Privacy Policy

This Privacy Policy explains how ARAYAH (“we”, “us”, “our”) collects, uses, and protects your personal information when you visit our website, browse or purchase our products, or otherwise interact with us. We are committed to handling your data responsibly and in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. By using this site, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

We collect information you provide directly, such as your name, e-mail address, billing and shipping address, phone number, and payment details when you place an order, create an account, or contact us. We also collect information automatically when you browse the site, including your IP address, browser type, device information, the pages and products you view, and how you interact with our content, using cookies and similar technologies (see Section 4). If you take our skin quiz or subscribe to our newsletter, we additionally store your quiz answers and e-mail preferences.

We use your information to process and fulfil orders, take payments, arrange shipping, and communicate with you about your purchase. We use it to operate, maintain, and improve our website and product catalogue, to personalise your experience — for example, recommending products based on your skin quiz results — and to detect and prevent fraud. Where you have opted in, we also use your information to send marketing communications about new products, skincare tips, and offers. You may withdraw your consent to marketing at any time using the unsubscribe link in any e-mail, or by contacting us directly.

Cookies are small text files stored on your device that help our site function and let us understand how it is used. We use strictly necessary cookies to keep items in your shopping bag and to keep you logged into your account; these cannot be switched off without affecting core functionality. We also use analytics cookies to understand which pages are popular and how visitors move through the site, and, where you consent, marketing cookies to measure the performance of our campaigns. You can manage or withdraw cookie consent at any time through your browser settings.

We do not sell your personal information. We share data only with trusted third parties who help us run our store, including payment processors (to securely process your payment), shipping and fulfilment partners (to deliver your order), e-mail service providers (to send order and marketing communications), and analytics providers (to help us understand site usage). Each provider is contractually required to protect your data and to use it only to provide their service to us. We may also disclose information where required by law, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

If you are located in the European Economic Area (EEA) or the United Kingdom, data protection law gives you a number of rights over your personal data. You have the right to: access the personal information we hold about you; request correction of inaccurate data; request erasure of your data; restrict or object to certain processing; and request a portable copy of your data. Where processing is based on your consent, you may withdraw that consent at any time. To exercise any of these rights, contact us using the details below — we aim to respond within one month, as required by GDPR. If you believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection supervisory authority.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at [email protected] or write to us at ARAYAH, Sarajevo, Bosnia and Herzegovina. We aim to respond to every enquiry within two business days.