Privacy Policy

Last Updated: October 2026

This Privacy Policy explains how SUPPS BAY - FZCO collects, uses, stores and shares personal information when customers interact with SuppsBay. The UAE Personal Data Protection Law regulates processing of personal data and provides rights including correction and, in qualifying circumstances, deletion and restriction of processing. It also requires appropriate technical and organisational security measures. UAE Legislation

Information We May Collect

Depending on how you use SuppsBay, we may collect: Identity and contact information such as name, email address and telephone number. Account information such as login and profile details. Delivery information including emirate, address, building, apartment/villa number and delivery instructions. Order information including products purchased, quantity, price, discounts, coupons, returns and refunds. Payment-related information including payment status, transaction identifiers and limited payment details provided to us by payment processors. Customer-service information including communications, complaints and support requests. Technical information such as IP address, browser/device information, cookies, session information and website activity. Marketing information including subscription preferences and campaign interactions.

How We Use Personal Information

We may process information where necessary to: process purchases and payments; create/manage accounts; fulfil and deliver orders; process returns/refunds; provide customer support; prevent fraud; maintain business/accounting records; improve the website and services; manage inventory and operations; communicate service information; administer promotions and coupons; send marketing where legally permitted; analyse website usage; secure our systems; and comply with applicable legal or regulatory obligations. Processing may be based on consent where required, performance of a contract, legal obligations or another lawful basis recognised by applicable UAE data-protection law. UAE law expressly recognises processing necessary to perform a contract with the data subject as one lawful case. UAE Legislation

Who We May Share Data With

SuppsBay may disclose information necessary to operate the business to service providers including: payment processors, banks, warehouse and fulfilment providers, courier companies, IT and cloud providers, website/e-commerce infrastructure providers, email/SMS providers, analytics providers, marketing providers, accountants/auditors, professional advisers and regulatory or government authorities where legally required. For example, a courier may need your name, phone number, delivery address and order/delivery information to complete a shipment. Service providers should only receive information reasonably necessary for their function.

Payment Information

Payments may be handled through third-party payment providers. The information handled directly by those providers is also subject to their applicable privacy and security practices. SuppsBay should not be considered responsible for a third party's independent processing beyond the extent imposed on SuppsBay by applicable law.

Fulfilment and Delivery

SuppsBay may provide customer data to its warehouse, fulfilment and courier partners where necessary to prepare, dispatch, track and deliver an order, handle returns or resolve delivery issues.

Marketing

Where permitted, SuppsBay may send information about products, promotions, offers or company updates. Customers may opt out of promotional communications using the unsubscribe mechanism provided or by contacting SuppsBay. Operational messages concerning an existing order, payment, security issue or customer-service request are not necessarily marketing messages.

Cookies and Analytics

SuppsBay may use cookies and similar technologies for: essential website functions, authentication, cart functionality, security, analytics, performance measurement, personalisation and advertising where applicable. Where consent is legally required for particular cookies or tracking technologies, SuppsBay will implement the applicable consent mechanism.

Data Retention

SuppsBay retains personal information only for as long as reasonably necessary for the purpose for which it was collected and as required for legal, accounting, tax, fraud-prevention, dispute-resolution and regulatory obligations. Different categories of information may therefore have different retention periods.

Data Security

SuppsBay uses reasonable technical and organisational safeguards designed to protect personal information from unauthorized access, loss, alteration, misuse or disclosure. No online service can guarantee absolute security. The UAE PDPL requires controllers/processors to implement security measures appropriate to the risks of processing. UAE Legislation

International Data Transfers

Some service providers, infrastructure providers or technology systems may process or store data outside the UAE. Where personal information is transferred internationally, SuppsBay will seek to handle those transfers in accordance with applicable data-protection requirements.

Your Privacy Rights

Subject to applicable law and applicable exceptions, you may have rights concerning your personal information, including rights to: access information about processing, correct inaccurate or incomplete information, request deletion in qualifying circumstances, restrict certain processing, withdraw consent where processing depends on consent and object or make requests as otherwise provided by applicable law. The UAE PDPL expressly provides correction and qualifying deletion rights and rights to restrict processing. UAE Legislation We may need to verify your identity before completing certain privacy requests.

Fraud and Security

SuppsBay may process relevant information to identify suspected: payment fraud, coupon abuse, unauthorized account access, fake orders, return abuse or security attacks. Where appropriate, information may be shared with payment providers, financial institutions or competent authorities.

Children's Data

SuppsBay is not designed to intentionally collect personal information from children independently purchasing products where they are not legally capable of entering the relevant transaction. If we become aware that personal information has been collected contrary to applicable requirements, we may take appropriate steps to delete or restrict it.

Changes to This Policy

SuppsBay may update this Privacy Policy when its services, technology, partners or legal obligations change. The latest version will be published on our website together with its effective date.

Contact Us

For privacy requests or questions: SUPPS BAY - FZCO Email: contact@suppsbay.com