Privacy policy

1. Data controller

This policy explains what we collect, why, and what we do with it. We are the data controller for the personal data collected through this site, a sole establishment registered in the United Arab Emirates. We collect only what an order or a message actually requires, and we do not sell personal data to anyone.

2. Data we collect

When you order we collect your name, delivery address, email address, and phone number if you give one. Payment details go directly to our payment provider and never reach us.

When you browse, the usual technical data is collected through cookies — IP address, browser, and pages visited. When you write to us, we collect the content of your message.

This site is intended for adults. We do not knowingly collect data from anyone under 18; if you believe a child has given us personal data, contact us and we will delete it.

3. Legal basis and purposes

We rely on three legal bases. Taking and delivering an order, and answering the messages and returns that go with it, are necessary to perform our contract with you. Preventing fraud and abuse, and measuring how the site is used so we can improve it, rely on our legitimate interests, balanced against your interests. Marketing email is sent only on your consent, which you can withdraw in one click.

4. Data recipient

We share only what a partner needs to do their part, and only for the order in question. That means our payment processor, the carrier that delivers your parcel, and the email service that sends your confirmation.

• Payment provider — takes card details directly; they never reach us
• Emirates Post — receives the name, address and phone number needed for delivery
• Email service provider — receives your address so we can send order updates

We do not sell your data, and we do not share it for anyone else's marketing.

5. International transfers

Our workshop is in the United Arab Emirates and some of the services above are provided outside it. Where your data leaves the UAE, the transfer is made under appropriate safeguards, such as standard contractual clauses.

You can ask us which providers are involved and where they operate by writing to us through the contact page.

6. Data retention

Order records are kept for the period required by tax law, currently ten years. Marketing consent is kept until you withdraw it. Analytics data is discarded after 14 months. A message is kept for as long as it takes to resolve your enquiry and answer any follow-up.

7. Cookies

Strictly necessary cookies keep the cart and the session working and cannot be switched off. Analytics cookies are set only after you accept them, and you can change your choice at any time from the consent banner.

8. Marketing communications

We send marketing email only if you asked for it. Every message carries a link to unsubscribe, and unsubscribing stops marketing without affecting the emails you need to receive about an order.

We do not buy or rent mailing lists, and we do not pass your address to another sender.

9. Your rights

You may ask to see the data we hold about you, have it corrected, erased, restricted or exported, or object to how it is used. Email us and we will answer within 30 days at no charge.

If you are not satisfied with our answer you may complain to your national data protection authority.

10. Security

Traffic is encrypted in transit, access to order data is limited to those who need it, and no card data is stored on our side at all.

No system is perfect, but we treat a breach as a reportable incident and would tell you and the regulator if one affected your data.

11. Changes

We may revise this policy as the site or the law changes. The date at the top of this page shows when it was last reviewed, and we will ask again for consent if a change affects what you have already agreed to.