Last updated: 10 July 2026 | Version 2.0

1. Introduction and scope

This Cookie Policy explains how Najila Sports Trade – FZCO, trading as Najila Sport (“we”, “us”, “our”), uses cookies and similar technologies — including pixels, tags, software development kits (SDKs), local storage and server-side tracking technologies — on our website and any related online services that link to this policy (together, the “Website”).

This policy applies to visitors located in the United Kingdom and the United Arab Emirates, which are our principal places of business and the markets in which the Website operates. It has been prepared to meet the requirements of:

• The UK General Data Protection Regulation (UK GDPR) — the retained EU law version of the General Data Protection Regulation as it applies in the United Kingdom
• The Privacy and Electronic Communications Regulations 2003 (PECR) — which govern the storage of, and access to, information on a user’s device, including cookies
• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) — the federal data protection law of the United Arab Emirates, together with any implementing regulations issued under it

Two principles underpin this policy. First, we do not place non-essential cookies on your device unless you have given your consent through our cookie banner. Second, you can withdraw or adjust your consent at any time, as easily as you gave it (see Section 9).

This Cookie Policy should be read together with our Privacy Policy, which describes more generally how we collect, use, share and protect personal data, and how you can exercise your rights. Where cookies collect information that identifies you or is capable of identifying you — such as online identifiers, device identifiers or IP addresses — that information is personal data and both documents apply to it.

2. Who we are and how to contact us

Najila Sports Trade – FZCO is a free zone company incorporated in the United Arab Emirates, with its registered address at [insert registered address, Dubai, UAE], licence number [insert licence number].

For the purposes of the UK GDPR, we are the controller of personal data collected through cookies set on the Website when you visit from the United Kingdom. For the purposes of the PDPL, we are the controller of personal data collected through cookies when you visit from the United Arab Emirates.

If you have any questions, comments or requests regarding this Cookie Policy, or about how we use cookies and similar technologies, you can contact us:

• By email — [insert contact email]
• By post — Najila Sports Trade – FZCO, [insert registered address, Dubai, UAE]
• Online — via the contact form on the Website

If we appoint a data protection officer or a UK representative in the future, their contact details will be added to this section and to our Privacy Policy.

3. Definitions

In this policy, the following terms have the meanings set out below:

• Personal data — any information relating to an identified or identifiable natural person, as defined in the UK GDPR and the PDPL. Online identifiers such as cookie IDs, advertising IDs and IP addresses can be personal data.
• Cookie — a small text file that a website stores on your computer, tablet or smartphone when you visit. Cookies allow the website to recognise your device and remember information about your visit.
• First-party cookie — a cookie set by the website you are visiting — in our case, by the Website itself or by Shopify on our behalf.
• Third-party cookie — a cookie set by a domain other than the one you are visiting, typically by a partner providing analytics, advertising or other services.
• Session cookie — a cookie that is deleted automatically when you close your browser.
• Persistent cookie — a cookie that remains on your device after you close your browser, until it reaches its expiry date or you delete it.
• Pixel — a small transparent image or snippet of code embedded in a web page or email that records when the page or email has been viewed and can pass information to a server. Also known as web beacons or tracking pixels.
• Local storage — browser-based storage (including localStorage and sessionStorage) that allows websites to store data on your device in a way similar to cookies.
• Server-side tracking — a technique by which events on the Website (such as a purchase) are transmitted from our systems directly to a partner’s servers, rather than from your browser. We use this for measurement through, for example, the Meta Conversions API.
• Consent — any freely given, specific, informed and unambiguous indication of your wishes by which you, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to you.

References in this policy to “cookies” include, where the context allows, all of the similar technologies described above.

4. What cookies and similar technologies are, and why websites use them

Cookies are small text files stored on your device when you visit a website. On their own, cookies are not programs and cannot run code or deliver viruses. They act as a memory for the website: they help the site function correctly, keep you logged in, remember what is in your shopping basket, retain your preferences, and help website operators understand how visitors interact with their pages.

