العربية

Last updated: 23 October 2026

This policy explains which personal data we process when you visit flexxera.ae or order from us, why we do it, and what rights you have.

Controller

DANBIA LLC, Shams Business Center, Sharjah Media City (Shams) Free Zone, Al Messaned, Sharjah, United Arab Emirates, represented by its manager Bianca Nistor. Email: hello@flexxera.ae.

We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), Federal Decree-Law No. 26 of 2025 on Child Digital Safety and the other laws of the United Arab Emirates. We process data:

  • to conclude and perform the contract with you, or at your request before a contract, for example to show you the website, answer your questions and deliver your order;
  • to meet legal obligations, for example tax records and the protection of your data;
  • with your consent, where we ask for it. You can withdraw your consent at any time with effect for the future, for example by email.

We do not sell your data and do not create advertising profiles of children.

Hosting and server logs

Our shop runs on WordPress and WooCommerce on servers of our hosting provider Tasjeel in Dubai, United Arab Emirates. When you open a page, the server processes technically necessary data such as IP address, date and time, the page requested, browser and operating system (server log files). We need this to show you the website and to protect it and your data against faults and attacks. Server log files are deleted after 14 days at the latest, unless we need an entry to investigate an attack.

To protect the login against attacks, the plugin Loginizer stores the IP address and time of failed login attempts and blocks an address for a limited time after too many attempts. These entries are deleted automatically.

Contact by email, WhatsApp or form

If you write to us by email, WhatsApp or through the contact form, we process your name, contact details and message to answer you. WhatsApp is a service of WhatsApp Ireland Limited (Meta); its privacy policy applies when you use it. We delete inquiries six months after they are closed, unless they belong to an order or we must keep them by law.

Emails from the shop, such as order confirmations, are sent from our own mailbox.

Orders

For your order we process your name, billing and delivery address, email address, mobile number (for delivery), the products ordered, your confirmation of age or parental permission and the payment status. Without these details we cannot conclude or perform the contract. If you create a customer account, we store your details until you delete the account; you can ask us to delete it at any time.

Delivery by courier

For delivery we pass your name, delivery address and mobile number to the courier service in the United Arab Emirates that delivers your parcel. The courier uses these details only for the delivery.

Payment via Stripe

Payments are processed by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland. Stripe receives the data needed for the payment, such as name, email address, billing address, amount and card details. This also applies to Apple Pay, Google Pay and Link, which run via Stripe. Stripe uses cookies at checkout to prevent fraud. We do not store card details in our shop. Stripe may also process data in the USA and other countries. More information is in Stripe’s privacy policy at stripe.com/privacy.

Invoices and records

We create tax invoices with the plugin Germanized in our shop. We keep order and invoice data for as long as UAE tax and commercial law requires, currently seven years after the end of the tax period, and then delete it.

On your first visit, a banner asks whether we may set optional cookies. We store your choice in a cookie (1 year) so that we do not ask again on every visit. You can change or withdraw your choice at any time with the cookie icon at the bottom of the page. Optional services load only after your consent; we list them below as soon as we use them.

Cookies

We set technically necessary cookies without consent:

  • WooCommerce (for example “woocommerce_cart_hash”, “woocommerce_items_in_cart”, “wp_woocommerce_session_…”): cart, checkout and customer account; deleted at the end of the session or after 48 hours at the latest, login cookies at the latest after 14 days.
  • Stripe (for example “__stripe_mid”, “__stripe_sid”): fraud prevention at checkout; up to 1 year.
  • Cookie banner: stores your choice; 1 year.

You can delete cookies at any time in your browser. Without the necessary cookies, the cart and checkout will not work.

TikTok

Our shop links to our profile on TikTok. When you follow the link or watch embedded videos, TikTok (TikTok Technology Limited, Ireland, and its affiliates) processes data under its own privacy policy. Embedded videos load only after your consent in the cookie banner.

Transfers outside the United Arab Emirates

Our shop and its data are hosted in the United Arab Emirates. Some service providers are located abroad: Stripe in Ireland (with processing also in the USA) and, only when you use them, WhatsApp and TikTok. We transfer only the data these providers need for their task, and only where the PDPL permits it: because the transfer is necessary to perform the contract with you, because you have consented, and on the basis of contracts with the providers that oblige them to protect your data.

Children and teenagers

Our products are popular with teenagers. Customers under 18 may only order with the permission of their parent or guardian, which they confirm at checkout. We do not knowingly collect personal data of children under 13. If you are under 13, please ask your parent or guardian to order for you. If we learn that we have received data of a child under 13 without the consent of a parent or guardian, we delete it.

We do not use the data of anyone under 18 for targeted advertising or profiling. A parent or guardian can contact us at any time to see, correct or delete the data of their child.

Security

We protect your data with technical and organizational measures, such as encrypted connections (HTTPS), restricted access and regular updates. If there is a data breach that puts your rights at risk, we inform you and the competent authority as required by law.

Your rights

Under the PDPL you have the right to:

  • receive information about the data we hold about you, and a copy of it;
  • have incorrect data corrected and incomplete data completed;
  • have your data deleted, unless we must keep it by law;
  • have the processing restricted;
  • object to processing and have it stopped where the law allows;
  • receive your data in a structured, machine-readable format and have it transferred;
  • withdraw your consent at any time with effect for the future.

To exercise your rights, write to hello@flexxera.ae. We may ask you to confirm your identity, for example from the email address used for the order. We answer within 30 days.

If you believe that we are not handling your data correctly, please contact us first. You also have the right to lodge a complaint with the UAE Data Office.

Changes to this policy

We update this policy when our shop or the law changes. The date at the top shows the current version.

Language versions

This privacy policy is available in English and Arabic. If the versions differ, the Arabic version prevails.