Privacy policy

Privacy Policy

1. Introduction

Welcome to elashGance Cosmetics Trading L.L.C. We are committed to protecting your personal data and your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website elashgance.ae.

2. Data Controller

For the purposes of the UAE Data Protection Law, the data controller is:

  • Company Name: elashGance Cosmetics Trading L.L.C
  • Address: RIGGA BUSINESS CENTRE - 1001, Unit A-29 Deira, Dubai, United Arab Emirates.
  • Contact Email: info@elashgance.ae

3. Data We Collect

We collect information necessary to provide you with our cosmetic products and services:

  • Identity Data: First name, last name.
  • Contact Data: Delivery address, email address, and phone number.
  • Transaction Data: Details about products you have purchased from us.
  • Technical Data: IP address, browser type, and cookie data related to your session on our website.
  • Note on Payment: We do not store credit card details on our servers; payments are processed through secure, PCI-compliant third-party gateways.

4. Purpose of Data Processing

We process your data for the following reasons:

  • To manage and deliver your orders.
  • To provide customer support and handle returns.
  • To send promotional offers and updates (only if you have opted in).
  • To comply with legal and regulatory requirements in the UAE (e.g., VAT and accounting).

5. Legal Basis for Processing

Under the UAE PDPL, we process your data based on:

  • Contractual Necessity: To fulfill the sale and delivery of products.
  • Consent: For marketing communications.
  • Legal Obligation: For tax and commercial record-keeping in Dubai.

6. Data Sharing and Disclosure

We do not sell your personal data. We only share it with trusted third parties essential for our operations:

  • Logistics Providers: Courier services for delivery within the UAE and internationally.
  • Payment Processors: To securely handle your transactions.
  • Regulatory Bodies: If required by UAE law or government authorities.

7. International Transfers

Your data may be processed on servers located outside the UAE (e.g., Shopify, Google Analytics). We ensure these providers maintain a level of protection that meets or exceeds UAE data protection standards.

8. Your Rights

Under the UAE PDPL, you have the right to:

  • Access: Request a copy of the data we hold about you.
  • Correction: Request the correction of inaccurate data.
  • Erasure: Request that we delete your data (the "Right to be Forgotten").
  • Withdraw Consent: Unsubscribe from marketing at any time.

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.