SHUAFAY Privacy Policy

This policy applies across the unified SHUAFAY ecosystem, including:

• SHUAFAY Industries for manufacturing, sourcing, wholesale, private label, export and related B2B services.
• SHUAFAY for retail products, leatherwear, accessories, custom sizing, made-to-order commerce and customer services.
• SHUAFAY Studios for website development, ecommerce, SEO, performance, media and creative services.
• Related websites, accounts, applications, campaigns, integrations and services operated within the SHUAFAY ecosystem.

This policy may apply to visitors, customers, account holders, Wallet users, custom clothing customers, subscribers, B2B contacts, suppliers, contractors and Studios clients.

The SHUAFAY entity or division responsible for a particular processing activity is the one that determines why and how information is used for that service or relationship.

Corporate and contact information may be reviewed through the SHUAFAY Imprint and Contact page .

Information you provide directly may include:

• Name and company name.
• Email address and phone or WhatsApp number.
• Billing and delivery addresses.
• Account credentials.
• Product, colour, fit and size preferences.
• Measurements and custom sizing information.
• Made-to-order and personalisation instructions.
• Order, inquiry and quotation details.
• Wallet top-up and redemption information.
• Support messages and correspondence.
• Uploaded photographs, sketches, logos, videos, documents or design references.
• B2B and Studios project information.
• Reviews, comments and feedback.

Information collected automatically may include:

• IP address.
• Browser, device and operating system.
• Referral and page-navigation information.
• Approximate region or location.
• Language and currency preferences.
• Session and cookie identifiers.
• Login, security, diagnostic and error data.

Information may also be received from payment providers, banks, couriers, analytics services, marketplaces, advertising platforms, website tools and other providers connected to the requested service.

SHUAFAY may use information to:

• Create and manage accounts.
• Process and fulfil orders.
• Support custom and made-to-order production.
• Arrange manufacturing, sourcing and delivery.
• Process refunds, returns and inspections.
• Operate Wallet balances and rewards.
• Provide customer and technical support.
• Respond to inquiries and quotations.
• Send transactional, security and policy communications.
• Detect fraud, misuse and unauthorized activity.
• Improve usability, performance and security.
• Remember region, currency and preferences.
• Deliver B2B and Studios services.
• Maintain records and audit trails.
• Meet accounting, tax and legal obligations.
• Conduct permitted marketing and measurement.

Where required, processing may rely on one or more grounds such as:

• Performance of a contract.
• Steps requested before entering a contract.
• Compliance with legal obligations.
• Legitimate operational or security interests.
• Consent, where required.
• Prevention of fraud and misuse.
• Establishment or defence of legal claims.

Where processing depends on consent, consent may be withdrawn for future processing, subject to applicable law and processing that must continue for another lawful reason.

Order and transaction records may include:

• Products, variations and order value.
• Selected currency and payment method.
• Payment attempts and transaction status.
• Invoices, refunds and reversals.
• Delivery and tracking information.
• Fraud-screening and verification outcomes.
• Disputes and chargeback records.

Payments may be processed by HBL Pay or other authorized providers. SHUAFAY does not ordinarily store complete payment-card numbers within its own website systems. Transaction references and reconciliation records may still be retained.

Wallet-related data may include:

• Balances and currencies.
• Top-up and redemption history.
• Promotional credits and corrections.
• Transfers where enabled.
• Linked orders and refunds.
• Security, support and audit notes.

Wallet data may be used to calculate balances, apply rewards, process redemptions, investigate errors and prevent manipulation or misuse.

Review the SHUAFAY Wallet Policy for service-specific terms.

Custom and made-to-order services may require:

• Body and garment measurements.
• Fit and layering preferences.
• Design references and photographs.
• Material, colour and hardware choices.
• Personalisation and production instructions.
• Revision, approval and quality-control records.

B2B services may require company details, commercial contacts, tax or shipping information, quantities, specifications, branding, samples and quotation records.

SHUAFAY Studios projects may involve website content, files, access credentials, analytics, product data, media, technical reports and project communication.

Technology-assisted or AI-enabled tools may be used to support content, design, image processing, workflow routing, analysis, fraud monitoring or customer assistance.

Do not submit third-party content, confidential materials, logos, personal data or intellectual property unless you have authority to provide it for the requested purpose.

Cookies and similar technologies may be used for:

• Website and checkout operation.
• Authentication and account security.
• Cart, currency and regional preferences.
• Fraud prevention and abuse detection.
• Analytics and performance measurement.
• Advertising and campaign attribution.
• Personalization and user preferences.
• Consent and privacy-choice records.

