Privacy policy

Privacy Policy

Last updated: 18 August 2026

This Privacy Policy explains how ALIFAAT – FZCO (“ALIFAAT”, “we”, “us” or “our”) collects, uses and discloses personal information when you visit alifaat.com, purchase our products, create an account, contact us or otherwise use our services (collectively, the “Services”).

For the purposes of applicable data-protection legislation, ALIFAAT – FZCO is the controller of the personal information described in this Privacy Policy unless otherwise stated.

Please read this Privacy Policy carefully. If you have questions or wish to exercise your privacy rights, contact us using the details at the end of this policy.

1. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to our practices, technologies, Services or legal obligations.

When we update it, we will publish the revised version on this page and update the “Last updated” date. Where required by law, we will provide additional notice or request renewed consent.

2. Personal Information We Collect

The information we collect depends on how you interact with our Services.

Information you provide directly

This may include:

  • Contact details: name, email address, telephone number, billing address and delivery address.
  • Order information: products purchased, order value, billing and shipping details, payment confirmation, delivery information, returns and refunds.
  • Account information: login credentials, account preferences and saved information.
  • Shopping information: products viewed, added to your cart or saved to a wishlist.
  • Customer-service information: messages, photographs, order details and other information supplied when requesting support, reporting missing pieces or arranging a return.
  • Marketing preferences: whether you have consented to promotional communications or personalised advertising.
  • Reviews and user-generated content: product reviews, photographs and other content you choose to submit.

We do not directly store complete payment-card details. Payments are processed by Shopify and other authorised payment providers.

Information collected automatically

When you use our Services, we and our service providers may automatically collect:

  • IP address
  • Device and browser information
  • Network and approximate location information
  • Pages and products viewed
  • Cart, checkout and purchase activity
  • Referral URLs and advertising interactions
  • Cookie identifiers, pixels and similar online identifiers
  • Information about how you interact with our website and emails

We collect this information using cookies, pixels, web beacons, software development kits and similar technologies.

Information received from third parties

We may receive personal information from:

  • Shopify
  • Payment processors
  • Fulfilment providers and couriers
  • Analytics providers
  • Advertising platforms
  • Customer-support and review platforms
  • Fraud-prevention and security providers
  • Social-media platforms when you interact with our pages or advertisements

We process information received from third parties in accordance with this Privacy Policy. Those third parties may also process information under their own privacy policies.

3. How We Use Personal Information

We may use personal information to:

Provide products and Services

This includes:

  • Processing payments and orders
  • Arranging fulfilment and delivery
  • Providing order and tracking notifications
  • Managing accounts
  • Processing returns, replacements and refunds
  • Providing missing pieces or instructions
  • Responding to customer-service requests
  • Enabling product reviews

Communicate with you

We use personal information to answer questions, provide customer support, send important service communications and maintain our relationship with you.

Marketing and advertising

Subject to applicable law and your preferences, we may use personal information to:

  • Send promotional emails or messages
  • Measure marketing performance
  • Personalise website content and advertisements
  • Create advertising audiences
  • Exclude existing customers from certain advertising campaigns
  • Identify potential customers with similar interests

Analytics and improvement

We use information to understand how customers use our website, assess product and campaign performance, troubleshoot problems, improve our Services and develop new products and features.

Security and fraud prevention

We may use information to detect, investigate and prevent fraudulent, unlawful, malicious or unauthorised activity and to protect customers, ALIFAAT and our service providers.

Legal and administrative purposes

We may process information to:

  • Maintain financial and transactional records
  • Comply with tax, accounting and regulatory obligations
  • Enforce our terms and policies
  • Establish, exercise or defend legal claims
  • Respond to lawful requests from authorities
  • Protect our rights and those of other people

4. Legal Bases for EU and UK Users

Where the EU General Data Protection Regulation (“GDPR”) or UK GDPR applies, we rely on one or more of the following legal bases:

  • Performance of a contract: to process, fulfil, deliver and support your order.
  • Legal obligation: to comply with tax, accounting, consumer-protection and other legal requirements.
  • Legitimate interests: to operate and improve our business, provide customer service, prevent fraud, secure our Services and conduct proportionate analytics.
  • Consent: where required for marketing communications, non-essential cookies, personalised advertising or matched advertising audiences.
  • Legal claims and vital interests: where processing is necessary to protect rights, safety or legal interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

5. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Operate essential website functions
  • Remember preferences and cart activity
  • Authenticate users
  • Prevent fraud and protect the website
  • Understand website usage
  • Measure advertising performance
  • Personalise content and advertising, where permitted

For information about cookies used by Shopify, visit Shopify’s Cookie Policy.

