Privacy Policy

Effective Date: February 2026

1. Introduction

Welcome to Misraab, your trusted online destination for souvenirs, lifestyle products, and unique gifts.

At Misraab, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website or make a purchase from us.

By using our website, you agree to the terms of this Privacy Policy.

2. What Information We Collect

2.1 Personal Information

We may collect information that identifies you or allows you to be identified (“Personal Data”), including:

Full name
Email address
Phone number
Billing and shipping address
Order and purchase details
Payment details (processed securely via third-party gateways)
Account login credentials (if registered)

2.2 Non-Personal / Technical Information

We may also collect technical and usage data such as:

IP address and browser user-agent string
Device type and operating system
Pages visited and time spent on the website
Referral sources and usage statistics
Diagnostics and performance data

3. Purpose and Use of Information

We use your information for the following purposes:

To process, confirm, and deliver your orders
To manage payments and transactions
To communicate with you regarding purchases and services
To provide customer support
To personalize your shopping experience
To improve our website, products, and marketing
To detect and prevent fraud
To comply with legal and regulatory obligations

We do not sell, rent, or lease your personal data to third parties for marketing purposes.

4. Comments & Public Interactions

If you leave comments on our website:

We collect the information provided in the comment form
We collect your IP address and browser user-agent for spam detection
An anonymized hash of your email may be shared with Gravatar
Your profile picture may be visible publicly after approval

Gravatar Privacy Policy: https://automattic.com/privacy/

5. Media Uploads

If you upload images:

Avoid including embedded location data (EXIF GPS)
Visitors may be able to extract such data
Misraab is not responsible for misuse of uploaded media containing sensitive metadata

6. Cookies & Tracking Technologies

We use cookies to enhance your browsing experience.

Cookies may be used to:

Save login details
Remember preferences
Analyze site traffic
Improve functionality

Types of cookies include:

Login cookies (2 days)
“Remember Me” cookies (2 weeks)
Screen preference cookies (1 year)
Post-edit cookies (1 day)

You may disable cookies via browser settings, but some features may not function properly.

7. Embedded Content from Other Websites

Our website may contain embedded content (videos, images, posts).

These third-party sites may:

Collect data about you
Use cookies
Apply additional tracking
Monitor interactions

We are not responsible for their privacy practices.

8. Data Sharing and Disclosure

We share personal data only with trusted partners such as:

Payment gateway providers
Courier and logistics partners
Technical and hosting providers
Customer support platforms

If required by law, we may disclose data to government or legal authorities in the Maldives.

9. Payment Security and Cardholder Data Protection

We take the security of payment and cardholder information very seriously.

9.1 Payment Processing

All card payments are processed through certified and secure third-party payment gateways. Misraab does not store, process, or retain full card details on its servers.

9.2 Transmission of Card Details

Payment information is transmitted using Secure Socket Layer (SSL) encryption
Data is protected during transmission using industry-standard security protocols
Unauthorized interception is actively prevented through technical safeguards

9.3 Security Measures

We have implemented the following measures to protect cardholder data:

Encrypted communication channels
Restricted system access
Regular system monitoring
Firewall and malware protection
Secure hosting infrastructure
Staff access controls

These measures help prevent unauthorized access, misuse, or disclosure of payment information.

10. Data Retention

We retain personal data only as long as necessary:

Comments and metadata are stored indefinitely
Registered user profiles are retained until deleted
Transaction records are kept for legal and accounting purposes

When data is no longer required, it is securely deleted or anonymized.

11. Your Rights

You have the right to:

Request access to your personal data
Request correction of inaccurate information
Request deletion (subject to legal requirements)
Withdraw consent for certain processing
Object to misuse of data

To exercise these rights, please contact us using the details below.

12. Consumer Data Protection & Security Policy

Misraab maintains a comprehensive consumer data protection framework that includes:

Identification of data types collected
Clear purpose for data usage
Limited access to authorized staff only
Regular system audits
Continuous monitoring for security threats
Staff training on data protection

These processes are designed to prevent unauthorized access to personal and cardholder information.

13. Transaction Records and Documentation

We strongly recommend that customers:

Retain copies of order confirmations
Save payment receipts
Keep transaction reference numbers
Review and store our Privacy, Return, and Refund Policies

These records may be required for future reference, disputes, or support requests.

14. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of the Republic of Maldives. Any disputes shall be subject to the exclusive jurisdiction of Maldivian courts.

15. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated effective date. We encourage users to review this policy regularly.