Privacy Policy

1. What we collect

• Account & order data: name, email address, phone number, delivery address, and order history — collected when you create an account, check out, or contact us.
• Payment data: if you pay by card, your card details are entered directly into and processed by our payment processor, Stripe — we never see or store your full card number. If you choose cash on delivery, no card data is collected at all.
• Communications: messages you send us via WhatsApp, email, our contact/inquiry forms, or our website chat assistant.
• Marketing preferences: your email address, if you voluntarily submit it to receive a discount code or marketing updates.
• Essential local storage: your shopping cart is stored in your browser's local storage so it persists between visits, and a login session token is stored to keep you signed in. We do not use third-party advertising or tracking cookies at this time.

2. Why we collect it

We use your data to:

• process and deliver your orders, and provide customer support related to them;
• create and manage your account, if you choose to have one;
• send you marketing emails, but only if you have opted in (e.g. by submitting your email for a discount code) — you can unsubscribe at any time;
• respond to enquiries submitted through our contact or corporate gifting forms;
• comply with our legal and tax obligations under UAE law.

3. Who we share it with

We do not sell your personal data. We share it only with the service providers necessary to run this website and fulfil your order, currently:

• Stripe — payment processing, for card orders.
• Supabase — our database and account authentication provider, which stores your account and order data securely.
• Resend — our email delivery provider, used to send order and marketing emails.
• Our delivery courier — your name, phone number, and delivery address, solely to deliver your order.
• Our website chat assistant (powered by Groq) — if you use the chat widget, the text of your conversation is sent to this third-party AI service to generate a response. Do not share sensitive personal information (e.g. full card numbers) in the chat.

Each of these providers processes your data only as needed to provide their service to us, under their own data protection obligations.

4. Data retention

We keep your order and account data for as long as your account is active, and for a reasonable period afterward as required for accounting, tax, and legal purposes under UAE law. You may request deletion of your account data at any time, subject to section 5 below.

5. Your rights under the PDPL

Subject to the exceptions set out in the PDPL, you have the right to:

• request access to the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• object to or restrict certain processing of your data;
• request a copy of your data in a portable format;
• withdraw consent to marketing communications at any time.

To exercise any of these rights, contact us using the details in section 7 below. If you believe we have not handled your data properly, you also have the right to lodge a complaint with the UAE Data Office.

6. Security

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS) and access controls on our database. No method of transmission or storage is 100% secure, but we work to protect your information to industry standards.

7. Contact us

For any privacy questions or to exercise your rights under the PDPL, reach us via WhatsApp or email — see our Contact page for current details.