Privacy policy

1. Introduction
This Privacy Policy describes how Zaine.ae collects, uses, and safeguards the personal data of its customers. At Zaine.ae, we are committed to protecting your privacy and ensuring the security of your personal information in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Our business is registered in the Ras Al Khaimah Economic Zone (RAKEZ)/
This means that the provisions of the PDPL are directly applicable to our data processing activities, and we adhere to these regulations to maintain the confidentiality and integrity of your personal data. This website is designed for use by individuals aged 18 years and older and serves customers located within the United Arab Emirates.

2. What Personal Data We Collect
We collect various categories of personal data to provide our services and enhance your shopping experience. This data includes:
Name: We collect your name to identify you, personalize your experience, and address you correctly in communications
Email address: Your email address is collected for account creation, order confirmations, shipping updates, customer support, and, with your consent, for marketing communications about our products and promotions
Phone number: We may collect your phone number to contact you regarding your orders, for customer support, or, with your consent, for SMS-based marketing updates.
Shipping and billing addresses: These addresses are necessary to process your orders, calculate shipping costs, and ensure accurate delivery of your purchases.
Billing addresses are also used to verify payment information.
Payment information: While we do not directly store your full payment details, we collect information necessary to process your payments through secure third-party payment providers. This may include your payment card type and expiry date.
Usage data: When you interact with our website, we automatically collect certain information about your device and browsing activity. This includes your IP address, browser type, domain names, access times, referring website addresses, the pages you visit, and the time spent on those pages. This data is collected through cookies and analytics tools.
The PDPL defines personal data broadly as any information relating to an identified or identifiable natural person. The specific categories listed above are collected to ensure we can effectively operate our e-commerce platform and provide you with a seamless and secure shopping experience.

3. How and Why We Collect It
The collection of your personal data is essential for various purposes related to your use of our e-commerce website. We collect this information in the following ways and for the reasons outlined below:
Name, email, and phone number: This information is collected when you create an account on our website or place an order as a guest.  We use it to manage your account, process and fulfill your orders, communicate with you about your purchases, provide customer support, and personalize your shopping experience. With your explicit consent, we may also use your contact information to send you marketing communications about our latest products, offers, and updates.
Shipping and billing addresses: These details are collected during the checkout process to accurately process and deliver your orders. Billing addresses are also used to verify your payment information and prevent fraudulent transactions. This information is crucial for the successful completion of your purchases.
Payment information: We collect payment information, such as your payment card details, during the checkout process to facilitate payments for your orders.
 It is important to note that this information is securely processed by our third-party payment providers, and we do not store your payment card details directly on our servers.
Usage data: We collect information about your interactions with our website through cookies and analytics tools like Google Analytics and Meta Pixel.13 This includes your browsing activity, the pages you view, and how you navigate our site. We analyze this data to understand how our website is used, identify areas for improvement, enhance website functionality and user experience, personalize the content displayed to you, and ensure the security of our platform.
Under the PDPL, personal data must be collected for specific and clear purposes, and these purposes must be disclosed to you. The reasons outlined above are directly related to the operation of our e-commerce business and are essential for providing you with the services you expect.

4. Legal Basis for Processing Under UAE PDPL
The UAE PDPL requires that all processing of personal data has a lawful basis. We rely on the following legal grounds for processing your personal data, depending on the specific category and purpose:
Category of Personal Data
Purpose of Collection
Legal Basis under UAE PDPL
Name, Email, Phone Number, Shipping and Billing Addresses
Order Fulfilment
Performance of a Contract 
Name, Email, Phone Number
Marketing Communications
Consent 
Name, Email, Phone Number, Shipping and Billing Addresses
Customer Support, Website Improvement
Legitimate Interests 
Payment Information
Processing Payments
Performance of a Contract 
Payment Information
Financial Record-Keeping
Legal Obligations 
Usage Data
Website Analysis, Functionality, Security
Legitimate Interests 
Usage Data
Certain Cookies (Marketing, Analytics)
Consent

5. How We Store and Protect Your Data
We are committed to ensuring the security of your personal data and have implemented appropriate technical and organizational measures to protect it against unauthorized access, loss, misuse, or alteration. 

