Legal
Privacy Policy
This policy explains what information Haya Abaya collects when you use this site, why we collect it, and the choices you have. We collect only what we need to run the store well and never sell your personal information.
1. Information we collect
- Account details — name, email, and password (stored securely and never in plain text) when you register or sign in.
- Order information — shipping address, phone number, and order contents, needed to fulfil and deliver your order.
- Shopping activity — items in your cart and wishlist, so they're there when you return, and product reviews you choose to submit.
- Newsletter details — your email address, only if you choose to subscribe, and only for the purpose you subscribed for.
- Contact messages — whatever you send us through our Contact form, so we can reply.
- Region and language preference — stored in a cookie so the correct pricing, currency, and language are shown on your return visit.
2. How we use your information
We use the information above to:
- Process, ship, and support your orders, including returns and refunds.
- Keep your account, cart, and wishlist working across your devices.
- Respond to messages you send us.
- Send order and account emails (confirmations, shipping updates, password resets).
- Send newsletter emails, only if you've subscribed, and only until you unsubscribe.
- Show the correct regional pricing, stock, and delivery information.
- Improve the site and prevent fraud or abuse.
3. Cookies and local storage
We use a small number of cookies and browser storage entries to remember your region and language, keep you signed in, and keep your cart and wishlist in sync. These are functional rather than advertising cookies — we don't use third-party ad trackers on this site.
4. Sharing your information
We don't sell your personal information. We share it only where necessary to run the store — for example with our delivery partners (to ship your order), our hosting and database providers (to store your data securely), and where required by law.
5. Data retention
We keep account and order information for as long as your account is active or as needed to meet our legal and accounting obligations. You can ask us to delete your account data at any time, subject to records we're required to retain.
6. Your rights
You can access, correct, or request deletion of your personal information, and unsubscribe from marketing emails at any time using the link in those emails. To make a request, contact us via our Contact page.
7. Security
We use industry-standard safeguards — including encrypted connections and access-controlled databases — to protect your information. No method of transmission or storage is perfectly secure, but we work to keep your data protected at every step.
8. Changes to this policy
We may update this policy as our practices evolve. The version published on this page is always the current one.
9. Contact
Questions about this policy or your data are welcome any time through our Contact page.
