Privacy policy

Last updated: [DATE]

Milda Arabia ("we", "us", "our") operates this store to provide you with a curated shopping experience (the "Services"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit, use, or make a purchase through the Services, in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL").

By using the Services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal Data We Collect

  • Contact details: name, address, billing and shipping address, phone number, email address.
  • Payment information: payment card details (processed securely by our payment provider — we do not store full card numbers), transaction details.
  • Account information: username, password, preferences.
  • Order information: items purchased, returned, or exchanged, and order history.
  • Communications: information you share when contacting customer support.
  • Device and usage information: IP address, browser type, and how you interact with our site.

2. Lawful Basis and Purpose of Processing

We process your personal data on the following lawful bases under the UAE PDPL:

  • Contractual necessity: to process your orders, arrange delivery, handle returns, and provide customer support.
  • Consent: for marketing communications, which you may withdraw at any time.
  • Legitimate interest: to improve our Services, prevent fraud, and maintain site security.
  • Legal obligation: to comply with UAE law, including consumer protection and tax record-keeping requirements.

3. How We Share Your Data

We share personal data only where necessary, with:

  • Shopify, our e-commerce platform provider, which hosts and helps operate the Services.
  • Payment processors, to securely process your payment.
  • Shipping couriers, to deliver your order (this may include couriers based outside the UAE for international shipments).
  • Service providers who support our operations (e.g. customer support tools), under confidentiality obligations.
  • Government or legal authorities, where required by UAE law.

We do not sell your personal data to third parties.

4. Cross-Border Data Transfers

Because we use Shopify's global hosting infrastructure and ship internationally, your personal data may be transferred to and processed in countries outside the UAE. Where this happens, we take reasonable steps to ensure your data receives a comparable level of protection, consistent with UAE PDPL requirements on cross-border data transfer.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy, including order history for warranty and legal record-keeping purposes, or as required by UAE law.

6. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights Under the UAE PDPL

Subject to the exceptions set out in the PDPL, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete personal data.
  • Request erasure of your personal data.
  • Restrict or object to certain processing, including for direct marketing.
  • Receive a copy of your personal data in a structured, machine-readable format (data portability).
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before processing your request.

8. Children's Data

Our Services are intended for use by adults purchasing products for their children. We do not knowingly collect personal data directly from children. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Cookies

We use cookies and similar technologies to operate our store, remember your preferences, and understand how our Services are used. You can control cookies through your browser settings.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or UAE law. The updated version will be posted here with a new "Last updated" date.

11. Contact Us and Complaints

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at [EMAIL] or [PHONE], or write to us at [ADDRESS]. If you believe we have not addressed your concern, you may lodge a complaint with the UAE Data Office.