Privacy Policy

We collect the following categories of personal data:

• Identity & contact details — your name, email address, phone number, and (for business customers) company name and trade details.
• Account credentials — the login details for any account you create with us (passwords are stored only in hashed form).
• Order & purchase history — the products you order, order values, invoices, and communications about your orders.
• Delivery addresses — the addresses you provide for shipping and billing.
• Payment metadata — we do not store full card numbers. Card payments are handled by our payment processor; we retain only limited transaction references needed to manage your order.
• Device & usage data — IP address, browser type, pages viewed, and similar information collected automatically, including via cookies.
• B2B trade documents — for business accounts, any trade licence, VAT/TRN, or approval documents you submit.

We process your personal data to:

• fulfil and deliver your orders and process payments;
• provide customer support and manage your account;
• detect, prevent, and investigate fraud and misuse;
• comply with our legal, tax, and accounting obligations; and
• where you have given consent, send you marketing about products and offers you may be interested in.

Depending on the activity, we rely on one or more of the following lawful bases under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021):

• Contractual necessity — to fulfil the purchase contract when you place an order.
• Legal obligation — to meet tax, accounting, and regulatory requirements.
• Legitimate interest — to operate, secure, and improve our store, where this does not override your rights.
• Explicit consent — for marketing communications and non-essential cookies.

Where we rely on consent, you can withdraw it at any time — through the unsubscribe link in our emails, the cookie consent banner, or by contacting us — without affecting processing carried out before withdrawal.

We share personal data with trusted service providers (processors) only as needed to provide our services. Each processes data under its own privacy terms:

• Stripe — payment processing. Stripe Privacy Policy.
• Resend — transactional and notification email. Resend Privacy Policy.
• OpenAI — AI-assisted features and support tooling. OpenAI Privacy Policy.
• WhatsApp / Meta — order and support messaging. WhatsApp Privacy Policy.

We may also disclose data where required by law or a competent authority. We do not sell your personal data to third parties.

Some of our processors store or process data on servers outside the United Arab Emirates. Where personal data is transferred abroad, we rely on the safeguards permitted under the UAE PDPL — including transfers to jurisdictions recognised as providing an adequate level of protection, or appropriate contractual safeguards with the processor — to ensure your data remains protected.

We keep personal data only for as long as necessary for the purpose it was collected. Order, invoice, and payment records are retained for the period required by UAE tax and accounting law. Account data is kept while your account remains active. Marketing data is kept until you withdraw consent. When data is no longer needed, we delete or anonymise it.

Under the UAE PDPL, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data;
• restrict or object to certain processing of your data;
• request portability of data you provided, in a structured, machine-readable format; and
• withdraw consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframe required by applicable law, and ordinarily within one month.

We use cookies to operate the store (essential cookies) and, with your consent, to understand usage and improve your experience. Essential cookies are required for the site to function; non-essential cookies are set only after you accept them. You can manage your choice at any time through the cookie consent banner, and most browsers also let you block or delete cookies in their settings.

We apply appropriate technical and organisational measures to protect your personal data — including encryption in transit, hashed credentials, access controls, and use of reputable processors. No system is perfectly secure, but in the event of a personal data breach that poses a risk to your rights, we will notify the UAE Data Office and affected individuals as required by the PDPL.

The controller of your personal data is Al Zahra Lighting Equipment TR (“Ziera”), Sharjah, United Arab Emirates, Trade Licence No. 100290290400003. For any privacy question or to exercise your rights, contact us at [email protected].

If you believe your data has been handled improperly, you also have the right to lodge a complaint with the UAE Data Office.