Privacy policy

Privacy Policy — BAREHMIL

BAREHMIL ["we"] operates this website and online store. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit or make a purchase through our Site, in accordance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and other applicable laws.

By using our Site, you agree to the collection and use of information as described in this policy.

1. Information We Collect

We may collect the following types of information:

a) Information you provide directly

  • Name, email address, phone number
  • Shipping and billing address
  • Payment information (processed securely by our payment providers; we do not store full card details)
  • Order history and communication with our support team

b) Information collected automatically

  • IP address, browser type, device information
  • Pages visited, time spent on Site, referring website
  • Cookies and similar tracking technologies (see Section 6)

2. How We Use Your Information

We use your personal data to:

  • Process and fulfill your orders, including shipping and delivery
  • Communicate with you about your orders, inquiries, or support requests
  • Send order confirmations, updates, and (where you have consented) marketing communications
  • Improve our Site, products, and customer experience
  • Prevent fraud and ensure Site security
  • Comply with legal and regulatory obligations

3. Legal Basis for Processing

Under the UAE PDPL, we process your personal data based on one or more of the following:

  • Your consent
  • Performance of a contract (e.g., fulfilling your order)
  • Compliance with a legal obligation
  • Our legitimate business interests, provided these do not override your rights

4. Sharing of Your Information

We do not sell your personal information. We may share your data with:

  • Service providers who assist with order fulfillment, delivery, payment processing, IT hosting, and customer support, bound by confidentiality and data protection obligations
  • Payment gateways to securely process transactions
  • Legal or regulatory authorities, where required by law
  • Business transfers, in the event of a merger, acquisition, or sale of assets

All third parties we work with are required to handle your data securely and only for the purposes we specify.

5. International Data Transfers

Your information may be processed or stored outside the UAE. Where this occurs, we take reasonable steps to ensure your data receives a level of protection consistent with the UAE PDPL, including through contractual safeguards with our service providers.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep your cart and preferences saved
  • Analyze Site traffic and usage patterns
  • Personalize content and (where applicable) advertising

You can control or disable cookies through your browser settings. Disabling cookies may affect certain features of the Site.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, including for legal, accounting, or reporting requirements. When no longer needed, your data is securely deleted or anonymized.

8. Data Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or alteration. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Under the UAE PDPL, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request deletion of your personal data, subject to legal exceptions
  • Withdraw consent at any time where processing is based on consent
  • Object to or restrict certain processing of your data
  • Lodge a complaint with the UAE Data Office if you believe your rights have been violated

To exercise any of these rights, contact us using the details in Section 12.

10. Children's Privacy

Our Site is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us so we can remove it.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies separately.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

BAREHMIL Email: support@barehmil.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.