Privacy Policy

HADILCHARM BRAND - FZCO ("HADILCHARM", "we", "us") respects your privacy. This policy explains which personal data we collect when you visit hadilcharm.com, create an account, place an order or subscribe to our newsletter, why we collect it, how long we keep it and which rights you have. We only collect what we need to run the store and to deliver your order.

1. Who is responsible

The controller of your personal data is HADILCHARM BRAND - FZCO, trade licence 45920, IFZA Business Park – Building A2 – Nadd Hessa – Dubai Silicon Oasis – Dubai, United Arab Emirates. For any question about this policy or about your data write to contact@hadilcharm.com.

2. Which data we collect

  • Order data: name, delivery and billing address, email address, telephone number, the products you ordered, the amount paid, the payment method you chose and your delivery tracking number.
  • Account data: if you create an account, your login email, a hashed password (we never see the password itself), your saved addresses and your order history.
  • Newsletter data: the email address you enter in the newsletter form and the date of your sign-up.
  • Messages: what you write to us by email or through the contact page, so we can answer you.
  • Technical data: when you visit the site our web server records your IP address, the time of the request, the page requested, your browser type and the referring page in its server log. This happens automatically and is needed to deliver the pages and to protect the site against abuse.
  • Language choice: whether you prefer Arabic or English (see cookies below).

We do not collect health data. Coloured contact lenses are a cosmetic product; we do not ask for, and you should not send us, any prescription or medical information.

3. Why we use your data and on which legal basis

  • To fulfil your order (contract): to process the payment, pack and ship your parcel, send you order and delivery confirmations and handle returns and refunds.
  • To run your account (contract): to let you log in, see your orders and reuse your addresses.
  • To send our newsletter (consent): only when you have signed up. You can unsubscribe at any time.
  • To answer your messages (legitimate interest and, where you are a customer, contract).
  • To keep the site secure and working (legitimate interest): server logs, fraud prevention and error analysis.
  • To meet legal duties (legal obligation): accounting and tax law in the United Arab Emirates require us to keep order and invoice records.

We process data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. If you order from the European Union, the European Economic Area or the United Kingdom, the GDPR and the UK GDPR apply to you as well, and the legal bases named in brackets above are the ones we rely on under those laws.

4. Who receives your data

We never sell your data. We share it only with service providers who need it to deliver what you have asked for, and only to the extent necessary:

  • Hosting: our website and its database run on servers of Hostinger International Ltd. (European Union data centres). Hostinger processes data on our behalf under a data-processing agreement.
  • Payment: card payments are handled by Stripe Payments Europe, Ltd. Your card number is entered into a form provided by Stripe and travels directly to Stripe; it never reaches our servers. Stripe's own privacy policy applies to that step.
  • Delivery: our logistics partners receive your name, delivery address, telephone number and, where needed for customs, the contents and value of your parcel, so they can deliver it and contact you about the delivery.
  • Email: order confirmations, delivery notices and our newsletter are sent through our email provider, which sees your email address and the content of those messages.
  • Authorities: we disclose data when the law requires it, for example to tax or customs authorities or on a lawful request by a court or regulator.

5. International transfers

We are based in Dubai and our website is hosted in the European Union, so your data moves between the United Arab Emirates and the EU, and to the country of your delivery address. Where data protection law requires it we put safeguards in place, in particular standard contractual clauses with our service providers. You can ask us for details at contact@hadilcharm.com.

6. Cookies

We use only cookies that are needed to run the store. We do not use advertising cookies and, at present, no third-party analytics or tracking services. If that changes we will update this policy and, where the law requires it, ask for your consent first.

  • hc_lang — remembers whether you chose Arabic or English. Kept for one year.
  • woocommerce_cart_hash, woocommerce_items_in_cart — let the shop know that your bag contains items. Deleted when you close the browser.
  • wp_woocommerce_session_… — links your bag to your browser while you shop. Kept for two days.
  • wordpress_logged_in_…, wordpress_sec_…, wp-settings-… — set only when you log in to your account, to keep you signed in. Deleted when you log out or after the session ends.

You can delete or block cookies in your browser settings. Blocking the cookies listed above will prevent the shopping bag and the account area from working.

7. How long we keep your data

  • Orders and invoices: five years after the end of the year of the order, as required by UAE tax and commercial law.
  • Account: until you delete your account or ask us to delete it. Order records linked to the account are kept for the period above.
  • Newsletter: until you unsubscribe. We then delete your address from the mailing list.
  • Messages: for as long as needed to deal with your request, normally no longer than two years.
  • Server logs: for a short period, normally no longer than 30 days, unless an entry is needed to investigate abuse.

8. Your rights

You have the right to ask us for access to the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive a copy in a portable format and, where processing is based on consent, to withdraw that consent at any time. Withdrawing consent does not affect processing that took place before.

To exercise any of these rights write to contact@hadilcharm.com. We answer within 30 days. We may ask you to confirm your identity so that we do not release your data to someone else.

You can also lodge a complaint with a supervisory authority: in the United Arab Emirates the UAE Data Office, in the European Union the data protection authority of your country of residence, and in the United Kingdom the Information Commissioner's Office.

9. Security

The site is served over an encrypted connection (HTTPS). Passwords are stored only as salted hashes. Access to order data is limited to the people who need it to fulfil orders. No system is completely secure, so if you believe your data has been compromised, please contact us right away.

10. Children

Our products and our website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a minor has given us data, write to us and we will delete it.

11. Changes to this policy

We update this policy when our services, providers or the law change. The date below shows the current version. Material changes are announced on this page before they take effect.

Last updated: 3 October 2026