Privacy policy

Last Updated: September 2026

Taif Al Emarat Perfumes (“Taif Al Emarat”, “we”, “our”, or “us”) respects customer privacy and processes Personal Data in accordance with applicable privacy and data-protection requirements.

Because our International Store serves customers in multiple jurisdictions, more than one privacy regime may apply.

This includes, where applicable:

·         UAE Federal Decree-Law No. 45 of 2021 concerning the Protection of Personal Data;

·         the EU General Data Protection Regulation (“EU GDPR”);

·         applicable EEA privacy legislation;

·         the UK GDPR and applicable UK data-protection legislation; and

·         mandatory privacy laws applicable in other jurisdictions in which we offer our products.

1. Data Controller

The controller responsible for the International Store is:

2. EU/EEA Representative

Where Article 27 of the EU GDPR requires Taif Al Emarat to appoint an EU/EEA representative, the representative’s details will be displayed here:

3. UK Representative

Where UK GDPR requires Taif Al Emarat to appoint a UK representative, details will be displayed here:

4. Personal Data We Collect

We may collect:

Identity Data

·         name;

·         account details; and

·         customer identifier.

Contact Data

·         email;

·         telephone/mobile number;

·         billing address;

·         delivery address; and

·         country.

Transaction Data

·         purchases;

·         order history;

·         refunds;

·         returns;

·         discounts;

·         delivery method; and

·         payment status.

Payment-Related Data

Our payment providers may process full payment credentials.

Taif Al Emarat may receive limited transaction data such as:

·         payment status;

·         transaction ID;

·         payment method;

·         card type; and

·         masked payment details.

Technical Data

·         IP address;

·         device;

·         browser;

·         operating system;

·         cookie identifiers;

·         Website activity; and

·         similar technical information.

Marketing Data

·         subscriptions;

·         consent;

·         marketing preferences;

·         campaign interactions; and

·         opt-out records.

Customer Service Data

·         messages;

·         complaints;

·         support requests;

·         reviews;

·         return communications; and

·         other correspondence.

5. Why We Process Personal Data

We process Personal Data for purposes including:

Contract / Order Fulfilment

·         checkout;

·         payment;

·         delivery;

·         customs;

·         returns;

·         refunds;

·         account administration; and

·         transactional communications.

Legal Obligations

·         accounting;

·         tax;

·         customs;

·         consumer protection;

·         fraud prevention;

·         regulatory requests; and

·         compliance with applicable laws.

Legitimate Interests Where Permitted

·         security;

·         fraud detection;

·         service improvement;

·         Website operation;

·         business analytics; and

·         establishing or defending legal claims.

Where applicable law requires a balancing assessment, it will be performed.

Consent

Where required, we rely on consent for activities such as:

·         promotional marketing;

·         non-essential cookies;

·         advertising pixels;

·         personalization; and

·         other consent-dependent processing.

6. Marketing

Providing an email address or telephone number during checkout does not automatically mean that the customer agrees to promotional marketing.

Where consent is required, marketing consent must be:

·         freely given;

·         specific;

·         informed;

·         unambiguous; and

·         separate from acceptance of mandatory contractual terms.

Customers may withdraw applicable marketing consent at any time.

7. Cookies & Advertising Technologies

The International Store may use:

Necessary Cookies

These may operate without consent where permitted because they are required for functions such as:

·         cart;

·         checkout;

·         security;

·         login;

·         payment; and

·         fraud prevention.

Analytics / Performance Technologies

These may include tools used to understand Website usage and performance.

Advertising Technologies

These may include technologies used by advertising platforms such as:

·         Google;

·         Meta;

·         TikTok;

·         Snapchat; and

·         other providers actually implemented on the Website.

The final cookie notice must list the technologies actually installed.

8. EU/EEA & UK Cookie Consent

Where applicable EU/EEA or UK law requires consent for non-essential cookies or similar tracking technologies:

·         non-essential trackers must not activate before the required consent is obtained;

·         customers must be able to reject non-essential tracking;

·         rejecting should not be made unnecessarily harder than accepting;

·         consent preferences must be respected; and

·         customers must be able to change or withdraw consent.

