Privacy policy
AZRA PRIVACY POLICY
Last updated: September 29, 2026
OVERVIEW
MAISON ARABIA ATELIER operates the AZRA store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”).
AZRA is powered by Shopify, which enables us to provide the Services to you.
This Privacy Policy describes how we collect, use, store and disclose your personal information when you visit or use our website, make a purchase or other transaction through the Services, create an account, communicate with us or otherwise interact with AZRA.
If there is a conflict between our Terms of Service and this Privacy Policy regarding the collection, processing or disclosure of personal information, this Privacy Policy will apply to those matters.
Please read this Privacy Policy carefully.
By using or accessing the Services, you acknowledge that you have read this Privacy Policy and understand how your personal information is processed as described below.
1. DATA CONTROLLER AND BUSINESS INFORMATION
For the purposes of applicable data protection legislation, including the General Data Protection Regulation (GDPR), the data controller responsible for your personal information is:
Trading name:
AZRA
Registered / business name:
MAISON ARABIA ATELIER
NIF:
B88892526
Business address:
Carretera de la Sierra, No. 20
Granada, Spain
Phone:
+34 687 414 981
Email:
contact@azrakeftan.com
Website:
azrakaftan.com
For questions concerning privacy or the exercise of your data protection rights, please contact us at:
contact@azrakeftan.com
2. PERSONAL INFORMATION WE COLLECT OR PROCESS
When we use the term “personal information” or “personal data”, we mean information that identifies you or can reasonably be linked to you.
Personal information does not generally include information that has been collected anonymously or irreversibly anonymised so that it can no longer identify or reasonably be linked to an individual.
Depending on how you interact with AZRA, the Services you use, your location and applicable law, we may collect or process the following categories of personal information:
CONTACT INFORMATION
This may include:
• first and last name;
• billing address;
• shipping address;
• postal address;
• telephone number;
• email address.
PAYMENT AND FINANCIAL INFORMATION
This may include:
• payment method;
• payment card information processed by our payment providers;
• payment confirmation;
• transaction information;
• billing details;
• refunds and payment-related information.
Complete card information may be collected and processed directly by Shopify, Shopify Payments or another authorised payment processor rather than stored directly by AZRA.
ACCOUNT INFORMATION
This may include:
• username;
• password or authentication credentials;
• account preferences;
• language preferences;
• saved addresses;
• settings;
• account history.
ORDER AND TRANSACTION INFORMATION
This may include:
• products viewed;
• products added to your cart;
• products added to a wishlist;
• purchases;
• order history;
• returns;
• exchanges;
• cancellations;
• refunds;
• customisation requests;
• measurements or specifications provided for personalised products.
COMMUNICATIONS WITH US
We may process information you provide when you communicate with us, including through:
• email;
• contact forms;
• customer support requests;
• telephone;
• social media;
• messages concerning an order;
• returns or complaints.
DEVICE AND TECHNICAL INFORMATION
This may include:
• IP address;
• browser type;
• device type;
• operating system;
• network connection information;
• device identifiers;
• cookie identifiers;
• technical information associated with your access to the Services.
USAGE INFORMATION
We may collect information about how you interact with our Services, including:
• pages visited;
• products viewed;
• actions performed on the website;
• time and date of interactions;
• navigation patterns;
• referring pages;
• shopping activity.
3. SOURCES OF PERSONAL INFORMATION
We may collect personal information from the following sources:
DIRECTLY FROM YOU
For example, when you:
• place an order;
• create an account;
• subscribe to our newsletter;
• contact customer support;
• request a return;
• provide measurements or customisation information;
• complete a form;
• communicate with us.
AUTOMATICALLY THROUGH THE SERVICES
Certain information may be collected automatically when you access or use our website through cookies, pixels and similar technologies.
FROM SERVICE PROVIDERS
We may receive information from service providers that support our business, including providers involved in:
• ecommerce;
• payments;
• order fulfilment;
• shipping;
• analytics;
• fraud prevention;
• customer support;
• marketing.
