Privacy Policy

At Giftlaya, we believe that your privacy is not a formality - it is a responsibility. This Privacy Policy explains how we collect, use, store, protect, and share your personal information when you visit giftlaya.ae, create an account, place an order, or interact with us through any of our communication channels. By using our website or services, you consent to the practices described in this policy. If you do not agree with any part of this policy, please refrain from using our platform.

This policy applies to all users of giftlaya.ae, including visitors who browse without placing an order, registered account holders, and customers who complete a purchase.

Who We Are

Giftlaya is an online gifting and delivery service operating across the United Arab Emirates, with a registered presence at Marasi Drive, Business Bay, Dubai. We offer flowers, cakes, balloons, gift hampers, and personalised gifting solutions delivered across Dubai, Abu Dhabi, Sharjah, Ajman, Ras Al Khaimah, Fujairah, and beyond. For all privacy-related queries, you may reach us at support@giftlaya.ae or call us at +971 544679338.

Information We Collect

We collect two broad categories of information - information you provide to us directly, and information collected automatically when you use our website.

Information you provide directly includes your full name, email address, phone number, delivery address, billing details, and any personalisation instructions or special messages you include with your order. If you contact us via WhatsApp, email, or our website contact form, we also retain records of that communication. If you create an account on giftlaya.ae, we store your login credentials in encrypted form along with your order history and saved addresses.

Information collected automatically includes your IP address, browser type, device type, operating system, pages visited, time spent on each page, referral source, and other behavioural data gathered through cookies and similar tracking technologies. This data is collected through analytics tools and helps us understand how visitors use our website so we can improve it over time.

If you choose to pay online, your payment details are processed directly by our authorised payment gateway partners. Giftlaya does not store, access, or retain your full card number, CVV, or banking credentials at any point.

How We Use Your Information

The information we collect is used for the following purposes. To process and fulfil your orders, including coordinating delivery, communicating order status updates, and resolving any issues that arise during fulfilment. To personalise your experience on our website, including remembering your preferences, saved addresses, and past purchases to make future ordering easier. To send you transactional communications such as order confirmations, delivery notifications, and customer support responses. To send you promotional communications, including offers, new product announcements, and seasonal campaigns - but only where you have opted in to receive such communications. To improve our website, products, and services by analysing usage patterns, identifying technical issues, and understanding which products and pages perform well. To comply with legal and regulatory obligations under UAE law, including maintaining accurate transaction records and responding to lawful requests from authorities.

We do not use your personal information to make automated decisions that significantly affect you without human oversight, and we do not use it for purposes incompatible with those stated above.

Legal Basis for Processing

Giftlaya processes your personal data on the following legal grounds. Contractual necessity - processing your name, contact details, and delivery address is essential to fulfilling the order you have placed with us. Legitimate interests - we use analytics and behavioural data to improve our services in ways that do not override your fundamental rights. Consent - for marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time. Legal obligation - we may be required to retain certain transaction data to comply with UAE commercial and tax laws.

Cookies and Tracking Technologies

Giftlaya uses cookies - small text files stored on your device - to enhance your browsing experience and gather website analytics. Cookies we use fall into three categories. Essential cookies, which are necessary for the website to function correctly and cannot be disabled without affecting core functionality such as your shopping cart or checkout process. Analytics cookies, which help us understand visitor behaviour and improve the website. These are anonymised and do not identify you personally. Marketing cookies, which may be placed by third-party advertising platforms to serve relevant ads to you based on your browsing history. These are only activated with your consent.

You may manage your cookie preferences through your browser settings or through the cookie consent banner displayed when you first visit our website. Please note that disabling certain cookies may affect the functionality of some parts of the site.

Sharing Your Information

Giftlaya does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share your data only in the following limited circumstances.

With delivery and logistics partners who require your name, phone number, and delivery address to complete the fulfilment of your order. With payment gateway providers who process your transaction securely on our behalf. With technology and analytics service providers who help us operate the website and analyse traffic, all of whom are bound by data processing agreements. With legal and regulatory authorities when required to do so by law, court order, or in response to a valid governmental request. In the event of a business restructuring, merger, or acquisition, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share data are required to handle it in accordance with applicable UAE data protection standards and are not permitted to use it for any purpose beyond what is strictly necessary.

Data Retention

We retain your personal information for as long as is necessary to fulfil the purposes for which it was collected. Order records are typically retained for a minimum of five years to comply with UAE commercial law requirements. If you have an account with us, your data is retained for the duration of your account and for a reasonable period thereafter in case of disputes or queries. Marketing preferences and communication records are retained until you withdraw consent or request deletion. Anonymised and aggregated analytics data may be retained indefinitely as it does not identify any individual.

Your Rights

As a user of giftlaya.ae, you have the following rights in relation to your personal data. The right to access the personal information we hold about you. The right to request correction of any inaccurate or incomplete data. The right to request deletion of your data, subject to our legal retention obligations. The right to withdraw consent for marketing communications at any time by clicking the unsubscribe link in any email or contacting us directly. The right to object to certain types of processing, including profiling for marketing purposes. The right to request that we restrict processing of your data in specific circumstances.

To exercise any of these rights, please contact us at support@giftlaya.ae. We will respond to all valid requests within a reasonable timeframe and in accordance with applicable UAE regulations. We may need to verify your identity before processing certain requests to protect your data from unauthorised access.

Data Security

Giftlaya implements appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include SSL encryption across the website, secure storage of account credentials, restricted internal access to customer data on a need-to-know basis, and regular review of our data handling practices.

While we take every reasonable precaution, no method of data transmission over the internet or electronic storage is entirely risk-free. We cannot guarantee absolute security, but we are committed to responding swiftly and transparently in the event of any data breach that may affect your rights.

Children's Privacy

Giftlaya's services are intended for use by individuals aged 18 and above. We do not knowingly collect personal information from children under the age of 18. If we become aware that a child has provided us with personal data without appropriate parental consent, we will take immediate steps to delete that information. If you believe a child has submitted information to us, please contact us at support@giftlaya.ae.

International Data Transfers

Some of our third-party service providers, including analytics and cloud hosting partners, may be located outside the UAE. Where such transfers occur, we ensure that appropriate safeguards are in place to maintain the same level of protection for your data as required under UAE law.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised version will always be published on giftlaya.ae with an updated effective date at the top. We encourage you to review this page periodically. Where changes are material, we may notify you directly via email or a prominent notice on the website.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to get in touch with us.

Email: support@giftlaya.ae

Phone: +971 544679338