PRIVACY POLICY

Last Updated: August 2026

Khayal Art respects the privacy of visitors and customers of our online store. We are committed to handling personal data responsibly and transparently and taking appropriate measures to protect it in accordance with applicable laws and regulations in the United Arab Emirates, including applicable personal data protection, consumer protection, and e-commerce requirements.

This Privacy Policy explains how we collect, use, store, share, and protect information when you visit our website, communicate with us, or make a purchase.

1. Personal Data We May Collect

We may collect information you provide directly, including:

• Name.
• Phone number.
• Email address.
• Shipping and delivery address.
• Emirate and area.
• Order and purchase information.
• Payment-related information necessary to process your order.
• Communications through email, telephone, or WhatsApp.
• Information provided for custom-made orders.
• Other information you voluntarily provide when communicating with us.

We may also automatically collect certain information when you use our website, including:

• IP address.
• Device type.
• Browser and operating system.
• Pages and products viewed.
• Date and time of visits.
• Referral source.
• Website interactions.
• Cookies, online identifiers, and similar technologies.

2. How We Use Personal Data

We may use personal data to:

• Create, process, and fulfill orders.
• Confirm orders.
• Prepare, ship, and deliver products.
• Provide order status updates.
• Process returns, exchanges, and refunds.
• Provide customer support.
• Respond to complaints and inquiries.
• Verify orders and help prevent fraud or misuse.
• Operate and improve our online store.
• Analyze website performance and customer experience.
• Improve products and services.
• Send marketing communications where permitted or where required consent has been obtained.
• Measure advertising and marketing performance.
• Comply with legal, regulatory, and accounting obligations.
• Protect our rights, customers, and business.

3. Basis for Processing

We process personal data where necessary to fulfill an order or provide requested services, comply with legal obligations, based on consent where required, or for other legitimate and legally permitted purposes.

Where processing relies on consent, you may withdraw that consent subject to applicable law. Withdrawal does not affect processing lawfully carried out before withdrawal.

4. Shopify

Our store is powered by Shopify.

Shopify may therefore process information required to host and operate our store and provide e-commerce functionality, security, analytics, and related services.

Information may be processed or stored by Shopify and its service providers in different countries in accordance with their privacy and data protection arrangements.

We encourage customers to review Shopify's Privacy Policy for further information about Shopify's processing practices.

5. Service Providers and Delivery Companies

We may provide necessary information to service providers, including:

• Shipping and delivery companies.
• Shopify.
• Website hosting and technology providers.
• Email and communications providers.
• Analytics providers.
• Marketing and advertising providers.
• Payment providers if electronic payments are introduced.
• Other professional or technical providers necessary to operate our store.

For example, your name, phone number, address, and delivery information may be shared with a delivery company to fulfill your order.

We aim to share only information reasonably necessary for the relevant service.

6. Payment Methods

We currently accept:

• Cash on Delivery (COD).
• Bank Transfer.

Credit and debit card payments are currently unavailable.

If electronic payment gateways are introduced in the future, payment information may be processed by the relevant payment provider according to its own terms, security practices, and privacy policy.

7. Cookies

Our website uses or may use cookies and similar technologies.

These may include:

Essential Cookies: Required for functions such as shopping carts, navigation, accounts, and checkout.

Analytics Cookies: Used to understand website usage and improve performance.

Preference Cookies: Used to remember certain customer choices.

Advertising Cookies: May be used to measure advertising campaigns or provide more relevant advertising, subject to applicable settings and consent requirements.

Users may manage cookies through their browser or privacy/consent controls available on our website, where applicable.

Disabling essential cookies may affect website functionality.

8. Google Analytics

We may use Google Analytics or similar analytics services to understand how users interact with our website.

Information processed may include device and browser information, pages visited, referral sources, website interactions, and other technical information.

If these services are not currently enabled, this section applies if and when they are enabled.

9. Meta Pixel

We may use Meta Pixel and related technologies from platforms such as Facebook and Instagram to measure advertising performance and customer interactions.

These technologies may measure events such as viewing a product, adding an item to a cart, or completing a purchase.

Meta may process information according to its own privacy terms and policies.

If these tools are not currently enabled, this section applies if and when they are enabled.

10. Other Analytics and Advertising Platforms

We may use additional services in the future, including Google Ads, TikTok, Snapchat, or similar platforms.

These services may use cookies, pixels, or similar technologies for analytics, advertising measurement, and marketing, subject to applicable settings, consent requirements, and laws.

11. Direct Marketing

We may send promotional communications where permitted by applicable law or where the customer has provided required consent.

Customers may opt out of marketing communications through an available unsubscribe option or by contacting us by email or WhatsApp.

Opting out of marketing does not prevent essential transactional communications concerning an existing order.

12. Sale of Personal Data

Khayal Art does not sell or rent customers' personal data.

Personal data may be shared only where reasonably necessary to provide our services, fulfill orders, work with service providers, or comply with applicable legal requirements.

13. International Data Processing and Transfers

Because we use international technology platforms and providers such as Shopify, certain information may be processed or stored outside the United Arab Emirates.

Where this occurs, we aim to handle personal data in accordance with applicable legal requirements and implement appropriate measures where required.

Third-party providers may also be subject to their own privacy policies and legal obligations.

14. Data Security

We take reasonable organizational and technical measures designed to protect personal data against unauthorized access, unlawful use, disclosure, alteration, loss, or damage.

We also rely on security measures implemented by Shopify and other providers used to operate our store.

However, no internet transmission or storage method can be guaranteed to be 100% secure.

15. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or to satisfy applicable legal, regulatory, accounting, dispute-resolution, and record-keeping requirements.

Retention periods may vary depending on the type of information and applicable requirements.

16. Your Privacy Rights

Subject to applicable law, you may have rights regarding your personal data, which may include:

• Receiving information about the processing of your data.
• Requesting access to your personal data.
• Correcting or updating inaccurate information.
• Requesting deletion where permitted by law.
• Requesting restriction or cessation of certain processing where applicable.
• Objecting to certain processing where permitted.
• Withdrawing consent where processing relies on consent.
• Requesting data portability where applicable.

Certain legal exceptions may apply.

We may need to verify your identity before processing a privacy request.

17. Access, Correction and Deletion Requests

To request access, correction, or deletion of your personal data where applicable, contact:

khayal.store.uae@gmail.com

Please provide sufficient information to identify the relevant data and verify your identity.

18. Children's Data

Khayal Art does not intentionally target children for the collection of personal data.

If we become aware that a child's personal information has been collected in circumstances requiring parental or guardian consent under applicable law, we will take appropriate steps to address the matter.

19. Legal Disclosures

We may disclose information where required by applicable law, court order, or a valid request from a competent government or regulatory authority, or where reasonably necessary to protect legal rights or prevent fraud or misuse.

20. Third-Party Links

Our website may contain links to external websites or services such as Instagram, Facebook, WhatsApp, or other platforms.

When you access an external service, your information may be subject to that provider's privacy policy.

We do not control the privacy practices of independent third-party websites and services.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, applications, business practices, or applicable requirements.

The updated version will be published on our website and the "Last Updated" date may be revised accordingly.

22. Governing Requirements

This Privacy Policy is intended to operate in accordance with applicable laws and regulations of the United Arab Emirates, to the extent applicable to our activities and processing of personal data.

23. Contact Us

For privacy questions or personal data requests:

Khayal Art

Email: khayal.store.uae@gmail.com
Phone: +971 56 440 1149
WhatsApp: +971 56 440 1149