9. Who Receives Personal Data

Where necessary, information may be shared with:

·         Taif Al Emarat group companies;

·         Shopify and e-commerce providers;

·         payment processors;

·         banks;

·         couriers;

·         customs brokers;

·         customs authorities;

·         hosting/cloud providers;

·         CRM systems;

·         Customer Support providers;

·         email/SMS/WhatsApp providers;

·         advertising platforms;

·         analytics providers;

·         security providers;

·         professional advisers;

·         regulators;

·         courts; and

·         law-enforcement authorities where legally required.

10. Cross-Border Data Transfers

Personal Data may be processed outside the customer’s country.

Transfers may occur between:

·         the customer’s country;

·         the UAE;

·         Taif Al Emarat group companies;

·         international technology providers;

·         payment providers;

·         logistics providers; and

·         other necessary processors.

Transfers will use the safeguards required by applicable law.

11. UAE International Transfers

Where UAE PDPL applies, transfers outside the UAE will be handled in accordance with applicable UAE cross-border transfer requirements.

This may include transfer to jurisdictions with an adequate protection level or use of another lawful mechanism permitted under UAE law.

12. EU/EEA Transfers

Where EU GDPR applies and Personal Data is transferred outside the EEA to a country not covered by an applicable adequacy decision, Taif Al Emarat will use a lawful transfer mechanism where required, which may include appropriate contractual safeguards.

13. UK Transfers

Where UK GDPR applies, international transfers will be handled using an applicable UK lawful transfer mechanism where required.

14. Data Retention

We retain Personal Data only for as long as necessary for:

·         order fulfilment;

·         customer service;

·         accounting;

·         tax;

·         customs;

·         fraud prevention;

·         legal obligations;

·         disputes; and

·         other legitimate purposes permitted by law.

Retention periods will be determined by the category and purpose of the Personal Data.

When retention is no longer necessary, data will be securely deleted, anonymized, or otherwise appropriately handled.

15. Security

We implement appropriate measures designed to protect Personal Data including:

·         access controls;

·         authentication;

·         encryption where appropriate;

·         system monitoring;

·         restricted employee access;

·         processor agreements; and

·         cybersecurity safeguards.

16. Personal Data Breaches

Data incidents will be assessed according to the privacy laws applicable to the affected processing.

Where legally required, we will notify the relevant:

·         data-protection authority;

·         affected individual; or

·         other authority

within the legally applicable timeframe.

17. EU/EEA Rights

Where EU GDPR applies, eligible individuals may have rights including:

·         access;

·         rectification;

·         erasure;

·         restriction;

·         objection;

·         portability;

·         withdrawal of consent;

·         protection relating to certain automated decisions; and

·         complaint to an applicable supervisory authority.

18. UK Rights

Where UK GDPR applies, eligible individuals may have rights including:

·         access;

·         rectification;

·         erasure;

·         restriction;

·         objection;

·         portability;

·         withdrawal of consent; and

·         rights concerning applicable automated decision-making.

Customers may also have the right to complain to the UK Information Commissioner’s Office where UK law applies.

19. UAE Rights

Where UAE PDPL applies, Data Subjects may exercise applicable rights provided under UAE data-protection law, subject to statutory conditions and exceptions.

20. Other Countries

Where mandatory privacy legislation in another jurisdiction applies to Taif Al Emarat’s processing, applicable rights under that legislation will be respected.

21. Exercising Privacy Rights

We may request reasonable identity verification before processing a request.

22. Automated Processing

Where automated tools are used for:

·         fraud detection;

·         payment verification;

·         security; or

·         personalization,

we will comply with applicable transparency and individual-right requirements.

23. Children’s Data

The International Store is intended for customers legally able to enter the relevant purchase transaction.

Where local law requires parental or guardian authorization for processing Personal Data relating to a child, the applicable requirement will be followed.

24. Changes to This Privacy Policy

Material changes will be reflected by updating this policy.

Where applicable law requires additional notice or renewed consent, we will provide it.

25. Contact

Taif Al Emarat International

WhatsApp – Arabic: +971 50 816 0655
WhatsApp – English: +971 52 882 0010