1) Who we are (Controller & contact)

Taqsha (“we”, “us”, “our”) is the controller for personal data processed on taqsha.com and related services. Registered location: Dubai, United Arab Emirates. For any privacy request, contact: care@taqsha.com.

 

2) What personal data we collect

We collect the following categories of personal data:

• Identity & contact details: name, email address, phone number, delivery address.
• Order & payment details: items purchased, order value, delivery instructions and tracking details, limited payment metadata. We do not store full card numbers; payments are processed by our payment partners.
• Device & usage data: IP address, device/browser type, pages viewed, session data, and approximate location derived from your IP.
• Marketing choices: your newsletter/subscription opt-ins and campaign interactions.
• Returns/warranty support (only when needed): proof of purchase and, in limited cases to verify identity or prevent fraud, minimal ID details. We do not retain ID images unless required to resolve a specific case or to meet a legal obligation.

 

3) Why we use your data & our PDPL bases

We process personal data under the UAE Personal Data Protection Law (PDPL) on these grounds:

• Contract: to take and deliver your order, process payments, provide customer support and exchanges/warranty.
• Legal obligations: to meet tax, accounting, consumer-protection and record-keeping duties.
• Consent: to send marketing (email/SMS/WhatsApp) and to set non-essential cookies (analytics/marketing). You can withdraw consent at any time.
• Service security and fraud prevention: to protect the security and integrity of our services and users, and to detect, prevent, and address fraud or abuse. These activities are not used to make decisions based solely on automated processing that produce legal or similarly significant effects.
• Vital interests (rare): to protect someone’s life or safety.
• Publicly available data (limited): where you have made data public yourself, we may use it for the same context and purpose.

 

4) How we use personal data

• Fulfil and deliver orders; provide customer care and exchanges/warranty handling.
• Communicate about your order, delivery, or account.
• Run analytics and improve our products, site and services (non-essential cookies only with your consent).
• Send marketing that you have opted into (you can unsubscribe/withdraw at any time).
• Keep our services secure; monitor and prevent fraud or misuse. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

 

5) Cookies & similar technologies

We use essential cookies to operate the site (for example, to keep your cart and session). We use analytics and marketing cookies only if you opt in via our cookie banner. You can change your choices at any time in “Cookie Settings”. Blocking some cookies may affect certain features.

 

6) Who we share personal data with

We do not sell or rent personal data. We share data only with:

• Service providers acting on our instructions and under contract: payment gateways and fraud‑prevention providers; warehouse/fulfilment partners and couriers; email/SMS/WhatsApp communications platforms; hosting, cloud and analytics providers.
• Public authorities or regulators when required by law or to protect our rights, users, or the security of our services.

 

7) International transfers

Some service providers may process personal data outside the UAE. We transfer personal data only where permitted by the PDPL: to jurisdictions declared adequate by the UAE Data Office, or under contractual safeguards (for example, standard contractual clauses or binding corporate rules) that ensure essentially equivalent protection. If those are not available, we may rely on your explicit consent or another limited exception (such as legal claims or performance of a contract at your request). We require onward recipients to protect the data in a similar way.

 

8) Your PDPL rights & how to use them

Under the PDPL you can request: information/access; correction; deletion; restriction; data portability; and to stop certain processing (including direct marketing). You may also object to decisions based solely on automated processing that produce legal or similarly significant effects—we do not use such decisions.

To exercise your rights, email care@taqsha.com. We may ask you to verify your identity. We aim to respond within 30 days. If you believe your rights have been infringed, you may lodge a complaint with the UAE Data Office.

 

9) Retention: how long we keep personal data

We keep personal data only as long as needed for the purposes in this policy and to meet legal duties. After that, we delete or anonymise it.

• Invoices, orders, payments and delivery records: 7 years after the end of the relevant tax period.
• Customer service records (emails, chats, call notes): 3 years after the case is closed.
• Marketing consent logs and unsubscribe records: duration of subscription plus 2 years.
• Cookie preferences: 6 months, then we ask you to review your choices.
• Warranty/exchange files (including any identity verification collected for a case): up to 2 years after the case is closed.

Deletion methods include secure deletion and, where appropriate, anonymisation (irreversible aggregation) for statistical reporting.

10) Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, and limited retention. If a personal data breach risks your privacy, we will notify the UAE Data Office and, where required, affected users.

 

11) Children

Our site and services are for adults (18+). We do not knowingly collect data from children. If you believe a child has provided personal data, contact us so we can delete it.

12) Mandatory vs optional data

To place an order, you must provide identity and contact details, delivery address, and payment details. Marketing communications and non-essential cookies are optional. If you do not provide the mandatory data, we cannot fulfil your order.

 

13) Sources of personal data

We collect personal data primarily from you. We also receive limited data from payment providers (for example, payment status or fraud signals), couriers (delivery updates), communications platforms (message delivery status), and analytics providers (if you consent to non-essential cookies).

 

14) Changes to this policy

We version this policy and show the “Last updated” date above. For material changes, we will email registered customers and post a notice on the site at least 7 days before the new version takes effect.

 

15) How to contact us

Email: care@taqsha.com