Privacy policy

Last updated: 20-09-2026

This Privacy Policy explains how Magmade Studio ("we", "us", "our") collects, uses, stores, and protects your personal data when you visit our online store, upload photos, place an order, or contact us. The party responsible for your data (the data controller) is Magmade Design & Artwork Services, based in Dubai, United Arab Emirates. You can reach us at hello@magmadestudio.com.

Customer-Uploaded Photos & Personalization Text

Our products are made to order using the photos and text that you upload when placing an order. We treat these uploads with particular care.

  • We use uploaded photos and personalization text to produce, package, and ship your order and to handle any related support or remake request.
  • We do not use customer-uploaded photos for advertising, marketing, social media, website examples, or any other purpose unless you have separately and explicitly agreed to that use (for example, by ticking a dedicated opt-in box and providing your social handle). Any such consent is optional and is separate from your purchase.
  • Uploaded images are processed through our personalization application NINEMAGS and our e-commerce platform Shopify, as necessary to process and fulfil your order and provide related services.
  • Photos and personalization text are retained only for as long as reasonably necessary to produce and fulfil your order, provide customer support, and handle any remake request. We take reasonable steps to delete them from active production systems when they are no longer needed, subject to applicable legal requirements and the retention and backup practices of our service providers. Order, payment, tax, and accounting records may be retained for longer where required by law.

Personal Data We Collect

  • Identity & contact data — name, email address, phone number (if provided), billing and shipping address.
  • Order data — order details, order history, returns, remake requests and customer service communication
  • Customer content — photos and personalization text you submit when ordering.
  • Payment data — Payment information is processed by the payment processor available through checkout. We do not store full card numbers.
  • Technical & usage data — IP address, device and browser information, pages viewed, and cookie or analytics identifiers.

How and Why We Use Your Data

  • To process, produce, and ship your custom orders (performance of our contract with you).
  • To send order confirmations, shipping updates, and customer-support replies.
  • To detect and prevent fraud, abuse, or unauthorised access, and to keep our store secure.
  • To comply with applicable legal, tax, and accounting obligations in the UAE.
  • To send marketing emails — only where you have opted in. You can withdraw consent and unsubscribe at any time using the link in every marketing email or by emailing us.

Legal Basis for Processing

We process personal data only where permitted under applicable law. Depending on the circumstances, this may include: your consent, such as for direct marketing where consent is required; taking steps at your request and performing our contract with you, including creating, fulfilling, and delivering your personalized order; protecting our store, customers, and services, including preventing fraud and maintaining security; and complying with legal obligations, including tax, accounting, and record-keeping requirements.

We use cookies and similar technologies to operate and secure our store, remember preferences, understand store usage, and support analytics or marketing where permitted by law. Where consent is required, we will request it before using non-essential cookies.

Service Providers & Data Sharing

We share personal data with third parties only to the extent reasonably necessary to operate our store and provide our services. These providers include Shopify, which hosts and operates our e-commerce platform; NINEMAGS, which provides product-personalization services; the payment provider selected at checkout; our shipping carrier; and our email, analytics, and other technology providers. These providers may process personal data on our behalf in connection with the services they provide to us. We do not sell your personal data.

We may also disclose personal data where reasonably necessary to comply with applicable law, respond to a lawful request, prevent fraud, protect our rights or the rights of others, or obtain professional advice. If our business is reorganized, sold, or transferred, personal data may be disclosed as part of that transaction, subject to applicable law.

Relationship with Shopify

Our store is hosted by Shopify. Shopify collects and processes personal information about your access to and use of our store to provide, secure, and improve its services. Information submitted through our store may be transmitted to Shopify and other service providers, which may process information in countries outside the country where you reside.

We use Shopify Network Intelligence and certain Enhanced Services to help protect, grow, and improve our business. To provide these services, Shopify may use information about your interactions with our store together with information from your interactions with other Shopify merchants and with Shopify. This may support features such as personalized experiences, store performance improvements, relevant advertising, and insights into how customers interact with stores and advertisements. Other Shopify merchants cannot access your personal information.

For this enhanced processing, Shopify is responsible for handling personal information for its own stated purposes, including responding to applicable requests concerning your privacy rights. To learn more about how Shopify processes personal information, please review the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights concerning Shopify’s processing of your personal information through the Shopify Privacy Portal.

International Data Transfers

Some of our service providers, such as Shopify, may store or process personal data on servers located outside the United Arab Emirates. Where personal data is transferred internationally, we take reasonable steps to ensure that it is handled securely and in accordance with applicable data-protection requirements. Depending on the destination and service provider, appropriate safeguards may include contractual protections, recognized data-transfer mechanisms, or transfers to countries considered to provide an adequate level of protection.

The privacy and security practices of each service provider are also governed by its own terms and privacy policies. For more information about Shopify’s handling of personal data and international transfers, please review the Shopify Privacy Policy.

Your Rights

Subject to the UAE Personal Data Protection law and other applicable law, you may have the right to access the personal data we hold about you; request correction of inaccurate or incomplete data; request deletion of your data; restrict or object to certain processing; request a portable copy of your data, where applicable; and withdraw consent where our processing relies on your consent. Withdrawing consent will not affect processing carried out lawfully before the withdrawal.

You also have the right to submit a complaint to the competent UAE data-protection authority.

To exercise any of these rights, email hello@magmadestudio.com. We may ask for information to verify your identity before processing your request. We will respond within the period required by applicable law. Some requests may be subject to legal exceptions, including where we must retain information to meet legal, tax, accounting, fraud-prevention, or dispute-resolution obligations.

Cookies

We use cookies and similar technologies to operate and secure our store, remember your cart and preferences, understand store usage, and support analytics or marketing where permitted by law. Where applicable law requires prior consent for non-essential cookies, we will request that consent before using them.

Children's Privacy

Our store and services are intended for adults and are not directed to children. However, an adult customer may upload a photograph containing a child when ordering a personalized product.

If you upload a photograph containing a child, you confirm that you are the child’s parent or legal guardian, or that you otherwise have the necessary authority and permission to provide the photograph and authorize us and our service providers to process it for the purpose of fulfilling your order. Please do not upload a child’s photograph if you do not have the necessary authority or permission.

We do not knowingly collect personal data directly from children. If you are a parent or legal guardian and believe that a child’s personal data or photograph has been provided to us without appropriate authorization, please contact hello@magmadestudio.com. We will review the matter and take appropriate action, which may include deleting the information where required by applicable law.

Security

We and our service providers apply reasonable administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encryption in transit using TLS where supported. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

Contact

If you have questions about this Privacy Policy, how we handle your personal data, or wish to exercise your privacy rights, please contact us at: 

Magmade Design & Artwork Services
Dubai, United Arab Emirates
Email: hello@magmadestudio.com