Last updated: October 2026

Privacy Policy

We handle your information carefully. Here is exactly how.

This policy covers guguarabia.com, our online store, the HR gifting portal and our direct communications. It applies whether you are buying a gift or running a gifting programme for your team. We wrote it to be read.

Who we are

[Registered company name], trading as gugu

CR number: [CR number].

[Registered address], Manama, Kingdom of Bahrain

Privacy contact:  [email protected]

For shoppers and enquiries, gugu decides how your data is used. For corporate programmes, see “Corporate programmes” below.

What we collect

If you shop with us

Name, email, phone number, billing and delivery address, order details, and any gift message or personalisation. Card details go straight to our payment provider. We never see or store your full card number.

If you are a corporate client

Your name, work email, company and role. In the HR portal, we also hold the recipient names, delivery addresses and phone numbers you add.

If you send us photos or reviews

The content itself, your name as you want it shown, and anything you choose to include. See the Photos and reviews section of our Terms of Use.

From your device

Pages viewed, time spent, device and browser type. This is collected through cookies. See our Cookie Policy.

If you give us someone else’s details to send a gift, please make sure they are happy for you to share them. We use those details only to deliver the gift.

How we use your information

  • Process, deliver and support your orders
  • Reply to enquiries and prepare gifting proposals
  • Set up and manage corporate programmes and the HR portal
  • Handle returns, refunds and complaints
  • Meet legal, tax and accounting duties
  • Keep our site secure and improve it

We do not sell your data. We never have and we never will.

Marketing

We send newsletters and offers by email, SMS or WhatsApp only if you opt in. You can opt out any time using the link in the message, by replying STOP, or by emailing us. Order and delivery messages are not marketing and will still reach you.

Who we share it with

  • Delivery partners: recipient name, address and phone number
  • Payment providers: 
  • Software tools:  like store platform, email tool, analytics tool , under strict confidentiality terms

We do not share your data for anyone else’s marketing. Our partners may use it only for the service they give us. We may disclose information if the law requires it, or to protect the rights, safety or property of gugu or others.

Corporate programmes

When a company uses the HR portal, the company decides which employees receive gifts. For that employee data, the company is the controller and gugu is the processor. We use it only to deliver the programme, on the company’s written instructions, as set out in the client agreement. Clients are responsible for having a lawful basis to share it with us.

Sending data across borders

We deliver across the GCC, so data may be handled in more than one country. Where it leaves Bahrain, we make sure it is protected as the Personal Data Protection Law requires, and as local law requires in the country of delivery.

Keeping it safe, and for how long

We use sensible technical and organisational safeguards. If a breach affects you, we will tell you and the relevant authority as the law requires.

We keep data only as long as we need it. Delivery details are not kept beyond fulfilment, except where needed for returns, complaints or the law. Order and tax records are kept for the period the law requires. Enquiry data is kept for up to three years unless you ask us to delete it sooner.

Our site is for adults. We do not knowingly collect data from children.

Your rights

You can ask what data we hold, and ask us to correct it, delete it, restrict how we use it, or send you a copy in a portable format. Where we rely on consent, you can withdraw it any time. Email [email protected]. We reply within 30 days, free of charge.

If you think we have handled your data wrongly, please tell us first. You may also complain to the Personal Data Protection Authority in Bahrain, or the data authority in your country.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant, we will tell you directly.

Scroll to Top