Where required by law, non-essential analytics and advertising cookies will only be used after you provide consent through our cookie banner or privacy-preference controls.

You may adjust your preferences through our cookie settings or browser controls. Blocking certain cookies may affect website functionality. Browser controls may not prevent every form of online tracking.

6. Analytics and Google Services

We may use services provided by Google, including Google Analytics and Google Ads, to understand website activity, measure advertising performance and display relevant advertisements.

Depending on your consent choices and the services enabled, Google may receive information such as:

  • Cookie and advertising identifiers
  • IP address and device information
  • Pages and products viewed
  • Cart, checkout and purchase activity
  • Advertising interactions
  • Transaction and conversion information

Where required by law, we use Google advertising and analytics cookies only after obtaining consent. Google processes information according to its own privacy policies.

You can manage personalised Google advertising through Google’s Ads Settings and manage our cookies through the privacy controls available on our website.

7. Meta Advertising and Custom Audiences

We may use Meta services, including Facebook and Instagram advertising, to display relevant advertisements and measure campaign performance.

Where you have provided the required consent, we may transmit a cryptographically hashed version of information such as your email address or telephone number to Meta. Meta may compare the hashed information with its user records to:

  • Display relevant advertisements
  • Exclude existing customers from campaigns
  • Measure conversions
  • Create audiences of people with similar interests

For EU and UK users, we use matched custom-audience information on the basis of consent where consent is legally required.

You may withdraw your consent through our privacy controls or by emailing info@alifaat.com. You can also manage advertising preferences through your Meta account.

8. How We Disclose Personal Information

We may disclose personal information to:

  • Shopify and website providers that host and operate our online store.
  • Payment processors that process customer payments.
  • Fulfilment providers and couriers that store, pack, deliver and track orders.
  • Customer-support providers that help us respond to enquiries.
  • Analytics providers that help us understand website and business performance.
  • Advertising and marketing partners, including Google and Meta, where permitted.
  • IT, cloud-storage, security and fraud-prevention providers.
  • Professional advisers, including accountants, insurers, lawyers and auditors.
  • Authorities or other parties where disclosure is required by law or necessary to protect legal rights.
  • Business-transfer parties in connection with a merger, acquisition, financing, restructuring, insolvency or sale of all or part of the business.

The categories of information disclosed may include identifiers, contact information, commercial and order information, payment confirmation, customer-support information, device information and website-usage data.

We do not use sensitive personal information to infer characteristics about customers.

9. Sale and Sharing of Personal Information

We do not sell personal information for money.

However, certain uses of analytics cookies, advertising cookies and advertising partners may be considered a “sale”, “sharing” or use for targeted or cross-context behavioural advertising under some privacy laws.

Where applicable, you may opt out through our cookie or privacy-preference controls or by contacting info@alifaat.com.

Where legally required and technically supported, we recognise applicable browser-based opt-out preference signals, such as Global Privacy Control.

10. User-Generated Content

If you submit a product review, photograph or other content to a public area of our Services, that content may be publicly accessible.

Do not include information in a public review that you do not want other people to see. We are not responsible for how third parties use information that you voluntarily make public.

11. Third-Party Websites and Links

Our Site may contain links to websites or services operated by third parties.

We do not control those third parties and are not responsible for their privacy, security or content. Review their privacy policies before providing personal information to them.

12. Children’s Data

Our Services are intended for adults purchasing products and are not directed at children.

We do not knowingly collect personal information directly from children under 16. If you believe a child has provided personal information to us, contact info@alifaat.com so that we can investigate and, where appropriate, delete it.

We do not knowingly sell or share the personal information of children under 16 for targeted advertising.

13. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information.

No security system is completely secure, and we cannot guarantee absolute security. Please do not send sensitive or confidential information through unsecured communication channels.

Customers are responsible for protecting their account credentials and should contact us if they believe an account has been compromised.

14. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including providing the Services, maintaining records, complying with legal obligations, resolving disputes and enforcing agreements.

Our general retention approach is:

  • Order, payment-confirmation, tax and transaction records: generally retained for up to seven years, or longer if required by applicable law.
  • Customer-service and returns records: generally retained for up to three years after the matter is resolved, unless required for an ongoing dispute or legal obligation.
  • Account information: retained while the account remains active and for a reasonable period afterward.
  • Marketing information: retained until consent is withdrawn, the customer unsubscribes, or the information is no longer reasonably required.
  • Cookie and analytics information: retained according to the applicable cookie duration and the policies of the relevant provider.
  • Legal and fraud-prevention records: retained for as long as reasonably necessary to protect our business and comply with legal requirements.

We may retain information for longer where required by law, litigation, an investigation or another legitimate legal purpose. When information is no longer required, we will delete or anonymise it where reasonably practicable.

15. Your Rights and Choices

Depending on your location, you may have rights to:

  • Access or obtain a copy of your personal information
  • Know how we collect, use and disclose it
  • Correct inaccurate information
  • Request deletion
  • Restrict or object to processing
  • Receive information in a portable format
  • Withdraw consent
  • Opt out of marketing
  • Opt out of sale, sharing or targeted advertising
  • Appeal a decision concerning a privacy request
  • Lodge a complaint with a relevant supervisory authority
  • Receive equal service without discrimination for exercising your rights

These rights are not absolute and may be subject to legal exceptions.

To exercise a privacy right, email info@alifaat.com with the subject line “Privacy Request.” Please describe your request and provide the email address associated with your account or order.

We may request information needed to verify your identity. An authorised agent may submit a request where permitted by law, but we may require proof of authority and direct verification from the customer.

We will respond within the timeframe required by applicable law.

Marketing preferences

You may unsubscribe from promotional emails using the unsubscribe link in the message. Even after unsubscribing, you may still receive transactional communications concerning orders, deliveries, returns or account security.

16. EU and UK Privacy Rights

If the GDPR or UK GDPR applies, you may have the right to access, correct, erase, restrict or object to processing, obtain data portability and withdraw consent.

You may also lodge a complaint with the data-protection authority in the country where you live or work or where you believe an infringement occurred.

We encourage you to contact us first so that we can attempt to resolve your concern.

17. California Privacy Rights

Where the California Consumer Privacy Act and California Privacy Rights Act (“CCPA/CPRA”) apply, California residents may have the right to:

  • Know the categories and specific pieces of personal information collected
  • Know the sources, purposes and recipients of that information
  • Request correction or deletion
  • Opt out of the sale or sharing of personal information
  • Limit certain uses of sensitive personal information
  • Receive equal treatment when exercising their rights
  • Use an authorised agent

We do not sell personal information for monetary consideration. Some advertising activities may constitute “sharing” under California law.

California residents may submit a request or opt-out request by contacting info@alifaat.com or using the privacy-preference controls on our website.

18. International Transfers

ALIFAAT operates from the United Arab Emirates and works with service providers in multiple countries. Your personal information may therefore be transferred to, stored or processed outside your country of residence.

Where GDPR or UK GDPR applies and information is transferred outside the European Economic Area or United Kingdom, we use an applicable lawful transfer mechanism, such as:

  • An adequacy decision;
  • European Commission Standard Contractual Clauses;
  • The applicable UK data-transfer addendum or agreement; or
  • Another legally recognised safeguard.

19. Complaints

If you have concerns about our handling of personal information, contact us using the details below.

If you are not satisfied with our response, you may have the right to complain to the relevant privacy or data-protection authority in your country.

20. Contact Information

For privacy questions, requests or complaints, contact:

ALIFAAT – FZCO
Registered address: IFZA Properties, Premises No. DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates
Dubai, United Arab Emirates
Email: info@alifaat.com
Website: https://alifaat.com