We use both:

• First-party cookies — set by us or by Shopify, the platform on which the Website is built, operating on our behalf
• Third-party cookies — set by trusted partners such as Google, Meta and Klaviyo, who provide analytics, advertising and marketing services to us

In addition to conventional cookies, the Website uses several closely related technologies:

• Pixels and tags — we use pixels from partners such as Meta to understand when a page has been visited or an action (such as a purchase) has been completed, and in marketing emails to understand whether an email has been opened.
• Local storage — some features of the Website store small amounts of data in your browser’s local storage rather than in a cookie, for example to remember interface preferences.
• Server-side tracking — certain conversion events are transmitted from our systems directly to partners’ servers (for example through the Meta Conversions API) to improve the accuracy of measurement. Server-side events relating to advertising and measurement are only sent in respect of visitors who have consented to marketing cookies.

Cookies may be session cookies, which are deleted automatically when you close your browser, or persistent cookies, which remain on your device until they expire or you delete them. The lifespan of each cookie we use is set out in Section 7 and, in authoritative and regularly updated form, in the “Manage preferences” section of our cookie banner.

5. How we obtain your consent

When you first visit the Website, you will be shown a cookie consent banner before any non-essential cookies are placed on your device. The banner gives you three equally prominent choices:

• Accept all — all categories of cookies described in this policy will be enabled.
• Reject all non-essential cookies — only strictly necessary cookies will be used; no analytics, functional or marketing cookies will be set.
• Manage preferences — you can enable or disable each category of non-essential cookies individually — performance and analytics, functional, and marketing and advertising — and see a full list of the individual cookies within each category.

Until you make a choice, only strictly necessary cookies operate. Non-essential tags, pixels and scripts are blocked and do not load. Accepting cookies is never a condition of using the Website: if you reject non-essential cookies, you can still browse and shop normally, although some convenience features may not be available (see Section 9).

Strictly necessary cookies cannot be switched off through the banner because the Website cannot function without them. They are exempt from the consent requirement under UK PECR, and the associated processing of personal data is necessary to provide the services you request (see Section 8).

Records and renewal of consent

We keep a record of the choices you make in the banner — including the date, the version of the banner you saw and the categories you enabled — so that we can demonstrate compliance with the UK GDPR, PECR and the PDPL. Your choice is stored in a first-party cookie so that the banner does not reappear on every visit.

We will ask you to renew your consent periodically (at intervals not exceeding twelve months), and additionally whenever we make material changes to how we use cookies — for example, if we introduce a new category of cookies or a new advertising partner. Clearing your cookies will also cause the banner to reappear on your next visit.

Consent signals passed to our partners

Where our partners support consent signalling, we pass your choices to them so that their technologies behave accordingly. In particular, we use Google Consent Mode to communicate your consent status to Google services: if you have not consented to analytics or advertising cookies, the corresponding Google tags are instructed not to set or read cookies. Similarly, Meta tools are only loaded for visitors who have consented to marketing cookies.

6. The categories of cookies we use

We group the cookies used on the Website into four categories. This section explains each category in detail; Section 7 lists the principal individual cookies within each category.

A. Strictly necessary cookies

These cookies are essential for the Website to operate. They enable core functionality such as page navigation, the shopping basket, the checkout process, account login, load balancing, security and fraud prevention, and the storage of your cookie consent choices themselves. Without these cookies, services you have asked for — such as adding an item to your basket or completing a purchase — cannot be provided.

Because they are strictly necessary, these cookies do not require your consent under UK PECR and cannot be disabled through our cookie banner. You can block them through your browser settings, but if you do, parts of the Website will not work.

B. Performance and analytics cookies

These cookies collect information about how visitors use the Website — for example, which pages are visited most often, how visitors move between pages, how long they spend on the site, which products are viewed, where visitors arrive from, and whether visitors encounter errors. We use tools such as Shopify Analytics and Google Analytics for this purpose.

The information these cookies collect is aggregated and used to produce statistical reports. We use those reports to improve how the Website works: to fix pages that perform poorly, to streamline the checkout, to understand which products and content are most useful to visitors, and to measure the overall performance of the Website. These cookies are only set if you consent to them.

C. Functional cookies

These cookies allow the Website to remember choices you make and provide enhanced, more personal features. For example, they may remember your preferred language, your region and currency, items you have saved or recently viewed, and other display preferences. They may be set by us or by third-party providers whose services we have added to our pages.

