Privacy policy
Privacy Policy
ORÉYA · Oreya FZE
This policy explains what personal information ORÉYA collects when you visit www.oreya.ae or buy from us, why we collect it, who we share it with, and what control you have over it. We have written it in plain language on purpose.
ORÉYA is a trading name of Oreya FZE, Al Shmookh Business Center, One UAQ, UAQ Free Trade Zone, Umm Al Quwain, United Arab Emirates, Licence No. 11053. Oreya FZE is the data controller responsible for your information.
1. What we collect
Information you give us
- Name, email address, phone number
- Delivery address and billing address
- Order details, including the pieces you bought and any gift message
- Account login details if you create an account
- Messages you send us by email, WhatsApp or social media, including photographs you send with a return or fault claim
- Bank account details, but only if you ask for a refund on a cash on delivery order
- Marketing preferences, including whether you have subscribed to our emails
Information collected automatically when you browse
- IP address, approximate location based on that address, and the country you are browsing from
- Device type, browser, operating system and screen size
- Pages you viewed, products you looked at, what you added to your cart, and how you arrived at our site
- Cookies and similar technologies; see section 4
Information we receive from others
- Payment confirmation and fraud signals from our payment providers; we never see or store your full card number
- Approval status from Tabby or Tamara if you choose to pay in instalments
- Delivery status from our courier partners
- Aggregated advertising and audience data from Meta and other advertising platforms
What we do not collect: we do not ask for and do not want your Emirates ID number, passport details, religious or ethnic background, health information, or any other sensitive personal data. Please do not send these to us.
2. Why we use your information
| What we use it for | Our basis for doing so |
|---|---|
| Taking, packing, shipping and tracking your order | Necessary to perform our contract with you |
| Taking payment and preventing fraud | Contract, and our legitimate interest in protecting the business |
| Handling returns, exchanges and fault claims | Contract and legal obligation |
| Answering your messages | Contract, or our legitimate interest in helping you |
| Sending marketing emails and messages | Your consent, which you can withdraw at any time |
| Advertising, audience building and measuring our ads | Your consent given through our cookie banner |
| Understanding how the site is used so we can improve it | Your consent, or our legitimate interest where the data is aggregated |
| Keeping accounting, tax and VAT records | Legal obligation under UAE law |
We do not sell your personal information to anyone, and we do not make decisions about you by automated means that have a legal or similarly significant effect.
3. Who we share it with
We share only what each provider needs to do its job, and only with providers who are contractually required to protect your information.
- Shopify, which hosts our store and processes orders on our behalf
- Payment providers, being [INSERT GATEWAY NAME] for card payments, and Tabby and Tamara if you pay in instalments; these companies are separate controllers of the data you give them and their own privacy policies apply
- Courier and delivery partners, who receive your name, address and phone number in order to deliver or collect a parcel
- Meta (Facebook and Instagram) and other advertising and analytics platforms, where you have accepted marketing cookies
- Our email and messaging tools, used to send order updates and, if you have subscribed, marketing
- Our accounting system, which holds invoice and payment records
- Professional advisers and authorities, where we are required by UAE law to disclose information, or where we need to establish or defend a legal claim
If ORÉYA is ever sold or merged, customer information may transfer to the buyer, who would remain bound by this policy until you are told otherwise.
4. Cookies and tracking
Cookies are small files stored on your device. We use four kinds:
- Essential. These make the site work, keep you logged in and remember your cart. They cannot be switched off.
- Performance and analytics. These tell us which pages are visited and where people drop off, so we can fix what is not working.
- Functional. These remember choices such as your language or currency.
- Marketing. These let us show you relevant ads on Meta and elsewhere, and let us measure whether an ad led to a sale.
When you first visit, our cookie banner lets you accept or reject everything except the essential ones. You can change your mind at any time through the cookie settings link in our footer, or by clearing cookies in your browser. Rejecting non-essential cookies will not stop you shopping with us.
5. Marketing
We only send marketing emails or messages if you have opted in. Every marketing email carries an unsubscribe link, you can reply STOP to a marketing message, or you can email info@oreya.ae and we will remove you.
Order confirmations, shipping updates and return correspondence are service messages, not marketing, so you will keep receiving those while an order is open even if you have unsubscribed.
6. Where your information is stored
Shopify and several of our other providers store data on servers outside the United Arab Emirates. Where information leaves the UAE, we rely on providers who commit contractually to protecting it to a standard consistent with UAE law, and we transfer only what is necessary. By placing an order you agree to this transfer taking place.
7. How long we keep it
| Type of information | How long |
|---|---|
| Order, invoice and payment records | 7 years, as required by UAE tax law |
| Customer account details | While your account is open, and 2 years after you close it |
| Customer service messages | 2 years from your last contact with us |
| Marketing subscriptions | Until you unsubscribe, plus a minimal record so we do not contact you again by mistake |
| Website analytics and advertising data | As set in each platform, and no longer than the retention period that platform allows us to choose |
8. Your rights
Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the right to:
- Ask what personal information we hold about you and receive a copy
- Have inaccurate information corrected and incomplete information completed
- Ask us to delete your information where we no longer need it
- Ask us to restrict or stop processing in certain circumstances
- Object to processing that relies on our legitimate interests, and object to direct marketing at any time
- Receive your information in a portable format, or have it sent to another provider
- Withdraw consent you previously gave, without affecting anything done before you withdrew it
- Complain to the UAE Data Office if you believe your rights have been breached
To exercise any of these, email info@oreya.ae with the subject line "Privacy request". We will respond within 30 days. We may ask you to confirm your identity first, so that we do not release your information to the wrong person. There is no charge.
Some information we cannot delete on request, because UAE tax and accounting law requires us to keep transaction records. Where that applies we will tell you what we are keeping and why.
9. Security
Our store runs over an encrypted connection, card payments are handled entirely by our payment providers under their own security certification, and access to customer information inside ORÉYA is limited to the people who need it to do their work. No system is perfect; if a breach ever occurs that puts your information at risk, we will notify you and the UAE Data Office as the law requires.
10. Children
Our store is intended for adults. We do not knowingly collect information from anyone under 18. If you believe a child has given us personal information, email info@oreya.ae and we will delete it.
11. Other websites
Our site and our social media accounts may link to other websites. We are not responsible for how those sites handle your information, so please read their privacy policies.
12. Changes to this policy
We will update this policy when our practices or the law change. The effective date at the top always tells you which version is current. If a change materially affects your rights we will let subscribers know by email.
13. Contact us
Email: cs@oreya.ae WhatsApp: [+971 58 646 4608] Hours: Monday to Saturday, 8 am to 5 pm Gulf Standard Time
Oreya FZE, Al Shmookh Business Center, One UAQ, UAQ Free Trade Zone, Umm Al Quwain, United Arab Emirates. Licence No. 11053.