Privacy Policy
GlamStyle Boutique FZ-LLC ("GlamStyle", "we", "us", "our") operates glamstyle.co and associated regional domains. This policy explains what personal data we collect, why we collect it, how we use it, and how we protect it. It applies to anyone who visits our website, places an order, or contacts our team.
Who we are
GlamStyle Boutique FZ-LLC is registered at Office 1204, Building 4, Dubai Design District, Dubai, UAE. Our commercial licence is issued by the Dubai Development Authority. You can contact our data controller at privacy@glamstyle.co.
What we collect
We collect three categories of personal data:
- Account data — name, email, password (hashed), phone number, addresses you save for shipping and billing. You provide this when you register an account or check out.
- Order data — items you buy, sizes, prices, payment method (not card numbers — our payment processor holds those), delivery status.
- Behavioural data — pages you visit, items you view, items you add to wishlist or cart, device and browser type, approximate location (country and city). We use this to improve the site and understand demand.
How we use it
- To process and deliver your orders, including sharing your address with our couriers.
- To handle customer service enquiries and returns.
- To send you order updates and, if you've opted in, marketing emails.
- To improve our product range, site design, and fulfilment processes.
- To detect fraud and protect our business and customers.
Who we share it with
We share the minimum necessary data with carefully vetted third parties, including:
- Couriers — Aramex, DHL, FedEx, and our in-house UAE team — to deliver orders.
- Payment processors — Checkout.com and Tabby — who collect card details directly.
- Email and analytics providers used to send confirmations and understand site usage.
- Government authorities where required by law (e.g. customs declarations).
We do not sell your personal data. We do not share it with advertising networks without explicit consent.
Your rights
Under UAE data protection law, and — where applicable — the EU GDPR, the UK Data Protection Act 2018, and the Saudi Personal Data Protection Law (PDPL), you have the right to:
- Request a copy of the personal data we hold about you
- Ask us to correct data that is wrong
- Ask us to delete your data (subject to our legal record-keeping obligations)
- Withdraw consent for marketing at any time
- Object to automated decision-making — we do not use automated decisions that have significant legal effects
Email privacy@glamstyle.co to exercise any of these rights. We'll respond within 30 days.
Retention
Account and order data is retained for seven years after your last order, to meet UAE tax and accounting obligations. Marketing data is deleted 12 months after you last engage with us or opt out.
Security
We encrypt data in transit (TLS 1.2+) and at rest. Passwords are hashed with bcrypt. Access to production systems is restricted to named engineering staff and logged. Card details are never stored on our infrastructure; they are tokenised by our payment processor.
Transfers outside the UAE
Some of our processors operate in the EU, UK, and US. Where data is transferred outside the UAE, we rely on Standard Contractual Clauses or equivalent safeguards.
Cookies
See our separate Cookie Policy.
Changes to this policy
When we make material changes to this policy, we notify registered customers by email at least 14 days before the change takes effect. The current version is always dated at the top of the page.
Complaints
If you are not satisfied with our response, you may complain to the UAE Data Office at dataoffice.gov.ae or, if you are in the EU/UK, your local data protection authority.