If you do not allow these cookies, the relevant features may not function or may need to be re-set on every visit. These cookies are only set if you consent to them.

D. Marketing and advertising cookies

These cookies are used to deliver advertisements that are more relevant to you and your interests, to limit the number of times you see an advertisement, to measure the effectiveness of advertising campaigns, and to understand your journey from an advertisement to a purchase. They include cookies and pixels set by Google (Google Ads), Meta (the Meta Pixel and, on the server side, the Conversions API) and Klaviyo (for email marketing measurement and personalisation).

These technologies may be used for retargeting (showing you advertisements for products you have viewed on the Website when you visit other websites or social platforms), interest-based advertising and audience optimisation (for example, building audiences of visitors with similar characteristics). The data shared with advertising platforms is pseudonymised and limited to what is necessary for these purposes. We do not share phone numbers with advertising platforms.

These cookies are only set — and server-side advertising events are only sent — if you consent to marketing cookies.

7. The principal cookies we use

The tables below list the principal cookies and identifiers used on the Website, grouped by category. Cookie names, providers and durations can change as our partners update their technologies; the authoritative, regularly updated list — including every cookie, its exact name and its expiry period — is always available in the “Manage preferences” section of our cookie banner. Durations shown are typical defaults set by the relevant provider.

Strictly necessary

Performance and analytics (consent required)

Functional (consent required)

Marketing and advertising (consent required)

8. Legal bases for using cookies

United Kingdom — PECR and the UK GDPR

In the United Kingdom, the storage of information on your device, and access to information already stored there, is governed by regulation 6 of PECR. Under PECR, we may only store or access cookies on your device where:

• (a) — we have provided you with clear and comprehensive information about the purposes of the cookie and you have given your consent; or
• (b) — the cookie is strictly necessary to provide an information society service that you have explicitly requested — for example, a cookie that remembers the contents of your basket when you proceed to checkout.

Accordingly, we rely on your consent for all performance and analytics, functional, and marketing and advertising cookies, and on the strictly necessary exemption for the essential cookies described in Sections 6A and 7. We do not rely on “legitimate interests” as a basis for placing non-essential cookies, because PECR does not permit this.

Separately, where the information collected through cookies constitutes personal data, our processing of that data must have a lawful basis under Article 6 of the UK GDPR. Those bases are:

• For non-essential cookies — your consent (Article 6(1)(a)), which is the same consent you give through our cookie banner;
• For strictly necessary cookies — our legitimate interests (Article 6(1)(f)) in operating a secure, functioning e-commerce website and preventing fraud, and, where cookies are necessary to complete a purchase you have initiated, the performance of a contract with you (Article 6(1)(b)).

United Arab Emirates — the PDPL

Under the PDPL, personal data may only be processed with the data subject’s consent or where another basis recognised by the law applies. We process personal data collected through non-essential cookies on the basis of your consent, given through our cookie banner. Your consent under the PDPL is specific, informed and given by a clear affirmative act, and you may withdraw it at any time without affecting your use of the Website.

Data collected through strictly necessary cookies is processed without consent to the extent the PDPL permits, because the processing is necessary to provide the services you request through the Website — including maintaining your session, completing your purchases and protecting the Website and its users against fraud and security threats.

9. Managing and withdrawing your consent

You are in control of the cookies used on your device, and you can change your mind at any time. Withdrawing consent is as easy as giving it. Withdrawal does not affect the lawfulness of any processing carried out before you withdrew.

Through our cookie banner

The simplest way to change your choices is through the Website itself. Select the “Cookie settings” link in the footer of any page to reopen the preference centre. From there you can enable or disable each category of non-essential cookies, review the full list of cookies, or reject all non-essential cookies entirely. Your new choices take effect immediately, and previously set non-essential cookies within a disabled category will no longer be read by us.

Through your browser

All mainstream browsers allow you to see what cookies are stored on your device, delete some or all of them, and block cookies from specific sites or from all sites. Guidance for the most common browsers is available from their publishers:

• Google Chrome — Settings → Privacy and security → Third-party cookies / Site settings
• Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
• Apple Safari — Settings → Privacy → Manage Website Data (macOS) or Settings → Safari → Advanced (iOS)
• Microsoft Edge — Settings → Cookies and site permissions

Please note that blocking all cookies through your browser will also block strictly necessary cookies, and parts of the Website — including the basket and checkout — may stop working. Deleting cookies will also delete the cookie that records your consent choices, so the banner will reappear on your next visit.

