1. Introduction

Nappa Living ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you use nappaliving.ae (the "Website"), how we use and protect it, who we share it with, and the rights you have.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its Executive Regulation. By using the Website or providing your personal data, you acknowledge the practices described here. This policy should be read together with our Terms & Conditions.

Nappa Living is a business licensed in Dubai, United Arab Emirates (trade licence no. 1633654), and acts as the data controller of the personal data described below.

2. Personal Data We Collect

Information you provide to us:

• Identity and contact details — name, email address, phone number, and delivery and billing address.
• Profile information you choose to share, including gender and age or date of birth.
• Account credentials, if you create an account.
• Order history and the contents of your communications with us.

Payment information:

• Payments are processed by our third-party payment gateway. We do not collect or store your full card details on our systems; the gateway handles that securely.

Information collected automatically:

• Device and connection data such as IP address, browser type, and pages viewed, collected through cookies and similar technologies to help the Website function and to understand how it is used.

You may browse and purchase as a guest without creating an account, but we will still need the information necessary to process and deliver your Order.

3. How We Use Your Personal Data

We use your personal data to:

• Process your Orders, take payment, issue receipts and tax invoices, and arrange delivery.
• Create and manage your account, where you have one.
• Provide customer service and handle returns, exchanges, and warranty claims.
• Send you marketing communications about our products and offers — only where you have given your consent (see Section 5).
• Operate, secure, and improve the Website, including analytics.
• Comply with our legal obligations, including tax, accounting, and consumer-protection requirements.

4. Legal Basis for Processing

Under the PDPL, we rely on the following bases:

• Your consent — for marketing communications and any optional cookies.
• Performance of a contract — to fulfil an Order you have placed and manage your account.
• Compliance with a legal obligation — for example, retaining invoices for tax purposes.
• Our legitimate business interests — such as securing the Website and preventing fraud, where these do not override your rights.

5. Marketing Communications

We will only send you marketing messages (by email, SMS, or other channels) where you have opted in. You can withdraw your consent and unsubscribe at any time — by using the unsubscribe link in any message, adjusting your account preferences, or emailing us at support@nappaliving.ae . Withdrawing consent does not affect Orders already in progress or messages we must send you about your Order (such as confirmations and delivery updates).

6. Cookies

The Website uses cookies and similar technologies to operate correctly, remember your preferences, and analyse traffic. You can control non-essential cookies through the cookie banner or your browser settings. 

7. How We Share Your Personal Data

We share your personal data only as needed to run our business, and only with parties bound to protect it:

• Payment gateway — to process your payment.
• Logistics and delivery partners — to deliver your Order (they receive your name, address, and contact details for delivery only).
• Our e-commerce platform and hosting provider (Shopify) — which powers and stores the Website and Order data.
• Communication and marketing service providers — to send emails or messages on our behalf, where you have consented.
• Professional advisers and authorities — where required by law, regulation, or a valid request from a UAE authority.

We do not sell your personal data to third parties.

8. International Data Transfers

Some of our service providers — including our e-commerce platform, payment gateway, and email tools — may process or store your data on servers outside the UAE. Where we transfer personal data abroad, we take steps required by the PDPL to ensure it remains protected to an equivalent standard, including appropriate contractual safeguards.

9. Data Retention

We keep your personal data only for as long as necessary for the purposes described above — for example, to fulfil your Order, provide warranty and after-sales support, and meet legal record-keeping obligations (such as retaining tax invoices for the period required by UAE law). When it is no longer needed, we securely delete or anonymise it.

10. Data Security

We apply appropriate technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No online service can be guaranteed to be completely secure, but we work to protect your data and to notify you and the relevant authority of any personal data breach as required by the PDPL.

11. Your Rights

Under the PDPL, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Restrict or object to certain processing.
• Request portability of the data you provided to us.
• Withdraw consent at any time, including for marketing.
• Object to automated processing that produces a legal or similarly significant effect.

To exercise any of these rights, contact us at [email]. We will respond within the period required by law. If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.

12. Children's Privacy

The Website is intended for customers aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us and we will delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available on the Website, and the "last updated" date shows when it was last revised. Material changes will be communicated where appropriate.

14. Contact Us

For any questions about this Privacy Policy or your personal data, or to exercise your rights, contact:

Nappa Living Email: support@nappaliving.ae Phone: +971525030386 Trade Licence No.: 1633654