Privacy Policy

Last updated: August 31, 2026

NAÏA (“NAIA”, “we”, “us” or “our”) operates this store and website, together with all related information, content, features, tools, products and services (collectively, the “Services”), to provide you with a curated shopping experience.

The Services are powered by Shopify, which enables us to provide our Services to you. This Privacy Policy explains how we collect, use, disclose, retain and otherwise process your personal information when you visit, access or use the Services, make a purchase or otherwise communicate with us.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Privacy Policy, you should discontinue your use of the Services.

Where applicable, this Privacy Policy should be read together with our Terms of Service and any other policies governing your use of the Services. In the event of a conflict between our Terms of Service and this Privacy Policy concerning the collection, processing or disclosure of personal information, this Privacy Policy shall prevail with respect to such matters.

1. Personal Information We Collect or Process

For the purposes of this Privacy Policy, “personal information” means information that identifies you or that can reasonably be associated or linked with you or another individual. Information that has been anonymized or irreversibly de-identified so that it can no longer reasonably be used to identify an individual is not considered personal information.

Depending on how you interact with the Services, where you are located and as permitted or required by applicable law, we may collect or process the following categories of personal information:

• Contact information, including your name, residential address, billing address, shipping address, telephone number and email address.

• Payment and financial information, including payment card details, financial account information, transaction details, payment method, payment confirmations and other information necessary to process payments.

• Account information, including your username, password, account preferences, settings and other information associated with your account.

• Transaction information, including information concerning products you view, add to your cart, purchase, return, exchange or cancel, as well as your purchase history.

• Communications, including information contained in communications between you and us, such as customer service inquiries, questions, complaints and other correspondence.

• Device and technical information, including information about your device, browser, operating system, network connection, IP address and other technical or unique identifiers.

• Usage information, including information about how and when you access, browse and interact with the Services.

We may also create or derive information from the information described above, including inferences, where permitted by applicable law.

2. Sources of Personal Information

We may collect personal information from the following sources:

• Directly from you, including when you create an account, place an order, use the Services, communicate with us or otherwise provide information to us.

• Automatically through the Services, including information collected from your device when you access or use our website, including through cookies and similar technologies.

• From service providers, including providers that assist us with technology, payment processing, analytics, customer support, hosting, fulfillment and other business functions.

• From business partners and other third parties, where permitted by applicable law.

3. How We Use Personal Information

Depending on your interaction with us and the Services you use, we may process your personal information for the following purposes:

Providing, Managing and Improving the Services

We may use personal information to provide and administer the Services, perform our contractual obligations, process and fulfill orders, process payments, arrange shipping, facilitate returns and exchanges, maintain and manage customer accounts, remember preferences, provide customer support, enable product reviews and otherwise operate, maintain and improve our Services.

We may also use information to personalize your shopping experience, including by recommending products that may be relevant to your interests or previous purchases.

Marketing and Advertising

Where permitted by applicable law, we may use personal information to send marketing, promotional and advertising communications by email, text message or other permitted channels.

We may also use personal information to provide or measure advertisements for our products and services, including advertisements displayed through third-party platforms and websites. This may include advertising based on your interactions with our Services, such as products you have viewed, purchased or added to your cart.

Security and Fraud Prevention

We may process personal information to authenticate accounts, maintain the security of our Services, detect and prevent fraud, unauthorized transactions and other unlawful, unsafe or malicious activities, investigate suspected violations and protect our customers, business and Services.

If you create an account, you are responsible for maintaining the confidentiality of your account credentials. You should not share your username, password or other account access information with third parties.

Communicating With You

We may use your personal information to respond to inquiries, provide customer service, communicate with you regarding your orders and account, provide information about the Services and otherwise maintain our business relationship with you.

Legal and Compliance Purposes

We may process personal information where reasonably necessary to comply with applicable laws and regulations, respond to lawful requests from courts, governmental authorities or law enforcement agencies, establish, exercise or defend legal claims, participate in legal proceedings, enforce our agreements and policies, and protect our rights, property, Services, customers or other persons.

4. Disclosure of Personal Information

We may disclose personal information to third parties where reasonably necessary to provide and operate the Services, conduct our business or otherwise for the purposes described in this Privacy Policy.

Such disclosures may include:

• Shopify and service providers, including providers assisting with information technology, payment processing, data analytics, customer support, cloud storage, order fulfillment and shipping.

• Advertising and marketing partners, where necessary to provide marketing, advertising, analytics or related services. Such third parties may process information in accordance with their own privacy policies and notices.

• Third parties at your direction or with your consent, including where you request that we disclose information in connection with shipping, social media integrations or other services.

• Affiliated entities and business partners, where reasonably necessary for legitimate business purposes.

