Privacy policy

H and A Lifestyle operates this store and website, including all related information, content, features, tools, products, and services (the “Services”), in order to provide customers with a curated shopping experience. H and A Lifestyle is powered by Shopify, which enables us to provide the Services.

This Privacy Policy describes how we collect, use, disclose, store, and protect your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy governs with respect to the collection, processing, and disclosure of personal information.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information,” we refer to information that identifies or can reasonably be linked to you. Personal information does not include anonymized or de-identified data.

Depending on how you interact with the Services and as permitted by applicable law, we may collect or process the following categories of personal information:

Contact information: name, billing address, shipping address, phone number, email address
Financial information: payment method details, transaction confirmations, and related payment data
Payment information is processed securely by third-party payment service providers. H and A Lifestyle does not store full credit card, debit card, or banking details.
Account information: username, password, preferences, and account settings
Transaction information: products viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled
Communications: information provided when contacting us for customer support or inquiries
Device and technical information: IP address, browser type, device identifiers, and network information
Usage information: interactions with the Services, including pages viewed and actions taken

Sources of Personal Information

We may collect personal information from the following sources:

Directly from you when you create an account, place an order, communicate with us, or otherwise provide information
Automatically through your use of the Services, including cookies and similar technologies
From service providers that process personal information on our behalf
From third parties or partners, where permitted by law

How We Use Personal Information

We use personal information for the following purposes:

Providing and operating the Services, including payment processing, order fulfillment, shipping, returns, and exchanges
Account management and customer preferences
Customer support and service-related communications
Improving and personalizing the Services
Marketing and promotional communications, where permitted by law and based on consent
Security, fraud prevention, and risk management
Legal and regulatory compliance

Legal Basis for Processing

Personal information is processed based on one or more of the following legal bases, as applicable:

Consent
Performance of a contract
Compliance with legal obligations
Legitimate business interests that do not override your rights

Disclosure of Personal Information

We may disclose personal information:

To Shopify and service providers supporting payments, hosting, analytics, fulfillment, shipping, and customer support
To marketing and advertising partners, where permitted by law
To third parties at your direction or with your consent
To affiliates, where applicable
In connection with business transactions
To comply with legal obligations or protect rights and safety

We do not sell or rent personal information.

Relationship with Shopify

The Services are hosted by Shopify, which processes personal information to provide and improve the Services in accordance with its own privacy practices.

Cookies and Tracking Technologies

Cookies and similar technologies are used to operate and improve the Services. Disabling cookies may affect functionality.

Data Retention

Personal information is retained only as long as necessary for the purposes outlined in this policy and legal requirements. Data is securely deleted or anonymized when no longer required.

Your Rights

Subject to applicable law, including the Saudi Personal Data Protection Law (PDPL), you may have the right to access, correct, or request deletion of your personal information, or withdraw consent where applicable.

International Data Transfers

Personal information may be processed or stored outside your country of residence through technology and cloud service providers, with appropriate safeguards in place.