At GAFWA we respect your privacy and handle your personal data with care and responsibility. This page explains what data we collect, how we use and protect it, and your rights over it. We recommend reading it before you place your order.
GAFWA is a Saudi online store for women's pajamas, running on the Salla platform at gafwa.com, and registered in the Commercial Register under No. 7041321022. In handling your data we comply with the regulations in force in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and the E-Commerce Law.
We do not sell or rent your personal data to anyone, and we share it only as far as needed with:
If an order is shipped outside Saudi Arabia, your delivery details may need to be passed to shipping companies outside the country. This is done only as far as needed to deliver your order, and in line with the applicable regulations.
Exchange, return and cancellation requests are made by contacting us, as explained on the "Exchanges & Returns" page, and we handle what you send us about them under this policy. If you message us through a messaging app, those messages are also subject to that app's own privacy policy.
Payments are made through the Salla platform and payment service providers, and the available payment methods are shown at checkout, including mada, credit cards, STC Bank and Apple Pay. Your card details are processed directly by the payment providers, and we do not keep them in our store. Payment services are subject to their providers' own privacy policies.
We use cookies and similar technologies to keep your shopping cart and your sign-in, and to understand how the store is used so we can improve it. We may also use advertising and analytics measurement tools (pixels) from advertising platforms, to measure our campaigns and show you relevant ads. You can control or delete cookies in your browser settings, and limit personalized ads in the ad settings of your accounts on those platforms. Please note that turning cookies off may affect how some store features work.
We keep your data for as long as needed for the purposes set out in this policy, or for as long as the law and our legal obligations require. After that we delete it, or make sure it can no longer be linked to you.
To use any of these rights, contact us. We may ask you to confirm your identity before we act on your request, to keep your data safe.
We take appropriate organizational and technical measures to protect your data from unauthorized access or use, and we limit access to it to the people who need it to serve you. Because no method of electronic transmission or storage is completely secure, we recommend that you keep your account sign-in details private.
Our services are intended for adults, and we do not knowingly collect personal data from anyone under the legal age without a guardian's consent. If we find that such data has been collected, we will work to delete it.
We may update this policy from time to time to keep up with changes in our services or in legal requirements. The updated version is published on this page, so we recommend checking it now and then.
For any question about this policy or your data, contact us.
Last updated: September 25, 2026