Through third-party opt-out tools

You can also opt out of certain third-party technologies directly with the providers concerned:

• Google — install the Google Analytics opt-out browser add-on (tools.google.com/dlpage/gaoptout) or adjust your Google account’s ad settings at adssettings.google.com
• Meta — adjust your advertising preferences at facebook.com/ads/preferences
• Industry tools — use the industry opt-out schemes at www.youronlinechoices.com (Europe/UK) or optout.aboutads.info

On mobile devices

Your mobile operating system may offer additional controls over advertising identifiers — for example, Apple’s App Tracking Transparency and “Allow Apps to Request to Track” setting on iOS, or the “Delete advertising ID” option on Android. These controls operate independently of our cookie banner.

Consequences of disabling cookies

If you disable non-essential cookies, you can still browse and buy from the Website. However, we will not be able to remember your preferences between visits, analytics about your visit will not be collected, and any advertising you see for Najila Sport elsewhere will be less relevant (you may still see advertisements, but they will not be tailored using data from the Website).

10. “Do Not Track” and Global Privacy Control

Some browsers can transmit a “Do Not Track” (DNT) signal or a Global Privacy Control (GPC) signal to the websites you visit. There is currently no settled industry standard governing how websites must respond to these signals, and neither UK nor UAE law currently requires a specific response. The Website’s cookie behaviour is therefore governed by the choices you make in our cookie banner rather than by DNT signals. We keep this position under review and will update this policy if recognised standards or legal requirements emerge.

11. Third-party partners

We work with a small number of trusted partners who may place cookies on your device or receive data collected through cookies and similar technologies. Each partner only receives the data necessary to perform its functions for us, and each partner’s use of data is also governed by its own privacy documentation, which we encourage you to review:

• Shopify — the e-commerce platform on which the Website is built. Shopify sets both essential cookies (basket, checkout, security) and, with your consent, analytics cookies. See Shopify’s privacy policy and cookie documentation on shopify.com.
• Google — provides Google Analytics (usage statistics) and Google Ads (advertising, conversion measurement and remarketing). We use Google Consent Mode so that Google’s tags respect your banner choices. See policies.google.com/technologies/cookies.
• Meta — provides the Meta Pixel and the Conversions API, used for advertising measurement, retargeting and audience building on Facebook and Instagram. See facebook.com/policy and facebook.com/ads/preferences.
• Klaviyo — provides our email marketing and automation. Klaviyo cookies connect Website activity with email engagement so that marketing emails can be measured and personalised. See klaviyo.com/legal.
• Payment providers — Stripe, Apple Pay, Google Pay, Tabby and Tamara process payments on the Website and set cookies necessary for secure payment processing and fraud prevention.

We do not sell personal data collected through cookies. Where a partner acts as our processor (for example, Shopify hosting the Website), it processes data only on our documented instructions. Where a partner acts as an independent or joint controller of certain data (as advertising platforms typically do for measurement data), the arrangements required by applicable law are in place.

12. International transfers

Some of the partners listed in Section 11 process data outside the United Kingdom and the United Arab Emirates, including in the United States, Canada and the European Union. This means that cookie-related data — such as online identifiers and usage information — may be transferred to, and stored in, those countries.

Visitors in the United Kingdom

Where personal data collected through cookies is transferred outside the UK, we ensure that one of the safeguards recognised by the UK GDPR applies:

• Adequacy — we transfer data to countries covered by UK adequacy regulations, including the European Economic Area and, for certified organisations, the United States under the UK–US “data bridge” extension to the EU–US Data Privacy Framework;
• Contractual safeguards — where no adequacy decision applies, we rely on the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with any supplementary technical and organisational measures identified in a transfer risk assessment.

Visitors in the United Arab Emirates

Cross-border transfers of personal data from the UAE are made in accordance with the PDPL and its implementing regulations. Transfers are made to jurisdictions that provide an adequate level of protection or, where that is not the case, subject to appropriate safeguards permitted by the PDPL, such as contractual clauses imposing data protection obligations on the recipient, or with your consent where the law allows.