Where required, non-essential technologies are used according to the choices available through the cookie banner or privacy controls.

You may review or change available choices through the site’s cookie settings. Browser settings may also permit cookies to be blocked or removed, although essential features may not function correctly afterward.

For further information, review the applicable Cookie Policy .

Marketing emails may include permitted measurement features such as open or link activity tracking. Available choices can be managed through the Manage Subscription page .

Information may be shared where reasonably necessary with providers supporting:

• Payment and banking services.
• Shipping, tracking and customs clearance.
• Hosting, CDN and website infrastructure.
• Security, fraud prevention and authentication.
• Analytics, advertising and campaign measurement.
• Email and customer communication.
• Ecommerce, marketplace and catalog integrations.
• Cloud storage and project collaboration.
• Accounting, tax, legal and professional advice.
• Manufacturing, sourcing and fulfilment.

SHUAFAY may also disclose information where reasonably necessary to:

• Comply with law or lawful authority requests.
• Protect rights, users, systems or operations.
• Investigate fraud, abuse or security incidents.
• Establish or defend legal claims.
• Complete a merger, reorganization, financing, sale or transfer of relevant business assets.

SHUAFAY does not describe ordinary provider disclosures as selling personal information simply because a provider is paid to perform a service. Local law may apply broader definitions, and applicable opt-out rights will be respected where required.

SHUAFAY serves customers and clients across multiple countries. Information may therefore be processed in Pakistan or in other countries where SHUAFAY, payment providers, couriers, cloud platforms, technology providers or commercial partners operate.

Privacy and data-protection standards can vary between jurisdictions.

Where applicable law requires safeguards for an international transfer, SHUAFAY or the relevant provider may use an appropriate transfer mechanism, contractual protection or other recognized safeguard.

Some provider-controlled processing is governed by that provider’s own contractual and privacy terms.

Information is retained for as long as reasonably necessary for the purpose for which it was collected, including:

• Providing an active service.
• Completing orders and delivery.
• Maintaining accounts and Wallet records.
• Providing support and warranty review.
• Managing custom patterns or repeat orders.
• Maintaining financial and tax records.
• Preventing fraud and securing systems.
• Resolving disputes and legal claims.
• Meeting legal and regulatory obligations.

Retention periods differ according to the information, service and applicable law.

When information is no longer required, SHUAFAY may delete it, anonymize it, aggregate it or securely restrict further use.

Deletion requests may not result in immediate deletion where information must be kept for legal, financial, security, fraud-prevention or claims-related purposes.

Residual copies may temporarily remain within secured backup systems until the normal backup cycle replaces them.

SHUAFAY uses reasonable technical and organizational measures designed to reduce the risk of unauthorized access, loss, alteration, misuse or disclosure.

Measures may include:

• Encrypted website connections.
• Account and access controls.
• Security monitoring and logging.
• Spam, bot and fraud controls.
• Software and infrastructure maintenance.
• Backups and recovery processes.
• Limited provider and staff access.
• Payment-provider security controls.

No internet transmission or storage system can be guaranteed completely secure.

Customers should use unique passwords, protect account access, avoid sharing private links and contact SHUAFAY promptly when unauthorized activity is suspected.

Where a qualifying personal-data incident occurs, SHUAFAY will assess the incident and make notifications required by applicable law.

Automated or technology-assisted tools may be used to support:

• Fraud and security monitoring.
• Transaction-risk review.
• Spam and bot detection.
• Regional and currency preferences.
• Website personalization.
• Marketing measurement.
• Inquiry and workflow routing.
• Content and design assistance.
• Operational analysis.

These tools may produce recommendations, flags or classifications that support human or operational review.

Where applicable law provides rights relating to a decision based solely on automated processing that produces legal or similarly significant effects, you may request information or appropriate human review, subject to available exceptions.

SHUAFAY’s commercial website and services are not intentionally directed to young children. A parent, guardian or legally authorized adult should manage purchases and submissions for a minor where required.

Contact SHUAFAY where information appears to have been submitted by a child without appropriate authority.

The website may link to third-party websites, platforms, social networks, payment providers or courier services. Their privacy practices are governed by their own notices.

This policy may be updated to reflect:

• Changes to products or services.
• New technologies or providers.
• Legal or regulatory developments.
• Operational and security improvements.
• Changes to the SHUAFAY ecosystem.

The updated date at the top of the policy identifies the current published version. Where required, material changes may also be communicated through another appropriate channel.