• Business transaction parties, in connection with a merger, acquisition, sale of assets, restructuring, financing, bankruptcy or similar transaction.

• Authorities and other parties where legally required, including where disclosure is necessary to comply with applicable law, legal process, court orders, subpoenas or governmental requests, or to establish, exercise or defend legal rights.

We do not disclose personal information to third parties except as described in this Privacy Policy or otherwise permitted or required by applicable law.

5. Shopify and Service Providers

Our Services are hosted and supported by Shopify. Shopify may collect and process personal information relating to your access to and use of our Services in order to provide and improve its services.

Information submitted through our Services may therefore be transmitted to and processed by Shopify and other service providers, including providers located outside the country in which you reside.

Shopify may also process information obtained through your interactions with our store and other merchants in connection with certain Shopify services and features.

For more information about how Shopify processes personal information, please refer to Shopify’s applicable privacy documentation available through Shopify’s official website.

6. Third-Party Websites and Links

The Services may contain links to websites, applications or other online platforms operated by third parties.

If you access a third-party website or service through a link provided on our Services, that third party’s privacy policy, terms and conditions and other policies will apply to your use of that third-party service.

We are not responsible for the privacy, security, content or practices of third-party websites or services that we do not own or control.

Information that you disclose on public or semi-public platforms, including social media platforms, may be accessible to other users and may be processed by those platforms in accordance with their own policies.

7. Children's Data

The Services are not intended for children.

We do not knowingly collect personal information from children who are below the applicable age of majority in their jurisdiction. If you are a parent or legal guardian and believe that a child has provided us with personal information, you may contact us using the contact details provided below and request that such information be deleted, subject to applicable law.

Where applicable law defines specific age thresholds or requirements concerning the collection or processing of children's information, we will comply with those requirements.

8. Security and Retention of Personal Information

We take reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, misuse or destruction.

However, no method of electronic transmission or storage is completely secure. Accordingly, we cannot guarantee the absolute security of personal information.

The retention period for personal information depends on the nature of the information, the purposes for which it was collected and processed, our legal and business requirements, and applicable law.

We may retain personal information for as long as reasonably necessary to provide the Services, maintain customer accounts and business records, comply with legal obligations, resolve disputes, enforce agreements and protect our legal rights.

9. Your Rights and Choices

Depending on your jurisdiction and subject to applicable legal limitations and exceptions, you may have certain rights regarding your personal information.

These rights may include:

• Right of access: You may have the right to request access to personal information we hold about you.

• Right to deletion: You may have the right to request deletion of your personal information, subject to applicable exceptions.

• Right to correction: You may have the right to request correction of inaccurate or incomplete personal information.

• Right to data portability: In certain circumstances, you may have the right to receive personal information in a structured and commonly used format and request that it be transferred to another party.

• Right to object or restrict processing: Depending on your jurisdiction, you may have the right to object to or request restriction of certain processing activities.

• Marketing preferences: You may opt out of receiving promotional emails by using the unsubscribe mechanism contained in our marketing communications. Even if you opt out of marketing communications, we may continue to send non-promotional communications relating to your orders, account or use of the Services.

These rights are not absolute and may only apply in certain circumstances. We may be entitled or required to refuse a request where permitted or required by applicable law.

To exercise any applicable rights, please contact us using the contact details provided below. We may need to verify your identity before processing certain requests.

10. Complaints

If you have concerns or complaints regarding our collection or processing of personal information, we encourage you to contact us directly so that we can investigate and address your concern.

Depending on your jurisdiction, you may also have the right to lodge a complaint with the relevant data protection or supervisory authority.

11. International Transfers

Your personal information may be transferred to, stored in or processed in countries outside the country in which you reside.

Where applicable law requires specific safeguards for international transfers of personal information, we will take reasonable steps to implement appropriate safeguards and recognized transfer mechanisms.

For transfers of personal information from the European Economic Area or the United Kingdom, where applicable, such safeguards may include Standard Contractual Clauses approved or recognized by the relevant authorities or other lawful transfer mechanisms.

12. Changes to This Privacy Policy

We may amend or update this Privacy Policy from time to time to reflect changes to our business practices, the Services, applicable legal requirements or other operational considerations.

When we make changes, we will update the “Last updated” date at the beginning of this Privacy Policy. Where required by applicable law, we will provide additional notice of material changes.

Your continued use of the Services following the effective date of an updated Privacy Policy constitutes acknowledgment of the updated Privacy Policy, to the extent permitted by applicable law.

13. Contact Us

If you have any questions regarding this Privacy Policy, our privacy practices or the processing of your personal information, or if you wish to exercise any applicable privacy rights, please contact us:

NAÏA SKINCARE
Al Serh Residences 11, Floor 5, Apartment 501
Dubai, United Arab Emirates

Email: info@naiaskinare.com