Privacy policy.

Who we are

Hind Collections is an online boutique of handmade bags based in the United Arab Emirates. We are the controller of the personal data described here. You can reach us at any time through our contact page.

What we collect

• Account details: name, email address and password (stored securely), or your Google / Apple sign-in identifier.
• Order details: delivery name, phone number, address, emirate, items purchased and order history.
• Payment details: processed directly by our payment partners (Stripe, Tabby, Tamara). We never see or store your full card number.
• Technical data: device, browser, pages visited and cookie choices.
• Content you share with us: reviews, photos and messages.

Why we use it

• To process, deliver and support your orders (performance of a contract).
• To run your account, wishlist and basket.
• To meet our legal, tax and accounting obligations in the UAE.
• To prevent fraud and keep the site secure (legitimate interest).
• To send marketing and measure advertising only when you have given consent, which you may withdraw at any time.

Advertising and analytics

With your consent, we may use cookies and similar technologies from Google (Google Ads, Google Analytics) and Meta (Facebook and Instagram Pixel) to measure visits and purchases and show you relevant adverts. These partners may process data such as device identifiers, pages viewed and purchase events. Nothing of this kind is loaded unless you accept advertising cookies. You can change your choice anytime via "Cookie settings" in the footer. See our cookie policy.

Who we share it with

Only with providers who help us operate: hosting and database, payment providers, delivery couriers, email services and (with consent) advertising partners. We do not sell your personal data. Some providers may process data outside the UAE; where they do, we rely on safeguards permitted under the PDPL.

How long we keep it

Order and invoice records are kept for as long as UAE law requires (generally five years). Account data is kept while your account is active and deleted on request unless we must keep it by law.

Your rights

Under the PDPL you may request access to, correction of, or deletion of your data, restrict or object to processing, withdraw consent, and request a copy of your data. Contact us and we will reply within 30 days. You may also complain to the UAE Data Office.

Security

Your data is protected with encryption in transit, access controls and secure hosting. No method is perfectly secure, but we take every reasonable care.

Children

Our site is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy and will show the new date above.