Privacy Policy

Last updated: July 11, 2025

VM Perfumes (“we,” “us,” “our”) is committed to safeguarding the privacy of visitors to our website (vmperfumes.ae) and customers purchasing our products in the United Arab Emirates (UAE) and the broader Middle East region. This Privacy Policy outlines our practices regarding the collection, use, disclosure, and protection of personal data in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”) and other applicable regional regulations. By accessing or using our website and services, you consent to the practices described herein.

1. Scope and Applicability

This Privacy Policy applies to:

- All visitors to vmperfumes.ae
- Customers who register, subscribe, make purchases, or otherwise provide personal data
- Individuals interacting with us via email, phone, or other channels

It covers personal data as defined under the UAE PDPL and similar data protection frameworks in the Gulf Cooperation Council (GCC).

2. Personal Data We Collect

2.1 Information You Provide

- Identity Data: Full name, date of birth (for age verification)
- Contact Data: Email address, telephone number, shipping and billing addresses
- Account Credentials: Username, password (securely hashed)
- Payment Data: Payment card details processed via Stripe (we do not store full card numbers)

2.2 Transaction and Order Data

- Order reference numbers, products purchased, purchase dates
- Payment confirmation, transaction identifiers

2.3 Technical and Usage Data

- IP address, device type, browser type/version, operating system
- Pages viewed, session duration, navigation paths (via cookies and analytics)

2.4 Cookies and Tracking Technologies

We use cookies, web beacons, and similar tools to:

- Enable core site functionality (SSL encryption, user sessions)
- Analyze performance and improve user experience
- Deliver personalized marketing and offers

You may manage cookie preferences through your browser settings; disabling certain cookies may impact site functionality.

3. How We Use Your Data

We process personal data for the following purposes:

1. Order Processing & Fulfillment
  - - Process, verify, and deliver your orders
    - Issue invoices, send confirmations, and track shipments
2. Payment Processing & Fraud Prevention
  - - Securely process payments via Stripe
    - Monitor transactions to detect and prevent fraud or unauthorized use
3. Customer Service & Support
  - - Respond to inquiries, complaints, and support requests
    - Provide order status updates and shipping notifications
4. Marketing & Communications
  - - Send newsletters, promotional offers, and product updates (with your consent)
    - Personalize communications based on your preferences and purchase history
5. Legal & Regulatory Compliance
  - - Comply with UAE PDPL, VAT, customs, and e‑commerce regulations
    - Retain transaction records as legally required
6. Security & Improvement
  - - Protect against unauthorized access, data breaches, and cyber threats
    - Perform analytics to enhance site performance and security

4. Legal Basis for Processing

Under the UAE PDPL, we rely on these legal bases for processing your personal data:

- Contract Performance: Necessary to fulfill our contract with you (e.g., order processing).
- Legal Obligation: Compliance with applicable laws (e.g., tax, customs, record‑keeping).
- Legitimate Interests: Pursuing our legitimate business interests (e.g., fraud prevention, IT security, website analytics).
- Consent: Where required, we obtain your explicit consent (e.g., marketing communications).

5. Data Sharing and Disclosure

We may share your personal data with:

- Service Providers: Stripe for payment processing; shipping partners; IT hosting, maintenance, and analytics providers.
- Regulatory Authorities: UAE government agencies (e.g., Federal Tax Authority, customs) when required by law.
- Business Transfers: Potential acquirers or merger partners under confidentiality obligations.

We do not sell or rent your personal data to third parties for their own marketing purposes.

6. International Transfers

Your data may be stored and processed outside the UAE. When transferring data internationally, we ensure appropriate safeguards, such as:

- Standard contractual clauses approved under the UAE PDPL
- Verification that the recipient’s jurisdiction provides adequate data protection standards

7. Data Security

We implement appropriate technical and organizational measures, including:

- Encryption: SSL/TLS encryption for all data in transit.
- Access Controls: Restricted access to data on a need‑to‑know basis.
- Security Assessments: Regular vulnerability scans and security audits.

While we strive to protect your data, no system is impervious. You also play a role by keeping your credentials confidential.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined:

- Transaction Records: Retained for a minimum of five (5) years to comply with VAT and tax obligations.
- Marketing Consents: Kept until you withdraw consent.
- Analytics Data & Logs: Retained for up to two (2) years, unless longer retention is required for security investigations.

Upon expiry of these periods, we securely delete or anonymize your data.

9. Your Rights

Under the UAE PDPL, you have the right to:

- Access: Obtain confirmation of whether we process your data and request copies.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of data, subject to legal retention obligations.
- Objection: Object to processing based on legitimate interests or marketing.
- Restriction: Request limitation on processing under certain circumstances.
- Portability: Receive data in a structured, machine‑readable format.
- Withdraw Consent: At any time, without affecting prior lawful processing.

To exercise these rights, please contact us using the details below. We will respond within the timeframes prescribed by law.

10. Children’s Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect data from minors. If you believe we have been provided data from a minor, please contact us to request deletion.

11. Policy Updates

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. The “Last updated” date at the top indicates when the policy was most recently revised. Please review this page periodically.

12. Contact Information

If you have any questions, concerns, or requests regarding your personal data or this policy, contact us:

VM Perfumes
Email: privacy@vmperfumes.ae
Dubai, UAE
Phone: +971 576-245-2478