At Muzhela, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you shop for abayas and related products on our website, why we collect it, how we use it, and your rights under the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations.
By using our website or placing an order, you acknowledge that you have read this policy. Where consent is required by law (for example, for certain marketing messages), we will ask for your consent separately.
1. Who We Are (Data Controller)
Muzhela is the data controller responsible for your personal data collected through this online store and related customer support channels.
2. Personal Data We Collect
Depending on how you use our store, we may collect:
- Identity & contact data — name, mobile number, email address, and delivery address (region, city, district, and street details within Saudi Arabia).
- Order data — products purchased, size selections, custom measurements, order history, invoices, and delivery status.
- Payment-related data — payment method selected, transaction references, and limited billing details. Card data is processed by secure payment providers; we do not store full card numbers on our servers.
- Account data — login credentials, wishlist, reviews, and preferences if you create an account.
- Communications — messages you send via contact forms, WhatsApp, email, or customer support.
- Technical data — IP address, browser type, device information, cookies, and analytics data when you browse our website.
3. How We Use Your Data & Legal Basis
We process personal data only for legitimate purposes, including:
- processing and delivering your orders across Saudi Arabia;
- communicating order updates, delivery notifications, and customer support responses;
- processing payments, refunds, and returns;
- preventing fraud and maintaining website security;
- improving our products, sizing options, and shopping experience;
- sending promotional offers and updates only where permitted by law and, where required, with your consent.
Our legal bases may include your consent, performance of a contract (fulfilling your order), compliance with legal obligations, and our legitimate interests where those interests do not override your rights.
4. Cookies & Similar Technologies
We use cookies and similar technologies to keep your cart active, remember preferences, measure site performance, and support marketing analytics. You can control cookies through your browser settings; disabling some cookies may affect checkout or login features.
5. Sharing Your Data
We do not sell your personal data. We may share information only with trusted parties who help us operate our business, such as:
- courier and logistics partners for delivery within Saudi Arabia;
- payment gateways and banks;
- IT hosting, email, SMS, and customer support tools;
- professional advisers where required by law.
These parties may process data only as needed to provide their services and must protect it appropriately. We may also disclose information if required by Saudi authorities or to protect our legal rights.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including order records, tax and accounting requirements, dispute resolution, and legal compliance. When data is no longer needed, we delete or anonymize it in accordance with our retention procedures.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. No online transmission is completely secure; please use strong passwords and keep your account details confidential.
8. Your Rights Under the PDPL
Subject to applicable law, you may have the right to:
- be informed about how your data is collected and used;
- access and obtain a copy of your personal data;
- request correction of inaccurate or incomplete data;
- request deletion/destruction of your data where legally permitted;
- withdraw consent for processing that relies on consent (without affecting prior lawful processing);
- object to certain processing, including direct marketing where applicable;
- file a complaint with the competent authority in Saudi Arabia.
To exercise your rights, contact us using the details above. We may need to verify your identity before responding.
9. Marketing Communications
We may send offers and updates by SMS, email, WhatsApp, or other channels where allowed. You can opt out of marketing messages at any time by using the unsubscribe link (where available), replying STOP to SMS, or contacting customer support.
10. Children’s Privacy
Our Services are not directed at children. We do not knowingly collect personal data from children without appropriate parental consent where required by law.
11. International Transfers
Your data is primarily processed to serve customers in Saudi Arabia. If any data is transferred outside the Kingdom, we will do so only in compliance with PDPL requirements and with appropriate safeguards where required.
12. Third-Party Links
Our website may contain links to third-party sites (such as social media or payment pages). We are not responsible for the privacy practices of those sites and encourage you to read their policies.
13. Changes to This Policy
We may update this Privacy Policy to reflect legal, technical, or business changes. The updated version will be posted on this page with a revised “Last updated” date.
Last updated: June 27, 2026
