Privacy policy

Privacy Policy

Ghurabah Hijrah Store

Last updated: 29 September 2026

Ghurabah Hijrah Store ("we", "us", "our", "the store") operates this store and website, including all related information, content, features, tools, products and services (the "Services"), in order to provide you, the customer, with a curated shopping experience. Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it.

1 — Personal information we collect or process

When we say "personal information", we mean information that identifies or can reasonably be linked to you or another person. It does not include information collected anonymously or de-identified so that it cannot identify anyone. Depending on how you interact with the Services, where you live, and as permitted or required by applicable law, we may collect or process:

  • Contact details — your name, billing and shipping address, and email address.

  • Account information — if you create a store account, your email address, password (stored only in encrypted/hashed form by our platform — we can never see or recover your actual password), and account preferences and settings.

  • Order and transaction information — the items you view, add to your cart, or purchase; your order history; returns, exchanges and cancellations.

  • Communications with us — the information you include when you contact us, for example a customer support email.

  • Reviews — if you post a product review, the name/display name, content, and any images you choose to publish in it. Posted reviews are public: do not include personal information in reviews that you do not want publicly visible.

  • Device and usage information — information about your device, browser or network connection (including your IP address and similar unique identifiers) collected automatically through cookies and similar technologies when you use the Services.

  • Financial information — payment details are processed by our PCI-compliant payment processors (such as Shopify Payments and PayPal). We never see, receive, or store your full payment card details.

What we deliberately don't collect: we run a one-person store — there are no customer loyalty programs, and no apps or trackers beyond what Shopify's standard platform provides. We collect only what is needed to take your order, deliver it, and support you.

Sources of personal information

  • Directly from you — when you create an account, place an order, pre-order, post a review, or email us.

  • Automatically through the Services — from your device via cookies and similar technologies.

  • From our service providers — Shopify and our fulfillment partner, who process personal information on our behalf to run the store and deliver your orders.

2 — How we use your personal information

We use personal information only for the following purposes:

  • To provide the Services and fulfill your order — to perform our contract with you: to process your payment, to deliver your ebook download link, to arrange production and shipping of physical merchandise, to process returns, exchanges and refunds, to create and manage your store account, to enable you to post reviews, and to send you notifications related to your order or account (including your digital download link and pre-order release notices).

  • Customer support — to answer your questions and resolve issues, including refund and delivery enquiries.

  • Security and fraud prevention — to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity, and to secure the Services. If you create an account, you are responsible for keeping your login credentials safe — do not share your password with anyone, and tell us promptly if you suspect unauthorized access to your account.

  • Legal reasons — to comply with applicable law or respond to valid legal process, to resolve disputes, and to enforce our terms and policies.

  • Marketing (email only, if you opt in) — we do not send marketing by text message or postal mail. Where you choose to receive our emails (for example, release announcements for pre-orders or new products), you may opt out at any time using the unsubscribe link in any email we send. Opting out never affects non-promotional messages about your orders.

3 — How we disclose personal information

We disclose personal information only as follows:

  • To Shopify — our e-commerce platform, which hosts the store and processes your checkout. See Section 5.

  • To our fulfillment partner — for physical merchandise orders only, we share your name, delivery address and email address with our print-on-demand fulfillment partner so your item can be produced and shipped directly to you. They use this information solely to fulfill and deliver your order.

  • To payment processors — payment information is transmitted directly to and handled by our PCI-compliant payment processors; it never reaches us.

  • When you direct us to — for example, information needed to deliver your order or resolve a support issue.

  • For legal reasons — to comply with applicable legal obligations, to respond to subpoenas, search warrants and similar valid legal requests, to enforce our terms and policies, and to protect or defend the Services, our rights, and the rights of our customers; and in connection with a business transaction such as a merger or bankruptcy.

We do not sell your personal information. We do not share it with advertising networks or data brokers, and we do not run any tracking or analytics beyond what Shopify's standard platform includes.

4 — Third-party websites and links

The Services may contain links to websites or online platforms operated by third parties (for example, the Shopify Consumer Privacy Policy, Global Privacy Control, and data protection authority websites referenced in this policy). If you follow a link to a site not operated or controlled by us, you should review that site's own privacy and security policies and terms. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on them. Information you post in public or semi-public venues — such as product reviews or comments on third-party social platforms — may be viewable by other users without limitation as to its use by us or a third party. Our inclusion of a link does not imply endorsement of the linked site or its owners, except as disclosed on the Services.

5 — Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services. Shopify's use of your personal information is described in the Shopify Consumer Privacy Policy (https://privacy.shopify.com/en), which also explains the rights you may have over data processed by Shopify and how to exercise them, including via Shopify's Privacy Portal. For data processed by Shopify on our behalf, we are the data controller and Shopify is the data processor; for Shopify's own processing (such as platform improvement and security), Shopify is responsible.

