This Privacy Policy explains how Nature House (“we”, “us”, “our”) collects, uses, shares, and protects your personal data when you visit naturehouseuae.com, create an account, subscribe to our newsletter, or purchase products.
We process personal data in accordance with applicable UAE laws, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations, as applicable.
Controller: Nature House
Email: [email protected] | Phone: 0501666498.
Identity & Contact: name, email, phone, shipping/billing address
Account Data: username, password, order history, preferences
Order & Payment: items purchased, totals, invoice details; payment tokens/approvals handled by [Payment Provider] (we don’t store full card numbers)
Communications: messages to support, reviews, survey responses
Marketing: newsletter subscriptions and marketing preferences
Device & Usage: IP address, device identifiers, browser type, pages viewed, referring URLs, approximate location (derived from IP), and timestamps
Cookies & Similar Tech: see Cookies section
If you provide data about someone else (e.g., gift recipient), you confirm you have their permission.
To process and deliver orders (performance of contract)
To create and manage accounts (performance of contract; legitimate interests)
To provide customer support and respond to inquiries (legitimate interests)
To personalize content and recommendations (legitimate interests / consent where required)
To send service emails (order updates, policy changes) (performance of contract / legal obligation)
To send marketing communications (consent; you can withdraw at any time)
To prevent fraud, ensure security, and comply with laws (legitimate interests; legal obligation)
Analytics and site improvement (legitimate interests / consent where required)
We share personal data with:
Service providers acting on our instructions (hosting, payment processing, shipping/courier partners, email & SMS platforms, analytics, IT/security)
Authorities and regulators where required by law or to protect our rights
Business transferees in the event of a merger, acquisition, or asset sale
We require service providers to protect your data and use it only as instructed.
If your data is transferred outside the UAE, we take steps required by the PDPL (e.g., adequacy, contractual safeguards) to ensure an appropriate level of protection.
We keep personal data only as long as necessary for the purposes above, including to meet legal, tax, and accounting requirements. Typical retention: [e.g., orders: 6 years; support messages: 2 years; marketing data: until you unsubscribe].
We implement administrative, technical, and physical safeguards to protect your data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
Subject to conditions and exceptions under the PDPL, you may have the right to:
Access your personal data and request information about processing
Rectify inaccurate or incomplete data
Erase data in certain circumstances
Restrict or object to processing in certain cases
Withdraw consent where processing is based on consent
Data portability where technically feasible (for data you provided)
To exercise rights, contact [email protected]. We may need to verify your identity.
With your consent, we may send newsletters and offers. You can opt out at any time by using the “unsubscribe” link in emails or contacting us. Even if you opt out, we may still send service/transactional emails.
We use cookies and similar tech to enable core functionality (e.g., cart), remember preferences, analyze traffic, and measure campaigns.
Types we may use:
Essential cookies (required for the Site to function)
Performance/analytics cookies (e.g., page views, conversions)
Functionality cookies (remember choices)
Advertising cookies [if used—add details or remove]
Controls: Adjust your browser settings to block/limit cookies, and manage optional cookies via our [cookie banner/settings link]. Blocking some cookies may affect site functionality.
Our Site is not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us to delete it.
If you interact with us on Instagram or Facebook, your interactions are governed by those platforms’ privacy policies. Our Site may link to external sites we don’t control.
We may update this Privacy Policy from time to time. The updated version will be posted here with a new “Last updated” date.