You can request further information about the safeguards applied to a specific transfer by contacting us using the details in Section 2.

13. Your rights

Where cookies and similar technologies involve the processing of your personal data, you have rights in relation to that data. Depending on your location and the circumstances, these include:

• The right to be informed — to be told how your data is used — this policy and our Privacy Policy provide that information.
• The right of access — to obtain confirmation that we process your personal data and to receive a copy of it.
• The right to rectification — to have inaccurate personal data corrected and incomplete data completed.
• The right to erasure — to have your personal data deleted in certain circumstances, for example where it is no longer needed or you have withdrawn consent.
• The right to restrict processing — to limit how we use your data in certain circumstances.
• The right to data portability — to receive the personal data you provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent and carried out by automated means.
• The right to object — to object to processing based on legitimate interests, and an unconditional right to object to processing for direct marketing purposes.
• The right to withdraw consent — where processing is based on consent, to withdraw that consent at any time, as easily as you gave it, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us using the details in Section 2. We will respond within the timeframes required by applicable law — one month under the UK GDPR, extendable in complex cases, and the periods prescribed under the PDPL. We may need to verify your identity before acting on a request. Exercising your rights is free of charge, although the law permits us to charge a reasonable fee or refuse manifestly unfounded or excessive requests.

Complaints

If you are in the UK and are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO): ico.org.uk, telephone 0303 123 1113, or by post to Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.

If you are in the UAE, you may raise a complaint with the UAE Data Office, the federal authority responsible for supervising the PDPL. We would, however, appreciate the opportunity to address your concerns directly first.

14. How long cookie data is kept

Cookies themselves remain on your device for the periods shown in Section 7: session cookies are deleted when you close your browser, and persistent cookies remain until they expire or you delete them.

The data collected through cookies is retained for no longer than necessary for the purposes described in this policy. Analytics data is retained in identifiable form for the retention period configured in the relevant tool (for Google Analytics, no longer than 14 months) and thereafter only in aggregated, statistical form. Advertising measurement data is retained in accordance with the retention rules of the relevant platform. Records of your consent choices are retained for as long as necessary to demonstrate compliance with the UK GDPR, PECR and the PDPL, and in any event for no longer than the applicable limitation periods.

15. Children

The Website is intended for adults and is not directed at children. We do not knowingly use cookies to collect personal data from children, and we do not knowingly serve interest-based advertising to children. If you believe that a child’s personal data has been collected through the Website, please contact us using the details in Section 2 and we will take appropriate steps to delete it.

16. Security of cookie data

We apply appropriate technical and organisational measures to protect personal data collected through cookies, consistent with the requirements of the UK GDPR and the PDPL. These measures include encryption of data in transit (the Website is served over HTTPS), the use of secure and, where appropriate, HttpOnly cookie attributes, access controls limiting who within our organisation can access analytics and marketing data, and contractual security obligations imposed on the partners listed in Section 11. No system is completely secure, but we review our measures regularly and update them as technology and threats evolve.

17. Changes to this policy

We may update this Cookie Policy from time to time — for example, when we add or remove tools or partners, when the cookies used on the Website change, or when the law or regulatory guidance develops. Any updated version will be posted on this page with a revised “Last updated” date and version number at the top.

Where a change materially affects how we use cookies — such as the introduction of a new category of cookies, a new purpose, or a new advertising partner — we will not apply the change to you on the basis of your existing consent. Instead, we will present the cookie banner again and ask for your consent before the new cookies are used. We encourage you to review this page periodically so that you remain informed about our use of cookies.

18. Related policies and further information

This Cookie Policy forms part of our wider privacy documentation. For more information about how we handle your personal data generally — including the categories of data we collect, our purposes, our retention periods and your rights in full — please see our Privacy Policy at [insert link]. Our Terms of Service, available at [insert link], govern your use of the Website generally.

For independent, plain-language information about cookies and how to manage them, you may find the following resources helpful: the ICO’s guidance on cookies at ico.org.uk, and allaboutcookies.org.

If anything in this policy is unclear, or you would like further information about any of the cookies or partners described here, please contact us at [insert contact email].