Privacy Policy

At Reeh Dubai, your privacy matters. This Privacy Policy explains who we are, what personal data we collect, how we use it, and the rights you have over it.

Reeh Dubai ("we", "us", "our") is the data controller responsible for the personal data collected through reehdubai.com.

• Registered office: <TODO: registered office address>, Dubai, United Arab Emirates
• Privacy contact / DPO: support@reehdubai.com (placeholder until a Data Protection Officer is appointed)

• Account data: name, email, password hash, phone number, preferences.
• Order data: billing and shipping address, items purchased, order history, returns.
• Payment data: handled by Shopify Payments / our processor; we do not store full card numbers.
• Browsing data: IP address, device and browser, pages viewed, referring URL, approximate location.
• Cookie data: see Cookies below.
• Communications: messages you send us, reviews, survey responses.

• Fulfilling and shipping your orders, including returns.
• Customer support and responding to enquiries.
• Account management and security (login, fraud prevention).
• Marketing emails — only if you have opted in, and you can unsubscribe at any time.
• Improving our products, site, and service quality.
• Meeting our legal, tax, and accounting obligations.

For visitors covered by EU/UK GDPR, our lawful bases are:

• Performance of a contract (Art. 6(1)(b)) — to take and fulfill your order.
• Legitimate interests (Art. 6(1)(f)) — to secure our site, prevent fraud, and improve our service.
• Consent (Art. 6(1)(a)) — for marketing emails, optional cookies, and any optional analytics.
• Legal obligation (Art. 6(1)(c)) — for tax records and lawful disclosure requests.

We do not sell your personal data. We share limited data with vetted service providers acting as processors on our behalf, including: payment processors (Shopify Payments), transactional email, hosting & CDN providers, analytics (only with consent), shipping carriers, and authorities where required by law.

• Order and tax records: up to 7 years to meet tax and accounting obligations.
• Marketing data: until you unsubscribe or withdraw consent.
• Account data: for the life of your account; deleted on request unless we are required to retain it.
• Server logs: short-term (typically up to 90 days).

If you are in the EU or UK, you may exercise rights of access, rectification, erasure, portability, restriction, objection, consent withdrawal, and the right to lodge a complaint with your supervisory authority. To exercise any right, email support@reehdubai.com. We aim to respond within one month.

If you are in the United Arab Emirates, your data is processed in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL). The PDPL provides rights similar to those above. Reach out to support@reehdubai.com to exercise these rights.

We use cookies and similar technologies for: keeping you signed in, remembering your cart, basic security, and — if you consent — analytics and marketing. You can manage your preferences via the cookie banner. Disabling necessary cookies may break parts of the site.

Your data may be processed outside of your country of residence, including in the UAE, EEA, UK, and US. We rely on appropriate safeguards including SCCs and equivalent UK transfer mechanisms.

We use industry-standard security measures including TLS in transit, hashed passwords, access controls, and regular security reviews. No system is perfectly secure — please use a strong, unique password and let us know if you suspect misuse of your account.

Reeh Dubai is intended for adults. We do not knowingly collect personal data from anyone under 18.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where the change is material, notify you by email or a prominent notice on the site.

If you have questions about this policy or your personal data, contact us at support@reehdubai.com.