FROM BUSINESS PARTNERS OR OTHER THIRD PARTIES
Where permitted by law, we may receive information from business partners, advertising platforms, social media platforms or other third parties.
4. HOW WE USE YOUR PERSONAL INFORMATION
Depending on how you interact with us and the Services, we may use your personal information for the following purposes:
PROVIDING AND MANAGING THE SERVICES
We may process personal information to:
• process and fulfil orders;
• process payments;
• arrange shipping and delivery;
• manage customer accounts;
• process returns, refunds and exchanges;
• communicate order confirmations and updates;
• provide customer support;
• provide requested products and services;
• process personalised or made-to-measure orders;
• remember preferences;
• maintain shopping carts;
• improve the customer experience.
PERSONALISATION AND IMPROVEMENT
We may use information to understand how customers use the Services and improve:
• website functionality;
• product presentation;
• customer experience;
• store navigation;
• services and features.
Where permitted, this may also include providing product recommendations based on customer activity or purchases.
MARKETING AND ADVERTISING
Where permitted by applicable law, we may use personal information for marketing and promotional purposes, including:
• sending promotional emails;
• sending information about new collections;
• communicating special offers;
• measuring advertising effectiveness;
• displaying relevant advertising.
Where consent is legally required, we will obtain the appropriate consent before carrying out such processing.
You may withdraw your consent to marketing communications at any time.
SECURITY AND FRAUD PREVENTION
We may process personal information to:
• authenticate accounts;
• provide secure transactions;
• detect suspected fraud;
• investigate suspicious activity;
• prevent misuse of our Services;
• protect our customers;
• protect our website and systems;
• comply with security obligations.
COMMUNICATING WITH YOU
We may use your information to:
• answer questions;
• provide customer support;
• respond to requests;
• communicate about orders;
• communicate about returns or delivery issues;
• maintain our customer relationship.
LEGAL AND REGULATORY PURPOSES
We may process information where necessary to:
• comply with applicable law;
• comply with tax and accounting obligations;
• respond to valid requests from courts, regulators or public authorities;
• establish, exercise or defend legal claims;
• investigate potential violations of our policies;
• enforce our Terms of Service.
5. LEGAL BASES FOR PROCESSING
Where the GDPR or other applicable European data protection legislation applies, we process personal information on one or more of the following legal bases:
PERFORMANCE OF A CONTRACT
Processing may be necessary to enter into or perform a contract with you, including to:
• process orders;
• receive payment;
• prepare products;
• arrange delivery;
• process returns;
• provide customer service relating to your purchase.
LEGAL OBLIGATION
We may process personal information where necessary to comply with legal obligations, including:
• accounting;
• taxation;
• consumer protection;
• regulatory requirements.
LEGITIMATE INTERESTS
Where permitted by law, we may process personal information where necessary for legitimate business interests, provided those interests do not override your fundamental rights and freedoms.
Such interests may include:
• improving our Services;
• protecting our business;
• fraud prevention;
• website security;
• understanding business performance;
• responding to customer enquiries.
CONSENT
Where required, we rely on your consent for activities such as:
• certain marketing communications;
• non-essential cookies;
• certain advertising or tracking technologies.
You may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. HOW WE DISCLOSE PERSONAL INFORMATION
We may disclose personal information to third parties where necessary for legitimate business purposes and in accordance with applicable law.
SHOPIFY AND SERVICE PROVIDERS
We may share information with Shopify and service providers that perform services on our behalf, including:
• ecommerce hosting;
• IT services;
• payment processing;
• fraud prevention;
• data analytics;
• cloud storage;
• customer support;
• order fulfilment;
• shipping and logistics.
PAYMENT PROVIDERS
Personal and payment information may be shared with payment providers where necessary to process transactions, refunds and fraud checks.
