Privacy policy

Talesa FZE ("Talesa," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit talesa.ae or place an order with us.

This policy is issued in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable data protection regulations.

Information We Collect

We collect the following categories of personal information:

Identity and contact data: Name, email address, phone number, and delivery address.
Order data: Products purchased, order history, and recipient details for gift deliveries.
Payment data: Payment is processed by Stripe. We do not store full credit or debit card numbers on our servers.
Technical data: IP address, browser type, device information, and pages visited, collected via cookies and similar technologies.
Marketing data: Preferences for receiving communications from us, where you have opted in.

How We Use Your Information

We use your personal information to:

Process and fulfil your orders, including delivery and customer support.
Communicate with you about your order, account, or enquiries.
Send marketing communications, where you have opted in.
Improve our website, products, and customer experience.
Comply with legal and regulatory obligations in the United Arab Emirates.
Prevent fraud and protect the security of our Site.

Legal Basis for Processing

We process your personal information on the following legal grounds:

Performance of a contract: To fulfil orders you have placed.
Consent: For marketing communications and non-essential cookies.
Legal obligation: To comply with UAE tax, consumer protection, and data protection laws.
Legitimate interest: To operate, secure, and improve our business.

Sharing Your Information

We share your personal information only with trusted third parties who help us deliver our services:

Shopify: Our e-commerce platform, which hosts the Site and processes order data.
Stripe: Our payment processor.
Courier and delivery partners: To deliver your order to the specified address.
Email and marketing service providers: To send order confirmations and, where you have consented, marketing communications.
Analytics providers: To understand how visitors use our Site (e.g. Google Analytics, Meta Pixel where active).
Government or regulatory authorities: Where required by applicable UAE law.

We do not sell your personal information to third parties.

International Data Transfers

Some of our service providers (such as Shopify and Stripe) are located outside the United Arab Emirates. Where personal data is transferred outside the UAE, we ensure that appropriate safeguards are in place in accordance with UAE Federal Decree-Law No. 45 of 2021.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, accounting, and reporting requirements. Order records are typically retained for seven years in line with UAE commercial law.

Your Rights

Under UAE data protection law, you have the right to:

Access the personal information we hold about you.
Request correction of inaccurate or incomplete information.
Request deletion of your personal information, subject to legal retention obligations.
Object to or restrict certain types of processing.
Withdraw consent at any time, where processing is based on consent.
Lodge a complaint with the UAE Data Office if you believe your rights have been infringed.

To exercise any of these rights, please contact us at info@talesa.ae.

Cookies

Our Site uses cookies to ensure essential functionality, remember your preferences, analyse traffic, and where you consent, deliver personalised marketing. You can manage cookie preferences through your browser settings or via the cookie banner on the Site. Disabling essential cookies may affect the functionality of the Site.

Marketing Communications

If you have subscribed to our newsletter or marketing communications, you may unsubscribe at any time by clicking the unsubscribe link in any email we send or by contacting us at info@talesa.ae.

Security

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have collected information from a minor, please contact us so we can promptly delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on this Site, with the effective date noted below.