1. Introduction

Welcome to Hadeeya Gifting (“we”, “our”, “us”). We operate the website hadeeya.co (the “Site”) and provide an online gifting concierge service (the “Service”) from the United Arab Emirates. Through our Service you can choose from a selection of ready gift boxes, and/or contact us to build a custom gift box or hamper with exclusive gift items (the “Gifts”).

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, transfer and store your personal information when you use the Site or engage our Service. By accessing or using our Site or Service, you accept the practices described herein.

2. Definitions

• “Personal Data” means any information relating to an identified or identifiable natural person.

• “Processing” means any operation or set of operations carried out on Personal Data (e.g., collection, storage, use, disclosure).

• “You” or “User” means an individual visiting the Site or placing an order or contacting us for a custom gift.

• “Recipient” means the person to whom you have the Gift sent (if different from you).

3. Categories of Personal Data We Collect

We may collect the following categories of Personal Data:

a. Information you provide directly

• Your name, phone number, email address, postal/delivery address (including recipient address if different), your special occasion dates.

• Billing information (for example, billing address)

• Payment information (note — see clause 4)

• Details relating to your gift order: for example, the Gift selected (ready box) or custom box details (recipient, message, preferences, packaging instructions)

• If you contact us (via email, chat, phone) we may collect any information you provide such as your query or feedback

• If you create an account, we may collect login credentials, account history, purchase history

• Marketing preferences: whether you choose to receive promotional emails or communications

b. Information collected automatically when you use the Site or Service

• Device and browser information (e.g., device type, operating system, browser version)

• IP address and/or approximate geolocation derived from IP address

• Usage data: pages visited, time spent, links clicked, search terms, items added to cart, items viewed, items purchased

• Cookies and similar tracking technologies (see clause 7)

c. Information about third parties

• If you supply details of a recipient (name, address, message) you must ensure you are authorised to provide those details and that the recipient has consented to you supplying them where required by law

4. Payment/Financial Information

We do notstore your full payment card details on our servers. The payment processing is carried out by our payment service provider(s) (which are PCI‑compliant) and you provide card or other payment instrument information via their secure infrastructure. We may retain limited payment metadata (transaction ID, date, amount) for bookkeeping, fraud‐prevention and audit purposes, but we do not store full re‑usable card details.

5. Purposes of Processing / Use of Your Personal Data

We use your Personal Data for the following purposes:

• To provide the Service: process your order, arrange delivery, fulfil your custom gift request, communicate order status, send invoices, handle returns or refunds.

• To verify your identity (as needed) and prevent fraud or misuse of the Service.

• To improve and optimise our Site and Service: analyse usage data, personalise your experience (e.g., show relevant gift suggestions), improve design, fix bugs.

• For marketing and promotional purposes: if you have opted in, send you newsletters, special offers, or information about new products or Services.

• For customer support: respond to your enquiries, complaints or feedback.

• For legal, regulatory or contractual requirements: for example tax, audit, dispute resolution, or compliance with UAE laws.

If we wish to process your Personal Data for a new purpose that is materially different from the purpose for which it was collected, we will notify you and (where required by law) obtain your consent.

6. Legal Basis for Processing

Under applicable UAE data protection law, we rely on one or more of the following legal bases for processing your Personal Data:

• To perform a contract to which you are a party (for example fulfilling your order).

• To comply with a legal obligation (for example value‑added tax records).

• For our legitimate interests (for example fraud prevention, improving our Service), provided those interests are not overridden by your rights.

• With your consent (for example for marketing communications).

7. Cookies and Tracking Technologies

We (and our service providers) use cookies, web beacons, pixel tags, tracking scripts and similar technologies (collectively “Cookies”) to collect information about how you use the Site, for example to: recognise you when you return, track items in your cart, analyse page visits, remember your preferences, show you personalised suggestions or adverts, and measure effectiveness of our marketing.

You can control or disable certain Cookies via your browser settings, but this may affect your ability to use certain parts of the Site or cause degraded experience.

8. Disclosure and Sharing of Personal Data

We may share your Personal Data in the following circumstances:

• With our service providers (e.g., payment processors, logistics/delivery partners, IT hosting providers, marketing automation providers, CRM providers) who help deliver our Service — they will act under our instructions and only for the purposes specified.

• With our affiliates or subcontractors when needed to fulfil your order or support the Service.

• With the recipient of the gift or delivery partner to arrange delivery of the Gift.

• If required by law, regulation, court order, governmental or regulatory authority.

• In connection with a business transaction: for example if we merge with or are acquired by another company, your Personal Data may be transferred as part of that transaction.

• We do not sell or rent your Personal Data to unrelated third parties for marketing purposes without your consent.

9. International Transfers of Data

Your Personal Data may be stored or processed outside the UAE (for example via cloud servers or third‑party service providers located abroad). By using our Service, you agree to such transfers and acknowledge that the data protection laws in those countries may differ. We will ensure that any overseas transfer is subject to appropriate safeguards (for example data processing agreements, encryption, etc.).

10. Data Retention

We will retain your Personal Data only for as long as necessary for the purposes for which it was collected, or as required by law (e.g., tax or audit obligations). Once no longer needed, we will securely delete or anonymise it.

11. Your RightsSubject to applicable law, you may have the following rights:

• Access: request a copy of the Personal Data we hold about you.

• Correction: ask us to rectify inaccurate or incomplete Personal Data.

• Deletion: request deletion of your Personal Data (where not restricted by legal obligations).

• Restriction: request that processing of your Personal Data be restricted (in certain circumstances).

• Objection: object to processing based on our legitimate interests or for marketing.

• Withdrawal of consent: if processing has been based on your consent, you may withdraw it (which will not affect processing done previously).

To exercise any of these rights, please contact us at [insert contact email] or via [contact form]. We will respond within a reasonable time, and in any event as required by law.

12. Protection and Security of Personal Data

We implement commercially reasonable technical and organisational safeguards to protect your Personal Data from unauthorised or unlawful access, alteration, disclosure or destruction. These include access controls, encryption where appropriate, secure servers and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure — therefore we cannot guarantee absolute security.

13. Children’s Privacy

Our Service is not intended for persons under the age of 18and we do not knowingly collect Personal Data from anyone under 18. If you are under 18, please do not use or submit information through our Site. If you become aware we have inadvertently collected data from a minor under 18, please contact us so we may remove it.

14. Marketing and Opt‑out

If you have opted‑in to receive marketing communications (such as emails or SMS) from us, you may unsubscribe at any time by clicking the unsubscribe link in the marketing email, or by contacting us at sales@hadeeya.co. Even after you unsubscribe, we may still send you non‑promotional messages such as order confirmations or delivery updates.

15. Third‑Party Links

Our Site may contain links to third‑party websites, services or applications that are not operated by us. This Privacy Policy does not apply to those third‑party sites. You are responsible for reviewing the privacy practices of those external websites. We are not responsible for their content, policies or practices.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time (for example, to reflect changes in law, technology or our Service). We will post the revised policy on the Site and update the “Last updated” date at the top. Your continued use of the Site after any changes means you accept the revised policy.

17. Contact Us

If you have any questions, complaints or requests regarding this Privacy Policy or our data practices, please contact:HadeeyaEmail: sales@hadeeya.co or  zakeerah@spicegirls.co.za Phone:  +971581034417 & +971563328200