SHIPPING AND LOGISTICS PROVIDERS
We may provide information such as:
• your name;
• shipping address;
• telephone number;
• email address;
• order details;
to carriers and logistics providers where necessary to deliver your order.
BUSINESS AND MARKETING PARTNERS
Where legally permitted and, where required, with your consent, we may work with marketing and advertising partners to promote AZRA or measure advertising effectiveness.
Such third parties may process information in accordance with their own privacy notices.
WHEN YOU REQUEST OR AUTHORISE DISCLOSURE
We may disclose information when you request or authorise us to do so, for example when connecting with third-party services or social media functionality.
LEGAL REQUIREMENTS
We may disclose information where reasonably necessary to:
• comply with applicable law;
• respond to lawful court orders;
• respond to valid requests from competent authorities;
• protect our legal rights;
• protect customers or other persons;
• investigate fraud or illegal activity.
BUSINESS TRANSACTIONS
If our business is reorganised, transferred, merged or sold, relevant personal information may be disclosed as part of that transaction, subject to applicable data protection requirements.
7. RELATIONSHIP WITH SHOPIFY
Our Services are hosted and supported by Shopify.
Shopify collects and processes personal information concerning access to and use of the Services in order to provide and improve its services.
Information submitted through the AZRA store may therefore be transmitted to and processed by Shopify and relevant service providers.
In some circumstances, Shopify may process personal information as a service provider or processor on behalf of MAISON ARABIA ATELIER.
In other circumstances, Shopify may determine certain purposes and means of processing independently and may act as a separate data controller.
Shopify may process information in countries other than the country in which you reside.
Shopify also provides privacy controls that allow individuals to manage certain uses of information processed by Shopify.
More information regarding Shopify's processing practices and privacy controls is available through Shopify's Consumer Privacy Policy and Shopify Privacy Portal.
8. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies.
Cookies may be used for purposes including:
• essential website functionality;
• maintaining your shopping cart;
• remembering preferences;
• security;
• fraud prevention;
• analytics;
• website performance;
• personalisation;
• marketing and advertising, where permitted.
Where required by applicable law, non-essential cookies will only be used after obtaining your consent.
You may be able to manage your cookie preferences through the cookie controls available on our website.
Disabling certain cookies may affect some website functions.
9. THIRD-PARTY WEBSITES AND LINKS
The Services may contain links to websites or online platforms operated by third parties.
If you follow a link to a website that is not operated or controlled by us, you should review that third party's privacy and security policies.
AZRA is not responsible for the privacy practices, security or content of independent third-party websites.
Information you choose to share through public or semi-public third-party services, including social media platforms, may be visible to other users according to the settings and policies of those services.
10. CHILDREN'S DATA
The Services are not intended to be used independently by children who do not have the legal capacity to enter into purchases under applicable law.
We do not knowingly collect personal information from children in violation of applicable law.
If you are a parent or legal guardian and believe that a child has provided personal information to us improperly, please contact us at:
contact@azrakeftan.com
Where appropriate and legally required, we will take reasonable steps to delete the information.
11. SECURITY OF YOUR INFORMATION
We use appropriate technical and organisational measures designed to protect personal information against:
• unauthorised access;
• unlawful use;
• loss;
• alteration;
• destruction;
• unauthorised disclosure.
However, no online system or method of transmission is completely secure, and we cannot guarantee absolute security.
We recommend that customers protect their passwords and account credentials and do not share them with other persons.
Please avoid transmitting highly sensitive information through insecure communication channels.
12. RETENTION OF PERSONAL INFORMATION
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required by applicable law.
Retention periods may depend on factors including:
• whether you maintain an account;
• whether an order or transaction remains active;
• contractual obligations;
• accounting and tax requirements;
• consumer protection requirements;
• dispute resolution;
• fraud prevention;
• legal claims.
When personal information is no longer required, we will delete or anonymise it where appropriate and legally permitted.
13. YOUR DATA PROTECTION RIGHTS
Depending on the law applicable to you, you may have rights concerning your personal information.
