Privacy Policy – El Septimo Dubai
El Septimo Dubai is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”) and applicable regulations under the UAE e‑Commerce Law (Federal Decree-Law No. 14 of 2023).
An Arabic version of this Privacy Policy is available upon request.
1. Scope
This Policy applies to personal data we collect through our website, in-store interactions, customer support, marketing communications, and any related online services we operate in the United Arab Emirates.
2. Information We Collect
• Personal Information: full name, address, email, phone number.
• Transaction Details: order information, delivery details, and transaction history.
• Cookies and Usage Data: device identifiers, IP address, pages viewed, and interactions with our website (see “Cookies and Tracking Technologies”).
3. Payment Information
We do not store or process your card details on our systems. All payment transactions are handled securely by third‑party, PCI‑compliant payment gateways authorised for use in the UAE.
4. How We Use Your Information
• To process, verify, and deliver your orders.
• To communicate with you regarding purchases, inquiries, and offers (where permitted).
• To operate, maintain, and improve our website and services.
• To comply with legal and regulatory obligations in the UAE.
• To prevent fraud and ensure network and information security.
5. Legal Bases for Processing (PDPL)
We process personal data on one or more of the following legal bases:
• Your consent;
• Performance of a contract with you or to take steps at your request prior to entering into a contract;
• Compliance with a legal obligation;
• Protection of vital interests;
• Our legitimate interests that do not prejudice your rights and freedoms.
6. Sharing Your Information
We do not sell or trade your personal data. We may share data only with:
• Authorised service providers (e.g., payment processors, delivery partners, IT support) bound by confidentiality and security obligations;
• Governmental or regulatory authorities when required to comply with UAE law or law‑enforcement requests;
• Another entity in connection with a merger, acquisition, or business transfer, under equivalent privacy safeguards.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to remember preferences, measure performance, and enhance user experience. You can manage or disable cookies in your browser settings. Disabling cookies may affect certain functionalities.
8. International Data Transfers
We may transfer personal data outside the UAE. Such transfers occur only where: (i) the destination jurisdiction provides an adequate level of protection; or (ii) appropriate safeguards (such as contractual commitments) are in place; or (iii) another PDPL condition applies, including your explicit consent or necessity for contract performance.
9. Your Rights Under UAE Law
Subject to PDPL, you have the right to:
• Access your personal data;
• Request correction, deletion, or restriction of processing;
• Withdraw consent at any time (without affecting lawfulness prior to withdrawal);
• Object to automated decision‑making;
• Request data portability in a structured, commonly used, and machine‑readable format;
• Lodge a complaint with the UAE Data Office if you believe your rights have been violated.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Data is stored on secure servers within the UAE or approved international locations, with access limited to authorised personnel under confidentiality obligations. While we take reasonable precautions, no method of transmission or storage is entirely secure.
11. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy and to meet legal, accounting, or reporting requirements. When data is no longer required, we will delete or anonymise it in a secure manner.
12. Data Breach Notification
In the event of a personal data breach likely to result in a risk to individuals’ rights, we will notify the UAE Data Office and, where required, affected individuals without undue delay, in accordance with PDPL requirements.
13. Third‑Party Links
Our website may contain links to third‑party websites or services. We are not responsible for the privacy practices or content of such sites. We encourage you to review their privacy policies before providing any personal data.
14. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware of data collected from a minor without parental consent, we will delete it promptly.
15. Complaints and How to Contact Us
If you have a privacy complaint or request, please contact us first so we can resolve it promptly:
El Septimo Dubai
YANSOON 9, OFFICE 104 – Downtown Dubai – Dubai, UAE
info@elseptimo.ae
If your concern remains unresolved, you may submit a complaint to the UAE Data Office through the official channels provided by the UAE Government.
16. Changes to This Privacy Policy
We may update this Policy periodically to reflect changes in our practices or applicable UAE regulations. Updates will be posted on this page with a revised date. Your continued use of our website constitutes acceptance of these updates.
17. Data Protection Officer (if applicable)
If you wish to contact our Data Protection Officer, please email info@elseptimo.ae or indicate “For the attention of the DPO” in your subject line. (This role applies if and when required under PDPL.)