Privacy Policy

Last updated: 6 February 2026

1) Contact details (Data Controller)

Business name: CROLEN For Online Trading
Based in: Dubai, UAE
Email: crolen3d@gmail.com
WhatsApp/Phone: +971 50 792 7224

For privacy requests (access, correction, deletion, etc.), contacting us via WhatsApp or email is acceptable.

2) What personal data we collect

Depending on how you use the Website, we may collect:

• Identity & contact data: first name, last name, email address, phone number.
• Delivery data: shipping address (street/building, apartment/unit, city/emirate), delivery notes (optional).
• Account data (if you create an account): name, email, display name, password (stored in encrypted/hashed form), login/session information.
• Order & transaction data: items purchased, quantities, prices, discounts, order status, invoice/pro-forma details, payment method chosen.
• Communications: messages you send us via email, WhatsApp, or social media; any related attachments.
• Reviews/content you submit: review rating, review text, and the name shown publicly with the review (your email is not displayed publicly).
• Technical & usage data: IP address, device/browser information, pages viewed, approximate location (derived from IP), and cookies or similar identifiers.

3) How we collect your data

• Directly from you when you place an order, create an account, submit a review, or contact us.
• Automatically via cookies and similar technologies when you browse the Website.
• From service providers that help us process payments, host the Website, or provide analytics (see Section 6).

4) Why we use your personal data

We use personal data for the following purposes:

• Order processing & fulfilment: confirm orders, prepare shipments, deliver orders within the UAE, and provide updates.
• Payments & refunds: process payments (card/Apple Pay/Google Pay via Stripe, bank transfer, or cash on delivery) and handle refunds/chargebacks where applicable.
• Account management: create and manage your account if you register.
• Customer support: respond to inquiries and resolve issues (including via WhatsApp or email).
• Website operations & security: prevent fraud, detect abuse, troubleshoot, and keep the Website secure.
• Analytics & improvement: understand how visitors use the Website (e.g., via Google Analytics) to improve performance and user experience.
• Legal & compliance: maintain records and comply with applicable laws and legitimate requests from authorities.

5) Legal basis for processing

We process personal data when one or more of the following apply:

• Contract necessity: to perform our contract with you (e.g., processing and delivering your order).
• Legitimate interests: to run and protect our business (e.g., fraud prevention, service improvement), where those interests are not overridden by your rights.
• Consent: where required (for example, certain optional cookies/analytics). You can withdraw consent at any time where processing is based on consent.
• Legal obligation: where we must retain or disclose information to comply with law.

6) Who we share personal data with

We do not sell your personal data. We may share it with:

6.1 Delivery and logistics partners

To deliver your order, we may share name, phone number, delivery address, and order value (for cash-on-delivery handling, if applicable) with delivery partners.

6.2 Payment service providers

If you pay by card/Apple Pay/Google Pay, payments are processed via Stripe (through a WooCommerce Stripe integration). We typically receive confirmation and non-sensitive payment details (e.g., payment status, last 4 digits, payment method type), while sensitive card details can be collected and transmitted directly to Stripe using low-risk integrations.

6.3 Website and infrastructure providers

• Hosting: Hostinger (website hosting and related infrastructure such as CDN, caching, and SSL).
• Website platform/plugins: WordPress, WooCommerce, and related plugins (e.g., invoices/packing slips, security/performance tools).

6.4 Analytics & performance tools

• Google Analytics (website usage measurement)
• Google Search Console (search performance and indexing insights)
• PageSpeed Insights (performance diagnostics)

We do not use Meta/Facebook Pixel, TikTok Pixel, Snapchat Pixel, or Google Ads conversion tracking at this time.

6.5 Communications platforms

If you contact us via WhatsApp or social media (Instagram, TikTok, Facebook, YouTube), your messages and any profile information shared with us are also processed by those platforms under their own policies.

7) International data transfers

Some of our service providers (for example, payment processors, analytics providers, or hosting/CDN services) may process or store data outside the UAE. Where cross-border transfers occur, we take steps intended to ensure appropriate safeguards and lawful mechanisms consistent with applicable UAE requirements.

8) Cookies and similar technologies

We use cookies (small files stored on your device) and similar technologies to operate the Website and understand usage. Cookies may include:

• Strictly necessary cookies: required for core functions (e.g., cart/session, login).
• Preferences cookies: remember settings (e.g., “remember me”, or saving review form details if you choose).
• Analytics cookies: help us understand how visitors use the Website (e.g., Google Analytics).

9) Data retention

We keep personal data only for as long as necessary for the purposes described in this policy, including: fulfilling orders, maintaining business records, resolving disputes, and complying with legal obligations. Retention periods can vary depending on the data type and purpose.

10) Your rights (privacy requests)

You may have rights under applicable UAE data protection requirements, including the ability to request information about processing, correction/erasure, restriction, and objection in certain situations, as well as to submit complaints to the competent authority.

How to submit a request: Contact us via crolen3d@gmail.com or WhatsApp +971 50 792 7224 with your request and enough details to verify your identity.

We aim to respond within 2 business days to acknowledge your request, and we will complete it as soon as reasonably possible, subject to verification and any legal requirements.

11) Security measures

We use reasonable administrative, technical, and organizational safeguards designed to protect personal data, such as:

• HTTPS/SSL encryption for data transmitted to/from the Website
• Access controls for administrative systems
• Keeping WordPress/plugins updated and using security/performance configurations where available
• Limiting access to customer data to what is necessary for operations

No method of transmission or storage is 100% secure. Please protect your account credentials and notify us if you suspect unauthorized access.

12) Children

Our Website is intended for users aged 18+. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will take appropriate steps.

13) Marketing messages

At this time, we generally send transactional messages (order confirmations, delivery updates, support replies). We do not currently run email newsletter marketing through the Website.

14) Changes to this Privacy Policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top. Your continued use of the Website after changes means you accept the updated policy.

Helpful links:  Terms & Conditions • Privacy Policy • Returns & Refunds Policy • Shipping Policy

UAE PDPL reference (official text):  Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law)