For individuals protected by the GDPR, these may include:
RIGHT OF ACCESS
You may request confirmation of whether we process your personal information and request access to that information.
RIGHT TO RECTIFICATION
You may request correction of inaccurate or incomplete personal information.
RIGHT TO ERASURE
Under certain circumstances, you may request deletion of your personal information.
RIGHT TO RESTRICTION OF PROCESSING
Under certain circumstances, you may request that we restrict how your personal information is processed.
RIGHT TO DATA PORTABILITY
Where applicable, you may request to receive personal information you provided to us in a structured, commonly used and machine-readable format and, where technically feasible, request that it be transmitted to another controller.
RIGHT TO OBJECT
In certain circumstances, you may object to the processing of your personal information, including certain processing based on legitimate interests and direct marketing.
RIGHT TO WITHDRAW CONSENT
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before your consent was withdrawn.
RIGHT TO LODGE A COMPLAINT
You may have the right to lodge a complaint with the data protection authority in the country where you live, work or where the alleged infringement occurred.
If you are located in Spain, the competent supervisory authority is the:
Agencia Española de Protección de Datos (AEPD).
14. HOW TO EXERCISE YOUR RIGHTS
To exercise your privacy rights, please contact us at:
Email:
contact@azrakeftan.com
Postal address:
MAISON ARABIA ATELIER
Carretera de la Sierra, No. 20
Granada, Spain
Phone:
+34 687 414 981
Please clearly identify the right you wish to exercise and provide sufficient information for us to identify and respond to your request.
Where necessary and permitted by law, we may request additional information to verify your identity.
You may also appoint an authorised representative where permitted by applicable law.
We will respond within the time required by applicable data protection legislation.
We will not discriminate against you for exercising your lawful privacy rights.
15. MARKETING COMMUNICATIONS
If you subscribe to promotional communications from AZRA, you may unsubscribe at any time by:
• using the unsubscribe link included in marketing emails; or
• contacting us at contact@azrakeftan.com.
If you unsubscribe from marketing communications, we may still send non-promotional communications that are necessary in connection with:
• orders;
• payments;
• deliveries;
• account security;
• returns;
• customer service;
• legal or administrative matters.
16. COMPLAINTS
If you have concerns regarding the way we process your personal information, we encourage you to contact us first at:
contact@azrakeftan.com
We will review your concern and respond in accordance with applicable law.
If you are located in Spain and believe that your data protection rights have been infringed, you also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD).
If you are located elsewhere in the European Economic Area, you may lodge a complaint with the competent data protection supervisory authority applicable to your situation.
17. INTERNATIONAL DATA TRANSFERS
Some of our service providers, including Shopify and other technology providers, may process personal information outside Spain or outside the European Economic Area.
Where personal information is transferred outside the European Economic Area to a country that has not been recognised as providing an adequate level of protection, appropriate safeguards will be used where required by applicable law.
These safeguards may include:
• European Commission Standard Contractual Clauses;
• recognised adequacy decisions;
• other legally recognised transfer mechanisms.
Where applicable, you may request additional information regarding safeguards used for international transfers by contacting us.
18. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time, including to reflect changes in:
• our business practices;
• the Services;
• technology;
• legal requirements;
• regulatory requirements.
When we update this Privacy Policy, we will publish the revised version on our website and update the “Last updated” date.
Where required by applicable law, we will provide additional notice of material changes.
19. CONTACT
If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, please contact:
AZRA
Data Controller:
MAISON ARABIA ATELIER
NIF:
B88892526
Business address:
Carretera de la Sierra, No. 20
Granada, Spain
Phone:
+34 687 414 981
Email:
contact@azrakeftan.com
Website:
azrakaftan.com
For the purposes of applicable data protection legislation, MAISON ARABIA ATELIER is the data controller for personal information processed by AZRA, except where another party, such as Shopify, independently determines the purposes and means of a particular processing activity.