6 — Cookies and similar technologies

The store uses cookies and similar technologies that Shopify requires to operate the Services (for example, to keep your cart working, to remember your preferences, and to detect fraud). These may include Shopify's standard platform cookies, which can support measurement of store activity and, depending on your region, personalized advertising across other merchants' stores. Depending on where you live, you may see a cookie banner allowing you to accept or decline non-essential cookies, and you can manage Global Privacy Control (GPC) signals as described in Section 9. We do not add any third-party tracking pixels, analytics tools, or advertising tags beyond Shopify's standard platform features.

7 — Children's data

The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with personal information, contact us at the email address in Section 11 and we will delete it. We do not knowingly share or sell (as defined by applicable law) the personal information of individuals under 16 years of age.

8 — Security and retention

Security. Your payment details are protected by 256-bit SSL/TLS encryption in transit and PCI-compliant processing — we never see or store your card information. Our store is hosted on Shopify's Level 1 PCI DSS certified infrastructure. No security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Please do not send sensitive information (such as card details) to us by email — we will never need it and will never ask for it (see Section 10).

Retention. We keep your personal information only as long as needed to: fulfill your order and honor warranty/refund rights under our Refund Policy; comply with tax, accounting and consumer-law record-keeping obligations; and resolve disputes or enforce our terms. Order records are retained for the period required by applicable law; support emails are deleted once the matter is resolved and any retention period has passed. When we no longer need your information, we delete or de-identify it.

9 — Your rights and choices

Depending on where you live, you may have some or all of the rights below. These rights are not absolute, may apply only in certain circumstances, and in certain cases we may decline a request as permitted by law. We will not discriminate against you for exercising any of these rights.

  • Right of access / know — to request a copy of the personal information we hold about you.

  • Right to delete — to request deletion of personal information we maintain about you (subject to records we must legally keep, such as order and tax records).

  • Right to correct — to request correction of inaccurate personal information.

  • Right of portability — to receive a copy of your personal information and, in certain circumstances, have it transferred to a third party.

  • Right to opt out of targeted advertising — depending on where you reside, you may opt out of the "sale" or "share" of personal information for targeted advertising. We do not sell your information; to opt out of Shopify's personalized advertising, use the controls in the cookie banner or Shopify's Privacy Portal (https://privacy.shopify.com/en). If you visit with the Global Privacy Control (GPC) signal enabled, we will automatically treat it as an opt-out request for that device and browser (and your Shopify account, if we can associate it).

  • Managing communications — you may opt out of marketing emails at any time via the unsubscribe link in any email. We may still send you non-promotional emails about your account or orders.

If you live in the UK or EEA, you also have the following rights, subject to exceptions and limitations in local law:

  • Objection to processing and restriction of processing — to ask us to stop or restrict processing of your personal information for certain purposes.

  • Withdrawal of consent — where we rely on consent, you may withdraw it; this does not affect the lawfulness of processing before withdrawal.

  • Complaint to a regulator — you may lodge a complaint with your local data protection authority (EEA supervisory authority list: https://www.edpb.europa.eu/about-edpb/board/members_en).

You may exercise any of these rights by emailing us at the address in Section 11. We may need to verify your identity before processing your request, as permitted or required by law, and we will respond within the timeframe required by applicable law. You may designate an authorized agent to make requests on your behalf with proof of authorization, and we may still need to verify your identity directly.

Complaints and appeals. If you have a complaint about how we process your personal information, contact us using the email address in Section 11. If we decline a request and you are dissatisfied with our response, you may appeal our decision by replying to that same email address, and we will review the appeal as required by applicable law. Depending on where you live, you may also lodge a complaint with your local data protection authority — for the EEA, a list of supervisory authorities is available at https://www.edpb.europa.eu/about-edpb/board/members_en.

10 — Protecting you (anti-phishing)

We will never ask you for your password, your full payment card details, a bank transfer, or remote access to your device — by email, phone, text or any other channel. If you receive a message claiming to be from the Ghurabah Hijrah Store that asks for any of these, or that looks suspicious in any way, it is not from us — please forward it to the email address in Section 11 so we can warn other customers. Legitimate messages from us only ever relate to your order, your download link, or a support conversation you started.

11 — Contact

If you have any questions about our privacy practices or this Privacy Policy, or you would like to exercise any of your rights, email us at yushaonhijrah@gmail.com — this is our official contact channel, and we respond to every message within 3 business days.

For the purpose of applicable data protection laws, Ghurabah Hijrah Store is the data controller of your personal information, reachable at the email address above. Any formal notices, legal requests, or requests for registered business details should be sent to that email address, and we will respond as required by applicable law.

We do not publish a postal address, telephone number, or any other offline contact details — email is our only contact channel, as stated in our Contact Information page.

12 — International transfers

Your personal information may be transferred to, stored, and processed in countries other than the one you live in — including to Shopify (Canada and the United States) and our fulfillment partner's regional facilities (United States, United Kingdom, European Union, Canada, Australia, and Japan). Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on recognized transfer mechanisms such as the European Commission's Standard Contractual Clauses or equivalent UK mechanisms, unless the destination country has been determined to provide an adequate level of protection.

13 — Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised policy on this website, update the "Last updated" date, and provide notice as required by applicable law.