At GAFWA we respect your privacy and handle your personal data with care and responsibility. This page explains what data we collect, how we use and protect it, and your rights over it. We recommend reading it before you place your order.

Who is responsible for your data

GAFWA is a Saudi online store for women's pajamas, running on the Salla platform at gafwa.com, and registered in the Commercial Register under No. 7041321022. In handling your data we comply with the regulations in force in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and the E-Commerce Law.

The data we collect

  • Contact details: your name, mobile number and email address.
  • Delivery details: your shipping address and whatever is needed to deliver your order to you.
  • Order data: your order history and any related exchange, return or cancellation requests, and the messages and photos you send us about them.
  • Device and browsing data: such as your device type, your browser and the pages you visit, some of which is collected through cookies.

How we use your data

  • To process, confirm and deliver your orders.
  • For customer service and to follow up on exchange, return and cancellation requests.
  • To send you notifications about your orders and your account.
  • To improve the shopping experience and the store's performance.
  • To measure the performance of our advertising campaigns when we run them, and to show ads that match your interests on advertising and social media platforms.
  • To send offers and marketing messages with your consent. Whenever you ask us to stop, we will stop sending them to you.

Sharing your data

We do not sell or rent your personal data to anyone, and we share it only as far as needed with:

  • The Salla platform, which the store runs on.
  • Payment service providers, to complete payments.
  • Shipping companies, to deliver your order.
  • The advertising and analytics platforms we use, such as social media platforms and search engines. What we share with them is limited to the browsing and store-interaction data needed to measure and improve our ads.
  • The competent official authorities, when the law requires us to.

If an order is shipped outside Saudi Arabia, your delivery details may need to be passed to shipping companies outside the country. This is done only as far as needed to deliver your order, and in line with the applicable regulations.

Exchange, return and cancellation requests are made by contacting us, as explained on the "Exchanges & Returns" page, and we handle what you send us about them under this policy. If you message us through a messaging app, those messages are also subject to that app's own privacy policy.

Payment

Payments are made through the Salla platform and payment service providers, and the available payment methods are shown at checkout, including mada, credit cards, STC Bank and Apple Pay. Your card details are processed directly by the payment providers, and we do not keep them in our store. Payment services are subject to their providers' own privacy policies.

Cookies

We use cookies and similar technologies to keep your shopping cart and your sign-in, and to understand how the store is used so we can improve it. We may also use advertising and analytics measurement tools (pixels) from advertising platforms, to measure our campaigns and show you relevant ads. You can control or delete cookies in your browser settings, and limit personalized ads in the ad settings of your accounts on those platforms. Please note that turning cookies off may affect how some store features work.

How long we keep your data

We keep your data for as long as needed for the purposes set out in this policy, or for as long as the law and our legal obligations require. After that we delete it, or make sure it can no longer be linked to you.

Your rights

  • Access: to know what data we hold about you and to get a copy of it.
  • Correction: to update your data or correct anything that is inaccurate.
  • Deletion and withdrawing consent: to ask us to delete your data once it is no longer needed, or to withdraw your consent, unless the law requires us to keep it.
  • Objecting to marketing: to ask us to stop marketing messages at any time, and we will stop them.
  • Complaints: to file a complaint with the authority responsible for personal data protection in Saudi Arabia if you believe your data has been handled against the law.

To use any of these rights, contact us. We may ask you to confirm your identity before we act on your request, to keep your data safe.

Protecting your data

We take appropriate organizational and technical measures to protect your data from unauthorized access or use, and we limit access to it to the people who need it to serve you. Because no method of electronic transmission or storage is completely secure, we recommend that you keep your account sign-in details private.

Privacy of minors

Our services are intended for adults, and we do not knowingly collect personal data from anyone under the legal age without a guardian's consent. If we find that such data has been collected, we will work to delete it.

Updates to this policy

We may update this policy from time to time to keep up with changes in our services or in legal requirements. The updated version is published on this page, so we recommend checking it now and then.

Contact

For any question about this policy or your data, contact us.

Last updated: September 25, 2026