disabled.
• Analytics Cookies: Help us understand how visitors use our website so we can improve it (e.g., Google Analytics).
• Marketing Cookies: Used to deliver relevant advertisements and track campaign performance (e.g., Facebook Pixel, Instagram tracking).

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect core website functionality, but may limit personalized features.

6. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by UAE law. Order-related data is kept for a minimum of 5 years for accounting and legal compliance.

7. Your Rights

Under the UAE PDPL and applicable laws, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your personal data (subject to legal requirements)
• Withdraw consent for marketing communications at any time
• Object to the processing of your data

To exercise any of these rights, please contact us at info@ghafara.com.

8. User Accounts & Security

8.1 Account Responsibility

By creating an account with Ghafara, you assume full responsibility for maintaining the confidentiality of your login credentials. You are entirely liable for all activities, transactions, and interactions that occur under your account. We prioritize the security of our clientele; therefore, any unauthorized use of your account or any other breach of security must be reported to our concierge team immediately.

8.2 Accuracy of Information

To maintain the integrity of our services, you agree to provide accurate, current, and complete information. Providing false contact details or impersonating another entity is strictly prohibited and may result in the immediate termination of your account and the cancellation of pending orders.

8.3 Liability and Omissions

Ghafara shall not be held liable for any acts or omissions by you, including any damages of any kind incurred as a result of such actions. This includes, but is not limited to, the loss of access due to forgotten credentials or the misuse of your account by third parties.

8.4 Account Suspension & Termination

We reserve the right to suspend, disable, or permanently delete your account (or any part thereof) if it is determined that you have violated any provision of this Agreement. Furthermore, actions that we deem damaging to the Ghafara reputation, brand image, or goodwill will result in immediate account restriction.

8.5 Registration Restrictions

If an account is terminated due to a breach of terms, re-registration is strictly prohibited. To protect the Ghafara community, we reserve the right to block specific email addresses and Internet Protocol (IP) addresses to prevent further attempts at registration.

9. Third-Party Services & Links

Our website uses the following third-party services that collect data independently:

• Google Analytics — to analyze website traffic and user behavior
• Facebook / Meta Pixel — for advertising and conversion tracking
• Paymob, Stripe, PayPal — for secure payment processing
• WhatsApp (Meta) — for customer communication

These services operate under their own privacy policies. Our website may also contain links to third-party websites (social media, payment gateways, etc.). We are not responsible for the privacy practices of these external websites.

10. International Customers & Data Transfers

As we serve customers worldwide, your data may be transferred to and processed in countries outside the UAE. We ensure appropriate safeguards are in place to protect your data. If you are located in the EU/EEA, your data is also protected under the GDPR. By placing an order from outside the UAE, you consent to the transfer and processing of your data in the UAE.

11. Children’s Privacy

Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

• Company: Ghafara
• Address: Dubai, UAE
• Email: info@ghafara.com
• Phone: +971 50 358 3983