Privacy Policy

We collect only the personal data necessary to provide our services. This may include:

• Full name and contact details (email address, phone number)
• Delivery address and location information
• Order and payment details (we do not store card numbers — payments are processed by certified third-party gateways)
• Device and browsing data collected automatically via cookies and analytics tools (e.g., IP address, browser type, pages visited)
• Information you voluntarily provide in contact forms or customer support messages

We process your personal data only for legitimate purposes:

• To process and fulfil your orders and send order confirmations
• To communicate with you about your purchases or enquiries
• To send marketing communications — only with your separate, explicit consent
• To improve our website and services through anonymised analytics
• To comply with legal and regulatory obligations under UAE law

Consent under the UAE PDPL must be:

• Freely given — not a condition of using our services
• Specific — each purpose requires a separate opt-in
• Informed — you know exactly what you are agreeing to
• Easy to withdraw — you can opt out at any time with no penalty

Under the UAE Personal Data Protection Law (PDPL) you have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — ask us to update inaccurate or incomplete data
• Delete — request erasure of your data where we no longer have a legal basis to keep it
• Restrict — ask us to pause processing your data in certain circumstances
• Object — object to processing based on legitimate interests
• Portability — receive your data in a structured, machine-readable format

We take cross-border data transfers seriously.

• We aim to host customer data on servers located within the UAE
• Where we use third-party services (e.g., payment processors, analytics) that process data outside the UAE, we ensure appropriate safeguards are in place
• Any cross-border transfers are covered by a legal basis as required under the PDPL
• We regularly review our data processors to ensure compliance

We retain personal data only as long as necessary:

• Order data: 5 years (for accounting and legal purposes)
• Marketing preferences: Until you withdraw consent
• Analytics data: 26 months (anonymised after 14 months)
• Customer support records: 2 years from last interaction
• Account data: For the life of your account, plus 90 days after deletion

In the unlikely event of a personal data breach, we have a clear response plan:

• Our Data Protection Officer (DPO) is notified immediately upon detection
• We assess the risk and severity within 24 hours
• The UAE Data Office is notified without undue delay where required
• Affected customers are contacted directly if they face a high risk
• We document all breaches and remediation steps taken

We implement technical and organisational security measures:

• SSL/TLS encryption for all data in transit
• Access controls — only authorised staff can access personal data
• Regular security audits and vulnerability assessments
• PCI-DSS compliant payment processing (we never store raw card data)
• Staff training on data protection responsibilities

We use cookies for essential functionality and analytics:

• Essential cookies: Required for the site to function (session, cart, authentication)
• Analytics cookies: Help us understand how visitors use our site (opt-out available)
• Marketing cookies: Only set with your explicit consent
• You can manage cookie preferences at any time via our cookie banner