Privacy Policy

Introduction

At Velour Noir, protecting your personal data is a priority. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Site or purchase our products. We treat all data in compliance with UAE’s Personal Data Protection Law (PDPL) and relevant UAE regulations.

Data Controller

Velour Noir (or [Your Business Legal Name]) is the data controller responsible for your personal data. You can contact us at [email address] or [physical address] for privacy matters.

Personal Data We Collect

We may collect the following types of personal data:

Identity & Contact Data: name, email address, phone number, billing & shipping address
Payment Data: credit/debit card details, payment gateway identifiers (note: payment processors may handle sensitive card data)
Usage Data: browsing behavior, pages visited, referral source, IP address, device identifiers
Order Data: order history, preferences, returns, reviews
Marketing & Communication Data: your preferences, newsletter opt-ins, communications history
Other: any information you voluntarily provide (e.g. survey responses, feedback)

How We Use Your Personal Data

We use your data for the following purposes:

Processing and fulfilling orders, returns, and refunds
Communicating with you about your order, shipping, customer service
Improving our Site, user experience, and product offerings
Security, fraud prevention, and compliance with legal obligations
Marketing, newsletters, promotions (only with your consent)
Analytics, personalization, recommendations

Legal Basis for Processing

Under the PDPL, we process your data based on:

Consent: where we have your explicit permission (e.g. marketing emails)
Contractual necessity: to fulfill your orders, process payments, deliver goods
Legitimate interests: e.g. improving our services, detecting fraud, improving marketing
Legal compliance: where required by applicable law

Sharing & Disclosure of Data

We may share personal data with:

Service providers / third parties: shipping couriers, payment gateways, logistics partners, IT providers, analytics providers
Legal / regulatory authorities: when required by law, fraud investigations, or to protect rights
Business successors: in case of merger, sale, reorganization (with appropriate safeguards)

We require third parties to protect and process data in accordance with applicable data protection laws.

Cross-Border Data Transfers

If we transfer data outside UAE, we will ensure adequate safeguards (e.g. standard contractual clauses, encryption) to protect your rights.

Data Retention

We retain your data as long as necessary for the purposes it was collected (e.g. order processing, legal obligations) and in accordance with UAE laws. After that, we will securely delete or anonymize your data.

Your Rights

Under PDPL and applicable laws, you have the right to:

Access your personal data
Rectify / correct inaccurate or incomplete data
Delete or erase data (subject to legal obligations)
Object to or restrict processing
Withdraw consent (for marketing or non-essential processing)
Request portability (to transmit data to another controller)
To exercise your rights, contact us at [email]. We may ask you to verify your identity before processing a request.

Cookies & Tracking

We use cookies, pixels, web beacons, and similar technologies to collect usage data, remember preferences, and deliver personalized content or ads. You can control cookie settings via your browser or our cookie banner.

Security

We implement appropriate technical and organizational security measures (e.g. encryption, access controls, firewalls) to protect your data against unauthorized access, alteration, disclosure, or destruction.

Data Breach Notification

In the event of a data breach that may risk rights or freedoms of individuals, we will notify the relevant UAE Data Authority and affected individuals as required under PDPL.

Changes to This Policy

We may update this Privacy Policy periodically. The revised version will be posted on the Site with an updated “Last updated” date. Your continued use of the Site after changes means you accept the new policy.