This Privacy Policy explains how Beauty Zone collects, uses, stores and protects your personal data when you visit beautyzonecosmetics.ae, place an order, apply for a wholesale salon account or contact us. It is written to comply with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”).
1. Who we are
Beauty Zone is the data controller for the personal data described in this policy — meaning we decide why and how your data is processed.
- Legal entity
- Beauty Zone General Trading
- Address
- Al Uqhwan 2 St, Al Noud, Al Ain, Abu Dhabi, UAE
- Phone / WhatsApp
- +971 50 298 7257
- Website
- beautyzonecosmetics.ae
2. The data we collect and why
We collect the minimum personal data needed to serve you. We never collect more than the following:
a) Retail checkout orders
When you place an order through the website checkout, we collect your name, email address, phone number and delivery address so we can fulfil and deliver your order and contact you about it.
Legal basis: performance of a contract (taking the steps needed to process and deliver your order), under Article 4 of the PDPL.
b) B2B salon account applications
When a salon applies for a wholesale account, we collect the contact person’s details (name, work email, phone, job title), salon details (salon name, business type, address), the trade licence number, VAT TRN, and an uploaded trade licence document used to verify the business before approving wholesale pricing.
Legal basis: your consent (given when you submit the application) and steps taken at your request before entering a contract, under Article 4 of the PDPL. Please note that uploaded licence documents may themselves contain personal data (for example, a licence holder’s name) — we treat those documents as confidential verification material.
c) Communication data
When you contact us via WhatsApp or email, we process the content of your message and your contact details (such as your WhatsApp number or email address) so we can respond and handle your request.
d) Data stored only in your own browser
Your shopping cart, wishlist and language preference are stored in your browser’s local storage on your own device. This data never leaves your device and is never transmitted to us — unless you create a customer account and sign in (see below). See our Cookie & Storage Policy for details.
e) Customer account data
If you create a customer account, we store your name, email address, phone number and password so you can sign in and track your orders. Sign-in and password storage are handled by Supabase Auth — your password is never visible to our staff and never appears in our admin dashboard.
While you are signed in, your cart and wishlist contents are saved to your account so they follow you across devices. Saved carts — including carts where checkout was not completed — may be viewed by our staff to assist you with your order (for example, a WhatsApp reminder about items left in your cart).
Legal basis: performance of a contract and your consent given at registration, under Article 4 of the PDPL.
3. What we do not collect
- No analytics — we do not run website analytics or usage statistics.
- No advertising trackers — no ad networks, pixels or cross-site tracking.
- No profiling — we do not build behavioural profiles or make automated decisions about you.
4. Who processes your data
We use a small number of service providers (processors) to run the website and our operations:
- Supabase — cloud database and file storage where orders, salon applications and uploaded licence documents are stored. Supabase servers may be located outside the UAE. Cross-border transfers are made in line with Articles 22–23 of the PDPL, with safeguards including encryption in transit (HTTPS/TLS) and strict access controls limited to authorised staff.
- WhatsApp (Meta) — only when you choose to contact us via WhatsApp. Your messages and number are then also processed by WhatsApp under its own terms and privacy policy.
- Hostinger — website hosting provider serving the pages you visit.
In addition, when any page loads, Google Fonts and jsDelivr (the CDN that delivers a script library we use) receive your device’s IP address as a technical necessity of delivering fonts and files to your browser. We do not send them any other data.
5. Your rights under the UAE PDPL
Under Articles 13–18 of the PDPL you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your personal data.
- Restriction — ask us to restrict processing in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on our legitimate interests.
Exercising these rights is free of charge. Email info@beautyzonecosmetics.ae with your request and we will respond within a target of 14 days.
6. How long we keep your data
We keep order records and salon account applications for as long as the business relationship lasts, and afterwards for the period required by UAE legal and tax retention obligations (tax records are kept for 5 years). Once data is no longer needed, it is securely deleted.
7. Security & breach notification
We protect personal data with encryption in transit, access controls limited to authorised personnel, and trusted cloud infrastructure. If a personal data breach occurs that could affect your privacy, we will notify the UAE Data Office and, where required, inform you directly, in line with Article 9 of the PDPL.
8. Marketing & sale of data
We never sell your personal data. We will not use your contact details for marketing unless you give us separate, explicit consent (for example by opting in to wholesale offers) — in line with the PDPL and Article 4(5) of the UAE Consumer Protection Law (Federal Law No. 15 of 2020). You can withdraw marketing consent at any time by contacting us.
9. Children’s privacy
Our website and products are directed at adults and professional salons. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. The “Last updated” date at the top shows the current version. Material changes will be highlighted on this page.
11. Complaints & contact
For any privacy question or request, contact us at info@beautyzonecosmetics.ae or +971 50 298 7257 (WhatsApp). You also have the right to lodge a complaint with the UAE Data Office, the federal data protection regulator.