Privacy Policy

Contact and order details: your name, email, phone number, billing and shipping address.

Payment information: processed by our payment providers. We receive confirmation of payment but never your full card number.

Usage data: pages viewed and basic analytics we use to improve the store, collected via first-party cookies and similar technologies.

Marketing: your email if you subscribe to our newsletter.

We use your data to process and deliver your orders, take payment, provide customer support, prevent fraud, meet legal obligations, and — where you have agreed — to send you news about Hekaya. We also use aggregated analytics to improve our products and website.

Card payments are handled by Stripe, and instalment options by Tabby and Tamara. These providers process your payment data under their own privacy and PCI-DSS obligations. We do not store your full card details.

We share data only with service providers who help us run the store — such as payment processors, shipping and courier partners, and email and hosting providers — and where required by law. We never sell your personal data.

We use essential cookies to run the cart and checkout, and analytics cookies to understand how the store is used. You can control cookies through your browser settings; disabling essential cookies may affect how the site works.

We keep your data for as long as needed to fulfil your orders and to meet our legal, accounting and tax obligations, after which it is deleted or anonymised.

In line with the UAE Personal Data Protection Law, you may request access to your data, ask us to correct or delete it, object to certain processing, and unsubscribe from marketing at any time. To exercise any right, email info@hekaya.ae.

We use appropriate technical and organisational measures to protect your data, including encryption in transit. No method is completely secure, but we work to keep your information safe. For any privacy question, contact info@hekaya.ae.