Privacy policy

Introduction

Rock Paper Scissors ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect when you visit our website or Instagram page, or place an order, how we use it, and your rights.

We handle your data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). This Policy applies to customers ordering from us in Dubai, UAE.

Information We Collect

  • Contact details: name, email address, phone number, delivery address.

  • Order details: products purchased, order value, order history.

  • Payment Information: Payments are processed securely through Shopify Payments. We do not store or have access to your full credit or debit card details.

  • Communications: messages you send us by email, WhatsApp or Instagram.

  • Technical data: this may include your IP address, browser type and cookies (see the Cookies section below).

How We Use Your Information

We use your information to:

  • process and deliver your order;

  • communicate with you about your order, or respond to your queries;

  • improve our products and customer service;

  • send you marketing updates, only if you've opted in - you can unsubscribe at any time; and

  • meet our legal and tax obligations in the UAE.

Legal Basis for Processing

Under the PDPL, we process your data because:

  • it's necessary to fulfil your order (contractual necessity);

  • you've given us consent, for example to send marketing messages; or

  • we have a legal obligation to do so, for example for tax and accounting records.

You can withdraw consent for marketing at any time. This won't affect an order already placed.

How We Share Your Information

We share your information only where needed to run our business, with:

  • delivery and courier partners, to get your order to you;

  • payment processors, to take payment securely;

  • service providers who support our business, such as hosting or accounting, bound by confidentiality; and

  • UAE authorities, where required by law.

We do not sell your personal data to third parties.

Data Storage and Security

We take reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access.

Where we use service providers based outside the UAE, for example cloud hosting, we only transfer data to countries that provide an adequate level of data protection, or under appropriate safeguards, as the PDPL requires.

Data Retention

We keep your personal data only as long as needed for the purposes above, including to meet legal, accounting and tax retention requirements in the UAE. After that, we delete or anonymise it.

Your Rights

Under the PDPL, you have the right to:

  • access the personal data we hold about you;

  • ask us to correct inaccurate data;

  • ask us to delete your data, subject to legal retention requirements;

  • restrict or object to certain processing; and

  • withdraw consent at any time.

To exercise any of these rights, contact us at scissorspr@gmail.com.

Cookies and Tracking

Our website may use cookies to remember your preferences and understand how visitors use our site. You can control cookies through your browser settings.

Children's Privacy

Our products and services are intended for adults. We don't knowingly collect personal data from children. If you believe a child has given us personal data, please contact us and we'll delete it.

Changes to This Policy

We may update this Privacy Policy from time to time, for example as our business or the law changes. We'll post the updated version here with a new date.