Privacy Policy
This Privacy Policy explains what personal information TereaHouse collects, why we collect it and how you can exercise your privacy rights.
- Introduction
- Information We Collect
- Personal Information
- Account Information
- Order Information
- Payment Information
- Technical Information
- How We Use Your Information
- How We Protect Your Information
- Data Sharing
- Third-Party Services
- Cookies and Tracking Technologies
- Data Retention
- Your Privacy Rights
- Contact Information
Introduction
[INSERT REGISTERED BUSINESS NAME] (“TereaHouse”, “we”, “us”) respects your privacy. This policy explains how we handle personal data when you use tereahouse.ae, place an order or contact us. We aim to process personal data in line with the principles of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, including lawfulness, fairness, transparency, purpose limitation and data minimisation.
Legal review required: Confirm whether TereaHouse falls under the UAE federal data protection law or a free zone data protection regime (for example DIFC or ADGM), and update the references in this policy accordingly.
Information We Collect
We collect personal information that you give us directly, information created when you place an order, and limited technical information when you use the Website. The categories are described below.
Personal Information
- Your name.
- Your email address and phone number.
- Your delivery and billing address.
- Messages you send us through our contact form, WhatsApp, email or phone.
- Age or identity information, where needed to confirm you can legally buy age-restricted products [CONFIRM WHAT AGE-VERIFICATION DATA IS COLLECTED, IF ANY].
Account Information
If you create an account, we store your login details, contact details, saved addresses and order history. Passwords are handled by our website platform, and we do not have access to your password in readable form.
Order Information
When you place an order, we keep details of the products ordered, prices, delivery details, order status, and any communication about the order.
Payment Information
Payments are processed by [INSERT PAYMENT PROVIDER(S), IF ANY]. [CONFIRM WHETHER ANY CARD DETAILS ARE STORED BY TEREAHOUSE. IF CARD PAYMENTS ARE HANDLED BY A PAYMENT PROVIDER, STATE THAT CARD DETAILS ARE ENTERED WITH AND PROCESSED BY THAT PROVIDER]. We may receive confirmation of whether a payment succeeded and limited transaction details.
Technical Information
When you visit the Website, we and our service providers may automatically collect technical information such as your IP address, browser type, device information, pages visited and the date and time of your visit. Some of this information is collected through cookies. See our Cookie Policy.
How We Use Your Information
We use personal information to:
- Process, deliver and support your orders.
- Create and manage your account.
- Respond to enquiries, complaints and support requests.
- Confirm that you are legally able to buy age-restricted products.
- Prevent fraud and keep the Website secure.
- Comply with legal, tax and regulatory obligations.
- Send marketing messages, only where you have agreed to receive them [CONFIRM WHETHER MARKETING MESSAGES ARE SENT].
We rely on your consent, the performance of our contract with you, our legal obligations, and other lawful grounds permitted by applicable law.
Legal review required: Confirm the lawful basis for each processing activity, and confirm that any marketing of tobacco or nicotine-related products complies with UAE tobacco advertising restrictions.
How We Protect Your Information
We take reasonable technical and organisational steps to protect personal information against unauthorised access, loss or misuse. These include [DESCRIBE THE SECURITY MEASURES ACTUALLY IN PLACE, E.G. HTTPS, ACCESS CONTROLS, HOSTING PROVIDER SAFEGUARDS]. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Data Sharing
We do not sell your personal information. We share it only where necessary, for example with:
- Delivery and courier partners [INSERT DELIVERY PARTNERS], to deliver your orders.
- Payment providers [INSERT PAYMENT PROVIDERS], to process payments.
- Website hosting and technical service providers [INSERT HOSTING PROVIDER].
- Government authorities, regulators or law enforcement where required by law.
Some service providers may store or process data outside the UAE [CONFIRM COUNTRIES WHERE DATA IS STORED OR PROCESSED]. Where this happens, we take steps intended to ensure an appropriate level of protection as required by applicable law.
Legal review required: Cross-border transfers of personal data are restricted under UAE data protection law. Confirm where Website, email and service-provider data is hosted and what transfer safeguards apply.
Third-Party Services
The Website may use or link to third-party services such as payment providers, delivery partners, messaging apps (for example WhatsApp) and analytics tools. These third parties have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of third-party websites you visit through links on our Website.
Cookies and Tracking Technologies
We use cookies that are necessary for the Website and shopping cart to work. Any optional cookies, such as analytics or marketing cookies, are described in our Cookie Policy.
Data Retention
We keep personal information only for as long as necessary for the purposes described in this policy, including to meet legal, tax and accounting requirements. Our retention periods are: [INSERT RETENTION PERIODS FOR ORDER RECORDS, ACCOUNT DATA, ENQUIRIES AND MARKETING DATA].
Your Privacy Rights
Subject to applicable law, you may have the right to:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Ask us to delete your data, where the law allows.
- Object to or restrict certain processing.
- Withdraw consent at any time, where processing is based on consent.
- Opt out of marketing messages.
To make a request, contact us using the details below. We may need to verify your identity before responding. We will respond within [INSERT RESPONSE TIMEFRAME]. Some data may need to be kept even after a deletion request, for example where we are legally required to keep order records.
Legal review required: Confirm that the business has a working internal process to handle access, correction and deletion requests before publishing these commitments.
Contact Information
If you have any questions about this policy, please contact us using the details below or through our Contact Us page.
- Business name: [INSERT REGISTERED BUSINESS NAME]
- Email: [INSERT BUSINESS EMAIL ADDRESS]
- Phone: [INSERT CUSTOMER SERVICE PHONE NUMBER]
- Address: [INSERT REGISTERED BUSINESS ADDRESS]
- Customer service hours: [INSERT CUSTOMER SERVICE HOURS]
Questions about this policy?
Last updated: [INSERT DATE]
[INSERT REGISTERED BUSINESS NAME]
Email: [INSERT BUSINESS EMAIL ADDRESS]
Phone: [INSERT CUSTOMER SERVICE PHONE NUMBER]
Address: [INSERT REGISTERED BUSINESS ADDRESS]