Privacy Policy

The data controller responsible for your personal data is:

For all privacy-related enquiries or to exercise your data rights, contact us at info@premiumprints.ae with the subject line "Privacy Request". We aim to respond within 5 business days.

We collect personal data through the following means:

2.1 Data You Provide Directly

• Contact and identity data: Full name, company name, job title, email address, phone number.
• Order and project data: Artwork files, project specifications, delivery addresses, billing details, and correspondence related to your print orders.
• Communication data: Messages, quotation requests, and enquiries submitted via our website contact form, email, or WhatsApp Business.

2.2 Data Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, referring URLs, and pages visited.
• Usage data: Pages viewed, time spent on pages, links clicked, and search queries entered on our website.
• Cookie data: Session identifiers and preference cookies. See Section 7 for full details.

2.3 Data from Third Parties

If you contact us via WhatsApp Business, your WhatsApp profile name and phone number are processed by Meta Platforms Ireland Ltd. under their own privacy policy. We do not control Meta's data practices. We use WhatsApp solely to communicate with you about your enquiries and orders.

We process your personal data only where we have a valid legal basis under UAE PDPL:

We do not sell, rent, or trade your personal data. We may share it only in the following limited circumstances:

• Logistics and courier partners: Name, phone number, and delivery address are shared with delivery service providers solely to fulfil your order.
• Payment processors: Billing data is shared with our bank or payment gateway, which operate under their own regulatory obligations.
• Technology service providers: We use third-party tools for website hosting, analytics, and communication (e.g. Google Analytics, Meta WhatsApp Business API). These providers act as data processors and are contractually bound to process data only on our instructions.
• Legal and regulatory authorities: We may disclose data if required by UAE law, a court order, or a legitimate request from a regulatory authority.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

We retain personal data only for as long as necessary for the purposes described in this policy:

• Customer order records: Retained for 5 years from the date of the last transaction, in compliance with UAE accounting and VAT obligations.
• Enquiries that did not result in an order: Deleted within 12 months of the last communication.
• Server and access logs: Retained for 90 days for security monitoring purposes.
• Marketing consent records: Retained until you withdraw consent or for 3 years of inactivity, whichever comes first.

You may request early deletion of your data at any time (see Section 8), subject to our legal obligations to retain certain records.

Our primary operations and data storage are located in the UAE. Some of our third-party service providers (including Google and Meta) may process data on servers located outside the UAE. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses and data processing agreements that meet the requirements of UAE PDPL.

Our website uses the following categories of cookies:

• Strictly necessary cookies: Required for the website to function. These cannot be disabled. They include session management and security tokens.
• Analytics cookies: We use Google Analytics to understand how visitors interact with our website. These cookies collect anonymised data (page views, session duration, traffic sources). You may opt out at any time via your browser settings or by installing the Google Analytics Opt-out Browser Add-on.
• Preference cookies: Store your language or display preferences between visits.

No advertising or cross-site tracking cookies are used. You may manage or disable cookies through your browser settings at any time without affecting your ability to use our core services.

Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, where we have no legal obligation to retain it.
• Right to restriction: Request that we limit processing of your data in certain circumstances.
• Right to data portability: Request your data in a structured, machine-readable format.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to object: Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, email info@premiumprints.ae with the subject line "Data Rights Request" and your full name and contact details. We will respond within 10 business days. We may need to verify your identity before processing your request.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These measures include:

• TLS 1.2+ encryption for all data transmission between your browser and our website.
• Role-based access controls limiting personal data access to authorised personnel only.
• Regular security reviews of our systems and third-party processors.
• Staff awareness of data handling obligations under UAE PDPL.

In the event of a data breach that poses a risk to your rights, we will notify you and the UAE Data Office within the timeframes required by law.

Our services are directed exclusively at businesses and adult individuals. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date at the top of this page. For significant changes that affect how we use your data, we will provide direct notice by email where we hold your contact details. We encourage you to review this page periodically.

For any questions, concerns, or complaints regarding this Privacy Policy or our data practices, contact us at info@premiumprints.ae.

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office (uaedataoffice.ae), the supervisory authority responsible for data protection in the UAE.