Last Updated: June 2025
This Privacy Policy describes how ARaya ("we," "us," or "our") collects, uses, and shares your personal information when you visit, use, or make a purchase from www.araya.ae (the "Site").
This policy is designed to comply with the Federal Decree-Law No. 45 of 2021 regarding Personal Data Protection (PDPL) in the United Arab Emirates, as well as other applicable data protection laws.
1. Information We Collect and Legal Basis for Processing
a. Personal Information You Provide to Us
We collect personal information when you:
- Create an account
- Data: Name, email address, and password
- Legal Basis: Performance of a contract
- Make a purchase
- Data: Name, billing/shipping address, payment info (credit card, CVV – not stored)
- Legal Basis: Contract & Legal obligation
- Subscribe to newsletter
- Data: Email address
- Legal Basis: Your explicit consent
- Contact us
- Data: Name, email address, message
- Legal Basis: Legitimate interest / Contract
- Participate in surveys or promotions
- Data: Demographics, contact details
- Legal Basis: Consent / Legitimate interest
Note: If you don’t provide required data for purchases or accounts, we may not be able to fulfill the service. Data for marketing/surveys is optional.
b. Information Collected Automatically
We collect the following automatically when you use the Site:
- Log Data: IP address, browser type, version, pages visited, time on site
- Device Info: OS, model, network
- Cookies & Trackers: To improve your experience (see Cookie Policy)
Legal Basis: Legitimate interests (e.g., functionality, analytics)
c. Information from Third Parties
- Payment Processors: Transaction confirmation
- Social Media Platforms: Public profile data
- Analytics Providers: Aggregated usage behavior
Legal Basis: Legitimate interests
2. How We Use Your Information
- To operate and maintain your account and services (Contract)
- To improve website experience and performance (Legitimate interests)
- To personalize your experience (Legitimate interests / Consent)
- To process transactions and orders (Contract)
- To communicate with you (e.g., confirmation emails, support) (Contract / Consent / Legitimate interests)
- To send marketing/promotions (Consent / Legitimate interest)
- To prevent fraud or address legal issues (Legal obligation)
- To comply with regulations and enforce terms (Legal obligation)
3. Sharing Your Information & Cross-Border Transfers
We may share your data with:
- Service Providers (e.g., hosting, email, analytics, support)
- Business Transfers (e.g., mergers or acquisitions)
- Affiliates (within the same policy framework)
- Legal Authorities (if legally required)
- With Your Consent (for specific cases)
Cross-Border Transfers follow PDPL safeguards:
- UAE-approved country list
- Contractual clauses or rules
- Your explicit consent
- Legal claims, contract execution, or public interest
4. Data Retention
We retain personal data only as long as necessary. If no longer needed, we:
- Delete or anonymize the data
- Securely archive it if deletion isn’t immediately possible
5. Your Data Protection Rights (PDPL)
You have the right to:
- Access your data
- Correct inaccurate data
- Delete data (under certain conditions)
- Restrict processing
- Object to processing (e.g., marketing)
- Transfer your data (portability)
- Withdraw consent at any time
- File a complaint with the UAE Data Office
6. Security of Your Information
We use administrative, technical, and physical measures to protect your data. However, no system can be 100% secure on the Internet.
7. Children’s Privacy
- Not intended for users under 18
- We don’t knowingly collect their data
- Parents may contact us if a minor’s data is found
8. Links to Other Websites
We are not responsible for external websites linked from our Site. Please review their privacy policies.
9. Changes to This Privacy Policy
We may update this policy. Material changes will be posted here with a new “Last Updated” date.
10. Contact Us
For any questions or to exercise your data rights:
