Privacy Policy

1. Information we collect

• Order details on the project page: the name to be engraved on the project plaque (or the anonymous “فاعل خير” option), the dedication wording you choose, and your WhatsApp phone number.
• Checkout details collected by Shopify on checkout.hayahfoundation.com: your name, email, phone, billing address and payment method. Card details are processed by the payment provider; we never see or store your full card number.
• Messages you send us by WhatsApp, email or phone. The contact form does not send anything itself: it opens WhatsApp with your name, email, phone, subject and message filled in, and nothing reaches us until you press send.
• Visit source: when you add a project to your cart, we attach the campaign details from the link you arrived through (UTM parameters and Google, Meta or TikTok ad-click identifiers), the referring website, and the first page you landed on.
• Your approximate country, inferred from your device’s time zone to pre-select the currency and checkout country. We do not use your precise location.
• Usage data collected by analytics and advertising tools, described under “Cookies, analytics and advertising” below.

The plaque name may belong to someone else, such as a parent, a late relative or a newborn. Only give us a name you are entitled to share; we use it solely to carry out and document the project. For Aqiqah we do not ask for the child’s date of birth or any other details about the newborn.

2. How we use your information

• To carry out the project you ordered: engraving the plaque, mentioning the name at the slaughter, and arranging the project site.
• To send you the documentation — photos, video, the project location and the completion certificate — to your WhatsApp number or the contact details in your order.
• To answer your questions and follow up on your orders.
• To process payments, prevent fraud and keep accounting records.
• To measure and improve the website and our advertising campaigns.
• To meet our legal obligations.

We do not sell your personal information to anyone.

3. Cookies, analytics and advertising

The site uses the following tools, which may place cookies in your browser:

• Google Analytics: measures visits, pages and actions such as viewing a project, adding it to the cart or tapping the WhatsApp button. It also covers the checkout page, which is part of our domain.
• Meta Pixel (Facebook and Instagram): runs on the site and the checkout, recording page and project views, add-to-cart, checkout start and completed orders (order number, value, currency and items). We use it to measure and target our ads.
• Microsoft Clarity: records heatmaps and session replays (pointer movement, clicks and scrolling) so we can find where the site is hard to use.
• Embedded content: Instagram posts on the home page and a Google map on the contact page. These services may set their own cookies when they load.
• Browser storage: we keep your cart ID, chosen currency and the source of your current visit in your browser. None of it is sent anywhere except to Shopify as part of your cart.

You can block or delete cookies in your browser settings, install the Google Analytics opt-out add-on (tools.google.com/dlpage/gaoptout), or adjust the ad preferences in your Meta account. Doing so will not stop you from ordering a project.

4. Who we share information with

• Shopify: our store, cart, checkout and order records.
• The payment providers shown at checkout, such as card networks, Apple Pay, Google Pay and PayPal.
• WhatsApp (Meta), when you message us there.
• Google, Meta and Microsoft, as the analytics and advertising providers described above.
• Vercel, our hosting provider, which logs technical data such as IP addresses.
• Our field teams and partners in the country where the project is carried out. They receive only what the work needs: the plaque name and dedication wording — never your phone, email or payment details.
• Public authorities, where the law requires it.

Some of our articles and reports are machine-translated. Only our own published text is sent to the translation service — never your personal information.

5. Reviews and published documentation

• We publish photos and videos of completed projects, which may show the project plaque. If you would rather your plaque did not appear in our public posts, just tell us.
• We only publish your review, such as a screenshot of a WhatsApp conversation, after asking your permission, and we hide your name, number and personal details. You can ask us to remove it at any time.

6. International transfers

We work across several countries and our service providers operate from different countries, including the United States, so your information may be processed outside your own country. We rely on the safeguards these providers offer for transferred data.

7. How long we keep information

• Order records: as long as needed to carry out and document the project, then for as long as accounting and legal requirements demand.
• Messages: as long as needed to follow up on your order or question.
• Analytics data: according to the retention period set with each provider.
• Browser storage: stays on your device until you clear it.

8. Your rights

Depending on where you live, you may have the right to:

• Access the information we hold about you and receive a copy of it.
• Correct inaccurate information.
• Ask us to delete your information, unless the law requires us to keep it.
• Object to or restrict processing, including targeted advertising.
• Withdraw your consent at any time.
• Complain to the data protection authority in your country.

To exercise any of these rights, email info@hayahfoundation.com or message us on WhatsApp. We will reply within 30 days and may ask you to confirm your identity first.

9. Security

The site runs over an encrypted connection (HTTPS), and payments are taken on Shopify’s checkout, which complies with the card industry security standard (PCI DSS). No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.

10. Children

The site is not directed at children under 16, and we do not knowingly collect their information. Aqiqah orders are placed by the parents.

11. Changes to this policy

We may update this policy when our services or the tools we use change. The date of the latest update appears at the top of this page.