Privacy policy

This policy explains what personal information we collect when you use this website, why we collect it, and what you can ask us to do with it.

[TO CONFIRM: insert the registered legal entity name, trade licence number and registered address of the business that controls this data. A UAE privacy policy should identify the controller.]

What we collect

**When you place an order**, we collect your name, email address, phone number and delivery address, along with the contents and value of the order.

**When you create an account**, we store your name, email address and a securely hashed password. We never store your password in a readable form.

**When you save addresses** to your account, we keep them so you do not have to retype them.

**When you use a basket or wishlist without signing in**, we store an identifier in a cookie on your device so the items are still there when you come back.

**When you contact us or subscribe to emails**, we keep your email address and what you sent us.

**Automatically**, our hosting and security providers process technical data such as your IP address and browser type in order to serve the site and prevent abuse.

What we do not collect

We do not store your card details. When card payment is enabled, card data is entered directly with our payment provider and never reaches our servers.

We do not collect information about your health. Nothing on this site should be treated as a medical record.

Why we use it

• To take, process, deliver and invoice your order
• To let you sign in, and to keep your basket and wishlist
• To answer your questions and handle returns
• To meet our legal and tax obligations
• To send marketing emails, only where you have asked us to

Who we share it with

We share only what is necessary, with:

• the delivery company carrying your order
• our payment provider, when you pay by card
• our email provider, to send order confirmations and any emails you subscribed to
• our hosting provider, which stores the site's data
• the authorities, where the law requires it

We do not sell your personal information, and we do not share it for anyone else's marketing.

[TO CONFIRM: some of these providers store data outside the UAE. Confirm the list of providers actually used at launch, and disclose that transfers take place.]

How long we keep it

Order records are kept for as long as tax and accounting law requires.

[TO CONFIRM: state a retention period for account and marketing data — for example "until you ask us to delete it, or after N years of inactivity".]

Your rights

You can ask us to:

• tell you what personal information we hold about you
• correct anything that is wrong
• delete your information, where we are not required to keep it
• stop sending you marketing emails, at any time

Every marketing email also carries an unsubscribe link. To make any other request, WhatsApp or call +971 56 552 6892, or email beautyfarm@ultrameds.ae.

[TO CONFIRM: have this policy checked against UAE Federal Decree-Law No. 45 of 2021 on personal data protection before launch.]

Cookies

We use cookies that are necessary for the site to work — keeping you signed in, remembering your basket and wishlist, and keeping the checkout secure. These cannot be turned off without breaking the site.

[TO CONFIRM: if analytics or advertising cookies are added later, this section must be updated and a consent banner added.]

Changes

If we change this policy we will update the date below and, where the change is significant, tell you directly.

Contact

WhatsApp or call +971 56 552 6892, or email beautyfarm@ultrameds.ae.