Legal
Privacy Policy
Last updated: [date]
Draft — to be reviewed by a UAE legal adviser before launch.
This policy explains what personal data we collect when you use this website, buy from us or sign up for drop news, and what we do with it. We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
Who we are
Business Plus Consulting FZE, trading as Single Digit, is the controller of your personal data. That means we decide how and why it is used.
Our registered details are listed under Legal information in our Terms of Sale. You can reach us through our contact form.
What we collect
When you place an order
- Your name, email address, phone number and shipping address.
- What you bought, the amount paid and the order date.
- Payment status from Stripe. Your full card details are handled by Stripe and never reach our servers.
When you tap “Notify me”
- Your email address (required).
- Your WhatsApp number (optional).
- Whether you ticked “Send me drop news by email/WhatsApp”, and the date and time you did. This box is unticked by default.
When you create an account
- Your name and email address.
- Your password, stored only as a one-way scrambled code (a hash). We can’t read it.
- Your WhatsApp number (optional).
- The products you save to your wishlist.
- Whether you ticked “Send me drop news and member offers by email/WhatsApp”, and the date and time you did. This box is unticked by default.
When you contact us
Your name, email address and message when you use our contact form, and whatever you choose to send us on WhatsApp or Instagram, such as your order number.
When you browse
- Aggregated visit statistics from Vercel Analytics. This uses no cookies and does not identify you.
- If, and only if, you accept our cookie banner: data collected by the Meta Pixel, such as pages viewed and actions taken on the site. See our Cookie notice.
Your cart and your cookie choice are saved in your own browser (localStorage). We do not receive them. If you log in, we also set a login cookie so you stay signed in. See our Cookie notice.
Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Taking payment, delivering your order, handling faulty or wrong items, and answering your messages | Needed to perform our contract with you |
| Running your account: logging you in, your wishlist and shared carts | Needed to perform our contract with you |
| Keeping order and tax records | Needed to meet our legal obligations |
| Telling you when a product you asked about drops | Your request when you tap “Notify me” |
| Sending drop news and marketing by email or WhatsApp | Your consent (the opt-in box) |
| Measuring ads with the Meta Pixel | Your consent (the cookie banner) |
| Keeping the site secure and preventing fraud | Our legitimate interest in running a safe shop, and legal obligations |
We do not sell your personal data.
Who we share it with
We share only what each provider needs to do its job:
- Stripe — processes payments and may email your receipt.
- [courier name] — delivers your order. Receives your name, phone number and address.
- Vercel — hosts this website and provides cookieless analytics.
- Upstash — stores our order, stock, sign-up and customer account records in a database, provided through Vercel.
- Meta — only if you accept cookies, for ad measurement via the Meta Pixel.
- Resend — delivers messages from our contact form to our inbox.
- [WhatsApp messaging provider, if used]
We may also share data if the law requires it, or with professional advisers such as our accountant.
International transfers
Some of these providers store or process data outside the UAE, for example in [the EU / the US]. Where this happens, we rely on the safeguards allowed under UAE law, such as the provider’s contractual data protection commitments [confirm with your legal adviser].
How long we keep it
- Order records: [5] years, for accounting and legal reasons.
- “Notify me” sign-ups: until you unsubscribe, or [12 months] after the relevant drop, whichever comes first.
- Marketing consent records: for as long as we keep the sign-up, so we can show you agreed.
- Messages to us: [24 months] after the conversation ends.
- Account details and wishlist: until you delete your account, or [24 months] after your last log-in.
- Analytics: aggregated only, so it does not identify you.
Security
We use reputable providers, encrypted connections (HTTPS), and limit access to personal data to the people who need it. No system is perfectly secure, but we take reasonable steps to protect your data and will act promptly if something goes wrong.
Your rights
Under UAE law, you can ask us to:
- give you a copy of the personal data we hold about you (access);
- correct data that is wrong or incomplete;
- delete your data, where we no longer need to keep it;
- restrict how we use your data, or object to a particular use;
- send your data to you or another provider in a usable format (portability);
- stop using your data for marketing, at any time.
Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
To stop drop news, use our unsubscribe page or reply STOP on WhatsApp. To change your cookie choice, use “Cookie settings” in the footer.
You can delete your account at any time from your account page. Paid order records are kept for the period above.
For any other request, use our contact form. We may ask you to confirm your identity. We will reply within [30] days.
Complaints
If you are unhappy with how we handle your data, please contact us first so we can put it right. You also have the right to complain to the UAE Data Office.
Children
This website is not directed at anyone under [18]. We do not knowingly collect personal data from children. If you think a child has given us their data, contact us and we will delete it.
Changes to this policy
We may update this policy. We will post the new version here with a new “Last updated” date, and tell you directly if the changes are significant.
Contact
Use our contact form, or message us on Instagram (@singledigit.ae). Post: Twin Towers, P.O. Box 4422, Fujairah, United Arab Emirates