Privacy Policy

Last updated: 29 July 2026

This policy explains what personal data TheArsenal ("we", "us") collects when you use thearsenale.ae, why we collect it, who we share it with and what rights you have over it.

To complete before publishing: replace the placeholders below with your registered company name, trade licence number and registered address, and have this text reviewed by a lawyer for UAE consumer and data-protection law.

1. Who we are

TheArsenal is operated by [REGISTERED COMPANY NAME], trade licence [NUMBER], registered at [ADDRESS, EMIRATE, UAE].

For any privacy question, write to privacy@thearsenale.ae.

2. What we collect

Data	When	Why
E-mail address, name	When you create an account	To identify you and let you sign in
Name, e-mail and profile picture from Google	Only if you choose "Continue with Google"	To create your account without a password
Shipping address and phone number	When you place an order	To deliver the goods and contact you about the delivery
Order history	When you buy	To process the order, handle returns and meet accounting duties
Language and currency preference	When you change them	Stored in your own browser so the site remembers your choice

We never see or store your card details. Payments are handled by our payment provider on their own systems.

3. What we do not do

We do not sell your personal data.
We do not share it for third-party advertising.
We do not use advertising or tracking cookies.

4. Google sign-in

If you sign in with Google, Google sends us your name, e-mail address and profile picture. We ask for nothing else, and we cannot read your Gmail, contacts, files or any other Google service. You can revoke this access at any time from your Google account permissions.

5. Who processes data for us

Provider	Purpose
Supabase	Database, accounts and product image storage
Vercel	Website hosting and delivery
Google	Optional sign-in
Shipping carriers	Delivering your order — they receive only the address and contact needed

These providers may store data outside the UAE. They act on our instructions only.

6. How long we keep it

Account data: until you ask us to delete it. Order records: kept as long as accounting and tax law requires. Preferences stored in your browser: until you clear them.

7. Your rights

Ask for a copy of the data we hold about you.
Correct anything that is wrong.
Ask us to delete your account and personal data.
Object to a particular use of your data.

Write to privacy@thearsenale.ae and we will answer within 30 days. Deleting your account removes your profile and preferences; order records are kept where the law requires it.

8. Security

Traffic is encrypted with HTTPS. Access to the database is restricted per user by row-level security, so one customer can never read another customer's orders or details. Administrative access is limited to named staff accounts.

9. Children

This site is not intended for anyone under 18 and we do not knowingly collect their data.

10. Changes

If we change this policy we will update the date at the top and, for significant changes, notify account holders by e-mail.