At Ameya, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, and safeguard your information when you visit our website, make purchases, or interact with our services. This policy complies with the UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL) and other applicable laws.
1. Information We Collect
We may collect the following types of personal data:
- Identity Information: Name, date of birth, gender
- Contact Information: Email address, phone number, postal address
- Account Information: Username, password, and account preferences
- Transaction Information: Purchase history, order details, delivery information
- Technical Information: IP address, browser type, device information, website usage data
- Marketing Information: Your preferences for receiving marketing communications
1.2 How We Collect Information
We collect information through:
- Direct interactions when you create an account, make purchases, or contact us
- Automated technologies including cookies, web beacons, and analytics tools
- Third-party sources such as payment processors and delivery partners (only as necessary)
2. How We Use Your Information
We process your personal data for the following purposes:
We process your personal data for the following purposes:
2.1 Legal Basis for Processing
In accordance with UAE PDPL, we process your data based on:
- Consent: Where you have given explicit consent
- Contract Performance: To fulfill our contractual obligations to you
- Legal Obligation: To comply with applicable laws and regulations
- Legitimate Interest: For our business operations, fraud prevention, and improving our services
2.2 Purposes of Processing
- Processing and fulfilling your orders
- Managing your account and providing customer support
- Communicating with you about your orders, account, and our services
- Processing payments and preventing fraud
- Improving our website, products, and services
- Sending marketing communications (with your consent)
- Complying with legal and regulatory requirements
3. Data Security and Protection
3.1 Security Measures
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption: All sensitive data is encrypted in transit and at rest
- Access Controls: Strict access limitations to authorized personnel only
- Regular Security Audits: Continuous monitoring and assessment of our security measures
- Staff Training: Regular training on data protection and security protocols
3.2 Payment Card Information
IMPORTANT COMMITMENT: All credit/debit card details and personally identifiable information will NOT be stored, sold, shared, rented, or leased to any third parties. We use secure, PCI-DSS compliant payment processors to handle all payment transactions. Card details are processed through encrypted connections and are not stored on our servers.
4. Data Sharing and Disclosure
4.1 Third-Party Sharing
We do not sell, rent, or lease your personal information to third parties. We may share your data only in the following limited circumstances:
- Service Providers: With trusted partners who assist us in operating our business (e.g., payment processors, delivery companies, IT support)
- Legal Requirements: When required by law, court order, or government authority
- Business Protection: To protect our rights, property, or safety, or that of our customers
- Consent: When you have given explicit consent for specific sharing
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.
6. Your Rights Under UAE PDPL
As a data subject, you have the following rights:
6.1 Access Rights
- Right to know what personal data we process about you
- Right to obtain a copy of your personal data in a structured, machine-readable format
6.2 Correction and Update Rights
- Right to request correction of inaccurate or incomplete personal data
- Right to update your information at any time
6.3 Erasure Rights
- Right to request deletion of your personal data in certain circumstances
- Right to be forgotten when data is no longer necessary for the original purpose
6.4 Restriction and Objection Rights
- Right to restrict processing in certain circumstances
- Right to object to processing based on legitimate interests
- Right to object to direct marketing at any time
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
Remember your preferences and settings
- Analyze website traffic and usage patterns
- Provide personalized content and advertisements
- Improve website functionality and user experience
You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.
8. Marketing Communications
8.1 Consent-Based Marketing
We will only send marketing communications with your explicit consent. You can:
- Opt-in during account registration or checkout
- Manage preferences in your account settings
- Unsubscribe using links in marketing emails
- Contact us directly to update preferences
8.2 Withdrawal of Consent
You may withdraw your consent for marketing communications at any time without affecting the lawfulness of processing based on consent before withdrawal.
9. Children's Privacy
Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor without appropriate consent, we will delete it promptly.
10. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will:
- Notify the relevant UAE authorities within 72 hours
- Inform affected individuals without undue delay
- Take immediate steps to contain and remedy the breach
- Implement additional safeguards to prevent future incidents
11. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will:
- Post the updated policy on our website
- Notify you of material changes via email or prominent website notice
- Obtain fresh consent where required by law
The "Last Updated" date at the top of this policy indicates when it was last revised.
12. Governing Law
This Privacy Policy is governed by the laws of the United Arab Emirates, including the Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data (PDPL) and other applicable UAE legislation.
---
Your privacy matters to us. By using our services, you acknowledge that you have read, understood, and agree to this Privacy Policy.
Items/Products/Services Pricing: Inclusion is mandatory.
