MUFAJAT  •  PRIVACY POLICY
Last updated: 10 September 2026

1. About this Privacy Policy

This Privacy Policy explains how Mufajat ("Mufajat", "we", "us" or "our") collects, uses, stores, shares and protects personal information when you visit our website, create an account, place an order, contact us, upload content, use AI-assisted customization features, submit a review, or otherwise use our services.

Mufajat is based in the United Arab Emirates. We process personal information in accordance with applicable privacy and consumer-protection laws, including the UAE Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data and applicable e-commerce and consumer-protection requirements. If you are located in another country, including the Kingdom of Saudi Arabia, mandatory privacy rights that apply to you under local law are not limited by this Policy.

2. Personal information we may collect

Depending on how you use Mufajat, we may collect the following categories of information:

·       Identity and contact information, such as your name, email address, telephone number, billing address and delivery address.

·       Account information, such as login details, account preferences and order history.

·       Order and transaction information, including products purchased, customization choices, payment status, refunds and delivery information. Payment-card details are generally processed by our payment service providers and are not intended to be stored in full by Mufajat.

·       Customization content, including photos, images, artwork, text, names, messages, design instructions and AI prompts that you choose to upload or submit.

·       Customer-service information, including messages, return requests, complaints and correspondence with our support team.

·       Technical and usage information, such as IP address, browser/device information, cookies, pages viewed, referral information and interactions with our website, subject to applicable cookie and consent requirements.

·       Public or user-generated content that you voluntarily publish, such as product reviews, ratings or comments.

3. Why we use your information

We use personal information only for legitimate and stated purposes, including to:

·       create, process and fulfil your orders, including personalized and customized T-shirts;

·       generate or edit designs using AI-assisted tools when you request that service;

·       process payments, refunds and fraud-prevention checks;

·       arrange shipping, delivery, returns and customer support;

·       communicate with you about your order, account or service request;

·       maintain website security, prevent misuse and protect Mufajat, our customers and third parties;

·       improve our services, website performance and customer experience using appropriately limited analytics;

·       comply with legal, tax, accounting, regulatory and dispute-resolution obligations; and

·       send marketing communications only where permitted by applicable law and, where required, with your consent. You can opt out of marketing communications at any time.

4. AI-assisted design and uploaded photos

Mufajat offers personalization features that may use artificial intelligence or other automated design tools. When you submit a photo, image, text or prompt for customization, you authorize Mufajat to process that content as reasonably necessary to create the requested design, show a preview where available, produce the product, fulfil the order, provide related customer support and address quality or dispute issues.

By uploading content that shows another person, you confirm that you have the right and any necessary permission to provide and use that content for the requested personalized product. If the content includes a child or other person who cannot validly provide consent, you confirm that you are the parent, legal guardian, or otherwise have lawful authority to provide the content and request the service.

We may use specialized technology providers or AI-processing service providers to perform requested design operations on our behalf. Where such providers act as our processors or service providers, we take reasonable steps to use providers that offer appropriate contractual, technical and organizational safeguards and to limit processing to the purpose of providing the service.

Mufajat will not use your private uploaded photos or customization files for public advertising, social-media promotion, public galleries, or other unrelated marketing without separate permission from you. Mufajat will also not intentionally use private customer uploads to train its own general-purpose AI models without separate, explicit consent.

5. Legal bases and consent

Where applicable, we process personal information on one or more lawful bases, such as your consent, performance of our contract with you, compliance with legal obligations, protection of legal rights, or legitimate interests where permitted and balanced against your rights.

Where we rely on consent, the consent request will be presented in a clear manner appropriate to the processing purpose. You may withdraw consent for future consent-based processing, subject to legal or contractual requirements that may still require us to retain or process certain information. Withdrawal does not affect processing that was lawful before withdrawal.

6. Who we may share information with

We may share only the information reasonably necessary with trusted third parties that help us operate Mufajat, including:

·       e-commerce and hosting providers, including our commerce platform and cloud-service providers;

·       payment processors and financial service providers;

·       delivery, courier and logistics providers;

·       AI, image-processing, design and production service providers used to fulfil the customization you request;

·       customer-support, analytics, security and fraud-prevention providers;

·       professional advisers such as accountants, auditors, insurers and legal advisers; and

·       government, regulatory, law-enforcement or judicial authorities where disclosure is legally required or permitted.

We do not disclaim all responsibility for service providers. We take reasonable steps, consistent with applicable law, to select providers that can protect personal information and to require appropriate safeguards for the processing they perform on our behalf.