6. Third-Party Data Sharing (General)
To effectively operate our e-commerce platform and provide you with our services, we may share your personal data with the following categories of third parties:
Payment processors: We share necessary payment information with secure third-party payment processors to facilitate and process your payments for orders. We ensure that these providers comply with stringent security standards. Importantly, we do not directly store your full payment card details.
Cloud providers: We utilize cloud-based service providers for data storage and to maintain our IT infrastructure. These providers are selected based on their robust security measures and compliance with data protection regulations.
Marketing tools: With your consent, we may share your contact information with marketing platforms to send you email marketing and targeted advertising about our products and promotions. You have the right to withdraw your consent for marketing communications at any time.
Analytics providers: We use analytics tools, such as Google Analytics and Meta Pixel, to analyze website usage patterns and understand how users interact with our site. This helps us improve our website's functionality and user experience.
Potential other service providers: Depending on our operational needs, we may also share your data with other service providers, such as those involved in shipping and delivery if we were to directly manage these integrations. These providers are contractually obligated to protect your personal data.
Transparency about data sharing is a fundamental principle of the PDPL, and we are committed to informing you about the third parties who may have access to your data. We only share your personal data with third parties who have a legitimate need to access it for the purposes outlined in this Privacy Policy and who provide sufficient guarantees regarding data protection.

7. Cookies and Tracking Technologies
Our website uses cookies and other tracking technologies to enhance your browsing experience, personalize content, analyze website traffic, and for targeted advertising. Cookies are small text files that are placed on your device when you visit our website.
We use the following types of cookies:
Essential cookies: These cookies are necessary for the basic functionality of our website, such as enabling you to log in, navigate the site, and make purchases.
Analytics cookies: These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. We use tools like Google Analytics and Meta Pixel to track website traffic, user behavior, and other metrics to improve our website's performance and content.
Functional cookies: These cookies allow our website to remember your preferences, such as your language settings or items in your shopping cart, to provide a more personalized experience.
Marketing/advertising cookies: These cookies are used to track your browsing activity across websites to deliver targeted advertisements that are relevant to your interests. We may use these cookies with platforms like Meta Pixel to show you personalized ads.
You have the ability to manage your cookie preferences. When you first visit our website, you will be presented with a cookie banner that allows you to accept or reject certain types of cookies, particularly those that are not strictly necessary for the website's operation. You can also adjust your cookie settings at any time through your browser settings to block or delete cookies. Please note that disabling certain cookies may impact the functionality and your experience on our website. Transparency about our use of cookies is important for building trust and ensuring compliance with data protection regulations.

8. Cross-Border Data Transfers
As part of our operations, some of your personal data may be stored and processed outside the United Arab Emirates through our use of general third-party platforms for services such as payment processing, cloud storage, and marketing tools. We want to assure you that any such transfers are conducted in compliance with the UAE Federal Law.

9. Your Rights Under UAE PDPL
Under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you have several rights regarding your personal data. These rights include:
Right to access: You have the right to request information about whether your personal data is being processed, the purposes of the processing, the categories of personal data concerned, and a copy of your personal data.2
Right to rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.2
Right to erasure (right to be forgotten): You have the right to request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.2
Right to restrict processing: You have the right to request the restriction of the processing of your personal data in specific situations, such as if you contest the accuracy of the data or if the processing is unlawful.2
Right to object to processing: You have the right to object to the processing of your personal data on grounds relating to your particular situation, including the right to object to processing for direct marketing purposes.2
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit that data to another data controller without hindrance.2
Right to object to automated decision-making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.2
Right to withdraw consent: Where the legal basis for processing your personal data is consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.2
We are committed to upholding these rights and providing you with control over your personal data.

10. How to Contact Us for Privacy Requests
If you have any questions about this Privacy Policy, wish to exercise any of your rights under the UAE PDPL, or have any concerns regarding the processing of your personal data, please contact us via email at cs [AT] zaine.ae.
We are committed to addressing your requests and concerns promptly and will respond to your inquiries within the time frames stipulated by the applicable laws.