This policy explains what personal data we collect when you visit our store or buy from us, why we hold it, who we share it with, and the rights you have over it. It is written to meet UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.
1 · Who controls your data
The data controller is Dar Duha Perfumes, trading as Duha, of Abu Dhabi, United Arab Emirates. You can reach us on +971 50 79 33 929 or at duha.perfume@gmail.com.
2 · What we collect
| Category | Examples | Why |
|---|---|---|
| Identity & contact | Name, telephone, email, delivery and billing address | To take and deliver your order |
| Order data | Products, quantities, prices, order history, gift messages | To perform the contract |
| Payment data | Card type, last four digits, authorisation result | To take payment and prevent fraud |
| Technical data | IP address, device, browser, pages viewed, referral source | To run and secure the store |
| Communications | Messages, WhatsApp chats, calls, reviews, claim forms | To answer you and keep a record |
| Marketing preferences | Consent to receive news, and withdrawal of it | Only with your consent |
We do not knowingly collect data from anyone under 18. We do not collect sensitive personal data — health, biometric, religious or similar — and ask that you do not send it to us.
3 · Our legal basis
- Performance of a contract — to process, deliver and support your order.
- Legal obligation — tax, VAT and commercial record-keeping under UAE law.
- Legitimate interest — securing the store, preventing fraud, improving what we offer.
- Your consent — marketing messages and non-essential cookies. You may withdraw consent at any time, and withdrawing it is as easy as giving it.
4 · Who we share it with
We do not sell your personal data. We share only what is necessary, and only with:
- Shopify — the platform that hosts this store and processes orders.
- Payment provider — Stripe, which processes card and digital-wallet payments securely.
- Delivery — the driver or courier who brings your order, who receives your name, address and telephone.
- Communication tools — email and WhatsApp services used to reply to you.
- Analytics — Shopify's own analytics and the Analyzely app, which show us how the store is used. They receive details of your visit, such as the pages you view and the items you add to your cart.
- Authorities — where UAE law obliges us to disclose.
5 · Transfers outside the UAE
Some of these providers process data outside the UAE. Where that happens we rely on the grounds permitted by Article 22 and Article 23 of the Personal Data Protection Law — an adequate level of protection in the receiving jurisdiction, contractual safeguards, or your explicit consent.
6 · How long we keep it
| Data | Retention |
|---|---|
| Order and invoice records | As long as UAE tax and commercial law requires — currently 5 years |
| Customer account | Until you ask us to close it |
| Marketing consent records | Until you withdraw consent, plus proof of withdrawal |
| Claim files and correspondence | 24 months after the claim closes |
| Website analytics | 14 months |
7 · Your rights
Under the Personal Data Protection Law you may:
- Ask what data we hold about you, and receive a copy.
- Have inaccurate or incomplete data corrected.
- Ask us to erase your data, where no legal duty requires us to keep it.
- Ask us to restrict or stop a particular use.
- Object to processing based on our legitimate interest.
- Receive your data in a portable, machine-readable form.
- Withdraw consent at any time, without affecting what was lawful beforehand.
- Object to automated decision-making that materially affects you.
Write to duha.perfume@gmail.com and we will respond within 30 days. We may ask you to confirm your identity first — that protects you, not us.
8 · Security
The store runs over encrypted HTTPS. Access to customer data is limited to those who need it. Payment data never touches our systems. If a breach occurs that is likely to harm you, we will notify you and the UAE Data Office as the law requires.
9 · Cookies
Cookies are covered separately in document DUHA-POL-04.
10 · Complaints
If you are not satisfied with how we have handled your data, please tell us first. You also have the right to complain to the UAE Data Office, the federal authority for personal data protection.
11 · Changes
If we change this policy we will publish the new version here and update the date on the front of this document. Material changes affecting your rights will be notified directly where we can.
