Privacy Policy

We collect information in three ways: what you give us directly, what is captured automatically as you browse, and what we receive from trusted service providers (for example, our payment processor).

• Order & account data: your name, email, phone number, shipping and billing addresses, and the items you purchased.
• Payment data: handled securely by Stripe. We do not see or store your full card number on our servers.
• Communications: messages you send us, newsletter signups, and survey responses.
• Device & usage data: IP address, browser type, pages visited, and interactions — used to keep the site secure and improve the experience.
• Cookies: small files stored by your browser to remember your cart, language, and currency preferences.

We use the information we collect to run our store and communicate with you about it — not to sell it to anyone.

• To process and fulfil your orders, including shipping, returns, and refunds.
• To send transactional messages such as order confirmations, shipment updates, and password resets.
• To respond to your questions and provide customer support.
• To send occasional marketing emails (only if you opt in) — you can unsubscribe at any time.
• To prevent fraud, secure accounts, and comply with legal obligations.
• To improve our products, website, and service based on anonymous analytics.

We share data only with the trusted partners who help us run Hikaya, and only to the extent they need to do their job. We never sell your personal information.

• Payment processing: Stripe (secure card and wallet payments).
• Shipping: the courier delivering your order (name, address, and phone number so they can reach you).
• Email delivery: Resend, and fallback providers, for order confirmations and notifications sent from [email protected].
• Hosting & infrastructure: the cloud providers who run our website and database.
• Legal & safety: if required by a lawful request, or to protect the rights, property, or safety of Hikaya, our customers, or the public.

We use cookies and similar technologies for essential functions (keeping you signed in, remembering your cart and language) and to understand how visitors use our site in aggregate. You can disable cookies in your browser settings, but some features of the site may not work correctly without them.

We use industry-standard security practices — encrypted connections (HTTPS), hashed passwords, restricted staff access, and secure cloud infrastructure. Payment details are handled entirely by Stripe, a PCI-DSS Level 1 certified provider.

No system is ever 100% secure, however. If a breach were to affect your personal data, we would notify you and the relevant authorities as required by law.

Every order ships from our studio within 7–10 business days. Once it leaves us, you’ll receive an email with your tracking link so you can follow the piece all the way to your door. Shipping is free on all orders over $150.

We ship across the Middle East, Europe, North America, the UK, and Türkiye. International orders may occasionally be delayed in customs; if that happens, your tracking page will show the latest status, and you can always reply to your confirmation email and we’ll look into it with you.

If something isn’t right, you have 14 days from the day your order is delivered to request a return. Pieces must come back unworn, unwashed, and in their original condition with any tags still attached.

To start a return, just reply to your order-confirmation email with your order number. Once we’ve received and inspected your piece, we’ll refund the amount you paid to the original card used for the order — usually within 5–10 business days depending on your bank. Any shipping paid on the original order is non-refundable, and return shipping is at your expense unless the item arrived damaged or we made a mistake.

We ship across the Middle East, Europe, North America, the UK, and Türkiye. To deliver your order, some of your data (such as name, address, and phone) is shared with couriers and cross-border services in those regions. By placing an order you consent to this transfer.

You are in control of your information. At any time you may:

• Request a copy of the personal data we hold about you.
• Ask us to correct or update information that is inaccurate.
• Ask us to delete your account and personal data (unless we are legally required to keep it, e.g. for tax records).
• Unsubscribe from marketing emails using the link in any message, or by contacting us.
• Withdraw consent to processing where consent was the legal basis.

Hikaya is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy as our business evolves or as legal requirements change. The "Last updated" date at the top reflects the most recent revision. For significant changes, we will try to notify you by email or through a notice on the site before they take effect.