Privacy Policy

We operate under the laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and align our practices with leading international standards such as the GDPR for our international customers.

We collect only the information needed to deliver a premium shopping experience:

• Account & order data — name, email, phone, billing and shipping address, order history.
• Payment data — handled directly by PCI-DSS compliant payment processors; we do not store full card numbers.
• Technical data — device, browser, IP address, language, and pages visited.
• Communications — messages you send to our care team via email, WhatsApp or contact forms.

• To process, fulfil and deliver your orders and provide after-sales care.
• To verify identity, prevent fraud and protect both customer and business.
• To send transactional messages (order confirmations, dispatch alerts, returns).
• To send marketing communications — only with your explicit consent, and easy to unsubscribe.
• To improve our website, product range and operational quality.

We process personal data under the legal bases of contract performance (to fulfil your order), legitimate interest (to operate and secure our business), and consent (for marketing and optional cookies).

We share data only with trusted partners required to deliver your order or run our business:

• Payment processors (e.g. card networks, regulated PSPs).
• Logistics & courier partners (e.g. Aramex, DHL, FedEx) for delivery.
• Cloud hosting, analytics and customer-care providers under data processing agreements.
• Authorities, where required by applicable UAE law.

We do not sell, rent or trade personal data.

Some of our service providers are based outside the UAE. Where data is transferred internationally, we ensure appropriate safeguards — including contractual data protection clauses — are in place.

We retain personal data only as long as needed to provide our services, comply with legal, accounting or tax obligations, and resolve disputes. Order records are typically retained for seven years in line with UAE commercial law.

All traffic is encrypted in transit (TLS 1.2+). Access to customer data is role-restricted within our team and protected by multi-factor authentication. We continuously monitor for vulnerabilities and conduct regular reviews of our security posture.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Withdraw consent for marketing at any time.
• Request a portable copy of your data.

Our use of cookies is described separately in our Cookie Policy.

Purone does not knowingly market to or collect personal data from individuals under 18 years of age.

We may update this policy from time to time. Significant changes will be highlighted on this page and, where appropriate, communicated by email.

For any privacy enquiry, please email privacy@purone.com or write to us at the registered office below.