Gift Village ("Gift Village," "we," "us," or "our") operates an e-commerce platform consisting of a customer website, customer mobile application, delivery agent application, and related services (collectively, the "Platform"), serving customers in the United Arab Emirates (UAE). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Platform, in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and applicable free-zone data protection regulations where relevant.
By registering for, browsing, or placing an order through the Platform, you agree to the collection and use of your information as described in this Policy.
How we collect and protect your personal data
Payment card details are handled by PCI DSS-compliant providers
Access, correct, delete, or request your personal data
Essential data is processed even when ordering without an account
The categories of personal data we collect directly, automatically, and from partners.
The purposes for which we process your personal data across the Platform.
We use the personal data we collect to operate, secure, and improve the Platform, including to:
The legal grounds under UAE PDPL that permit us to process your data.
To fulfil orders and provide the services you request.
Where you have given permission, such as for marketing.
To operate, secure, and improve the Platform.
To comply with applicable laws and regulations.
The categories of recipients we share data with and why.
| Recipient | Purpose | Data Shared |
|---|---|---|
| Odoo ERP | Inventory, order, and delivery management | Order details, customer name, address, contact info |
| Network International / Stripe | Payment processing | Payment method, transaction amount; card data handled directly by PCI DSS Level 1 gateway |
| Google Maps | Address validation, delivery routing, live tracking | Delivery address, approximate location |
| Firebase (FCM) | Push notifications | Device token, order status topics |
| Twilio (SMS Gateway) | OTP verification, order notifications | Phone number, message content |
| Delivery personnel | Order fulfillment | Name, delivery address, phone number, order contents |
| Regulators / Law enforcement | Legal compliance | As required by UAE law |
All third-party processors are contractually required to protect your data and use it only for the purposes for which it was shared.
How long we keep your personal data and why.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for:
Account data is retained while your account remains active. Account deletion is subject to applicable legal retention requirements.
The technical and organizational measures we use to protect your data.
No system is completely secure, and we cannot guarantee absolute security, but we continuously work to protect your data.
The rights you can exercise over your personal data under UAE PDPL.
We may require identity verification before acting on a request. To exercise any of these rights, see the section.
How we use cookies and similar technologies on the Platform.
We use cookies and similar technologies for purposes such as:
You can control cookies through your browser settings. Disabling cookies may affect certain Platform functionality.
The Platform's policy on data from minors.
The Platform is not directed at children under the age of 18, and Gift Village does not knowingly collect personal data from minors.
If you believe a minor's personal data has been provided to us, please contact us so we can take appropriate action.
How and where your data may be processed outside the UAE.
Our infrastructure is hosted on AWS, and our primary operations are based in the United Arab Emirates. Personal data may be processed outside the UAE in connection with hosting, backup, Firebase, Twilio, and payment gateway services.
Where data is transferred internationally, we apply appropriate safeguards consistent with UAE PDPL requirements.
What data we process when you order without creating an account.
If you use the Platform as a guest without creating an account, we still process the personal data necessary to complete and deliver your order, including name, address, phone number, and payment details, consistent with this Privacy Policy.
How to reach us with privacy questions or requests.
How and when we update this Privacy Policy.
Our support team is available to help with data access requests, corrections, deletions, and any other privacy questions.
This document is a template based on the functional scope described in the Gift Village Software Requirement Specification (SRS) and is intended as a starting point. It should be reviewed by a UAE-qualified legal counsel before publication, to ensure full compliance with the UAE PDPL, any applicable free-zone regulations (e.g., DIFC, ADGM, if relevant to your entity), and payment-industry (PCI DSS) requirements.
