Introduction
Seranaya (“we,” “us,” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at seranaya.com (“the Site”), place an order, or interact with us in any way.
By using our Site, you agree to the collection and use of information in accordance with this policy. We encourage you to read this policy carefully. If you have any questions, please contact us at hello@seranaya.com.
Information We Collect
We collect the following types of personal information:
- Identity Information: Your name, email address, phone number, and shipping address when you place an order or create an account.
- Payment Information: Payment details are processed securely by our payment provider (Stripe). We do not store your full card details on our servers.
- Order Information: Details of the products you purchase, order history, delivery preferences, and any gift messages you include.
- Communication Data: Any messages you send us via our contact form, email, or WhatsApp.
- Technical Data: Your IP address, browser type, operating system, referring URLs, and pages visited on our Site. This data is collected automatically through cookies and similar technologies.
- Newsletter Data: Your email address if you subscribe to our newsletter.
How We Use Your Information
We use your personal information for the following purposes:
- To process and fulfill your orders, including shipping, payment processing, and order confirmation.
- To communicate with you about your orders, respond to inquiries, and provide customer support.
- To send you marketing communications, promotions, and newsletter updates (only with your consent, and you can unsubscribe at any time).
- To improve our website, products, and services based on your feedback and usage patterns.
- To detect, prevent, and address fraud or other security concerns.
- To comply with legal obligations under UAE law and applicable regulations.
Data Storage & Security
We take the security of your personal data seriously. Your information is stored on secure servers provided by our hosting and infrastructure partners. We implement industry-standard security measures including:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- Secure, encrypted storage of sensitive data.
- Access controls limiting who within our organization can view personal information.
- Regular security audits and monitoring.
While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.
Cookies
Our Site uses cookies and similar tracking technologies to enhance your browsing experience. Cookies are small text files stored on your device that help us:
- Remember your preferences and settings.
- Keep items in your shopping cart between visits.
- Understand how you use our Site so we can improve it.
- Analyze site traffic and performance.
You can control cookies through your browser settings. Disabling cookies may affect certain features of the Site, such as the shopping cart and checkout process.
Third-Party Services
We work with trusted third-party service providers to operate our business. These providers have access to your personal information only to perform specific tasks on our behalf and are obligated to protect it:
- Stripe: For secure payment processing. Stripe handles all payment card data and is PCI DSS compliant.
- Supabase: For database hosting and authentication services.
- Vercel: For website hosting, deployment, and analytics.
We do not sell, trade, or rent your personal information to third parties for marketing purposes.
Your Rights
You have the following rights regarding your personal information:
- Right of Access: You may request a copy of the personal data we hold about you.
- Right to Rectification: You may request that we correct any inaccurate or incomplete data.
- Right to Erasure: You may request that we delete your personal data, subject to legal retention requirements.
- Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw consent at any time.
- Right to Data Portability: You may request your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at hello@seranaya.com. We will respond to your request within 30 days.
UAE Data Protection Compliance
Seranaya operates in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and any applicable regulations issued by the UAE Data Office. We are committed to upholding the principles of lawful processing, data minimization, and transparency as outlined in UAE data protection law.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the relevant UAE regulatory authority.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. We encourage you to review this page periodically.
Contact
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:
Email: hello@seranaya.com
Website: seranaya.com