Privacy policy
Last Updated: September 20, 2026
Effective Date: September 20, 2026
The Geek Artist operates this store and website, including all related information, content, features, tools, products, and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). The Geek Artist is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described herein.
1. Personal Information We Collect or Process
When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you or another individual. Personal information does not include information that is collected anonymously or that has been de-identified so that it cannot identify or be reasonably linked to you.
We may collect or process the following categories of personal information depending on how you interact with the Services, where you live, and as permitted or required by applicable law:
Contact Details: Name, billing address, shipping address, phone number, and email address.
Financial & Payment Information: Payment card details, transaction identifiers, form of payment, payment confirmations, and related billing metadata. (Please note: Sensitive payment card numbers are processed directly by our secure third-party payment gateways and are never stored directly on our servers).
Account Information: Username, password, security credentials, preferences, and account settings.
Order & Transaction Information: Items viewed, cart contents, wishlist items, completed orders, returns, exchanges, cancellations, and order history.
Communications: Details submitted when contacting customer support or engaging in correspondence with us.
Device & Technical Information: Device type, operating system, browser type, network connection, IP address, and unique digital identifiers.
Usage Data: Browsing patterns, time spent on pages, referral sources, and navigation within the Services.
2. Personal Information Sources
We collect personal information through the following channels:
Directly From You: When you place an order, create an account, subscribe to our newsletter, communicate with support, or submit reviews.
Automatically Collected: Technical and usage data collected via cookies, log files, web beacons, and pixels when you browse our site.
From Service Providers & Vendors: Including payment processors, fulfillment services, and shipping carriers.
From Third-Party Partners: Including advertising networks and analytics tools.
3. How We Use Your Personal Information & Legal Bases for Processing
Depending on how you interact with us and where you reside (including under the UAE Personal Data Protection Law, GDPR, and UK GDPR), we process your personal information under the following legal bases and for the following purposes:
Performance of a Contract:
Processing payments, fulfilling orders, arranging shipping with courier and delivery partners, managing accounts, facilitating returns/exchanges, and communicating transaction-related updates.
Legitimate Interests:
Enhancing and tailoring our storefront, optimizing website performance, preventing fraud, authenticating accounts, and securing our systems.
Consent:
Sending marketing emails, newsletters, and promotional SMS messages, as well as deploying non-essential tracking cookies and targeted advertising. You have the right to withdraw your consent at any time.
Compliance with Legal Obligations:
Maintaining accounting, tax, customs, and financial audit records in accordance with UAE federal laws and relevant international trade regulations.
4. How We Disclose Personal Information
In certain circumstances, we share personal information with third parties for legitimate business operations:
Shopify & Service Providers: With Shopify (our hosting and e-commerce platform) and third-party vendors providing IT infrastructure, payment processing, fraud screening, analytics, and customer support.
Fulfillment & Logistics Partners: With third-party shipping carriers and logistics couriers (e.g., local and international parcel couriers) solely to dispatch and deliver your purchases.
Marketing & Advertising Partners: With advertising platforms to show personalized ads based on your interactions across websites.
Corporate Transactions & Legal Authorities: Where required to comply with subpoenas, court orders, or lawful government investigations (including law enforcement and regulatory bodies), or during business reorganizations, mergers, or asset transfers.
5. Relationship with Shopify
The Services are hosted by Shopify Inc., which collects and processes personal information about your access to and use of the Services to facilitate our operations. Information you submit is transmitted to and stored by Shopify on secure servers located in various jurisdictions around the world. To learn more about how Shopify manages customer data, please review the Shopify Consumer Privacy Policy. You may also manage your data via the Shopify Privacy Portal.
6. International Data Transfers
Because we operate from Dubai, United Arab Emirates, and sell to customers worldwide, your personal information may be transferred to, stored, and processed in jurisdictions outside your home country.
Transfers from the UAE: Transfers of personal data outside the United Arab Emirates comply with the requirements of UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL), ensuring recipient countries offer adequate protection or implementing contractual safeguards.
Transfers from the EEA / UK: When transferring data outside the European Economic Area or United Kingdom to countries not recognized as adequate, we utilize recognized safeguards, including the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum.
7. Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking tools to run our storefront, understand visitor traffic, and enable personalized experiences. You can manage or disable non-essential cookies via your browser settings or through our cookie preference banner.
We recognize the Global Privacy Control (GPC) signal. If you visit our store with GPC enabled, we will honor your preference to opt out of data sharing for targeted advertising on that browser or device.
8. Data Retention and Security
We implement appropriate technical and organizational safeguards designed to protect personal information from unauthorized access, loss, or disclosure. However, no electronic transmission or storage system is completely impenetrable.
We retain personal information only as long as necessary to fulfill the purposes described in this policy, manage customer accounts, satisfy legal, tax, or accounting requirements, and resolve disputes.
9. Children's Data
Our Services are not directed to individuals under the age of majority in their jurisdiction (and strictly under 18 years of age). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately to request deletion.
10. Your Rights and Choices
Depending on your jurisdiction (including the UAE, EEA, UK, Canada, and various US states), you may have the following rights regarding your personal information:
Right to Access / Know: Request confirmation of processing and obtain a copy of the personal data we hold about you.
Right to Rectification / Correction: Request updates or corrections to inaccurate or incomplete information.
Right to Erasure / Deletion: Request the deletion of your personal data, subject to statutory retention exceptions.
Right to Data Portability: Receive your information in a structured, machine-readable format or have it transferred to another controller where technically feasible.
Right to Restrict or Object to Processing: Object to or request the limitation of our processing under certain conditions.
Right to Withdraw Consent: Where processing is based on consent (such as direct marketing communications), withdraw consent at any time without affecting past lawful processing.
Right to Opt-Out of Sale or Targeted Advertising: Direct us not to share your data for cross-context behavioral advertising.
To exercise any of these rights, please submit a request to the contact details provided below. We will verify your identity before fulfilling the request and will respond within statutory deadlines.
11. Complaints and Regulatory Authorities
If you have questions or concerns regarding our privacy practices, please contact us directly so we can resolve them. You also have the right to lodge a formal complaint with your relevant supervisory authority:
United Arab Emirates: The UAE Data Office.
European Economic Area (EEA): Your national Data Protection Authority.
United Kingdom: The Information Commissioner’s Office (ICO) (ico.org.uk).
12. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect operational, legal, or regulatory updates. Any changes will be posted on this page with an updated revision date.
13. Contact Us
If you have questions about this Privacy Policy, wish to update your details, or want to exercise your legal privacy rights, please reach out to us:
Brand Name: The Geek Artist
Email: heba.shalaby88@gmail.com
Physical Address: Town Square Community Center, Dubai, United Arab Emirates