7. International and cross-border transfers

Some of our technology, payment, cloud, logistics or AI service providers may process information outside the country where you live. Where personal information is transferred across borders, Mufajat will take measures required by applicable law to ensure an appropriate level of protection, such as using approved transfer mechanisms, contractual safeguards, recognized adequacy arrangements, or another lawful transfer basis.

For customers in Saudi Arabia, where the Saudi Personal Data Protection Law applies, we will respect applicable requirements for cross-border transfer and the rights of data subjects under that law. Similar mandatory local protections will be respected for customers in other markets where they apply.

8. How long we keep information

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including order fulfilment, returns, customer support, fraud prevention, accounting, tax, legal and dispute-resolution requirements. Retention periods may vary by category of information and applicable law.

Private uploaded photos, source images and customization files will be retained only for as long as reasonably necessary to provide the requested service, support the order, handle legitimate quality or dispute issues, and meet applicable legal obligations. When they are no longer required, we will delete, anonymize or securely dispose of them in accordance with our retention practices.

9. Security

We use reasonable administrative, technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss or destruction. No internet transmission or storage method is completely risk-free, but we regularly review appropriate safeguards based on the nature of the information and the services we provide.

If a personal-data breach occurs, we will take the steps required by applicable law, including notifications to regulators or affected individuals where legally required.

10. Your privacy rights

Depending on the law that applies to you, you may have rights relating to your personal information, including the right to:

·       be informed about how and why your personal information is processed;

·       request access to or a copy of personal information we hold about you;

·       request correction or completion of inaccurate information;

·       request deletion or destruction where applicable and where retention is no longer legally required;

·       request restriction or cessation of certain processing where provided by law;

·       object to or withdraw consent from consent-based processing;

·       receive or transfer certain personal information in a usable format where a portability right applies; and

·       raise a complaint with Mufajat or an applicable data-protection authority.

To exercise a privacy right, contact support@mufajat.com. We may need to verify your identity before completing a request. Some rights are subject to legal exceptions, including situations where we must keep records for tax, fraud-prevention, contractual, legal-claim or regulatory purposes.

11. Marketing communications

We may send promotional emails, messages or other marketing only where permitted by applicable law. Where consent is required, marketing consent will be separate from the consent or information needed to process and fulfil your order. You may opt out using the unsubscribe method provided or by contacting support@mufajat.com. Service messages about an existing order are not marketing communications.

12. Cookies and similar technologies

Our website may use cookies and similar technologies that are necessary for checkout, account functions, security, preferences, analytics and advertising. Where applicable law requires consent for non-essential cookies or tracking, we will request that consent through the website. More detail should be provided in a separate Cookie Policy or cookie-preference tool where available.

13. Children and minors

The Mufajat customer account and purchasing service is intended for adults aged 18 and over. We do not knowingly invite children to create customer accounts or purchase directly from us. An adult may order a personalized product involving a child, but the adult must have the necessary parental, guardian or other lawful authority to provide and use the child’s image or personal information for the requested purpose.

14. User-generated content: reviews, ratings and comments

If you voluntarily post a review, rating, comment or other content intended to be public, you grant Mufajat a non-exclusive, worldwide, royalty-free licence to host, reproduce, display, format and use that public content for operating and promoting Mufajat and the relevant products, subject to applicable law. This licence does not convert private customization uploads into public content.

You must not submit public content that is unlawful, fraudulent, misleading, defamatory, threatening, hateful, discriminatory, obscene, sexually explicit, infringing, or that violates another person’s privacy, intellectual-property rights or applicable law. We may moderate or remove content where reasonably necessary to enforce these rules or legal requirements.

15. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, providers or legal obligations. We will publish the updated version with a revised “Last updated” date. Where applicable law requires additional notice or renewed consent for a material change in processing, we will provide it. Continued use of the website does not replace consent where the law requires specific consent.

16. Contact us

For questions about this Privacy Policy, privacy requests, complaints or concerns, contact:

Email: support@mufajat.com

If your concern is not resolved, you may also have the right to contact the competent privacy or consumer-protection authority in the country whose law applies to you.

17. Applicable law and international customers

This Privacy Policy is primarily structured around applicable UAE law because Mufajat operates from the UAE. Nothing in this Policy is intended to exclude or reduce a mandatory privacy or consumer right that applies to you under the law of your place of residence or purchase, including where Saudi Arabian law applies to a Saudi resident or transaction.