Privacy Policy
We collect the minimum we need to sell you a garment and deliver it. This page explains exactly what that means.
What we collect
| Data | Why we need it |
|---|---|
| Name | To address and process your order |
| Email address | To confirm your order, send your sign-in code and contact you about delivery |
| Phone number | For delivery coordination (optional) |
| Delivery address | To ship your order |
| Order history | So you can see past orders in your account, and so we can handle exchanges |
We do not collect payment card details on this website, and we do not ask for identity documents.
Your account
Accounts on this site work without a password. When you sign in, we email you a temporary six-digit code. That code is stored in a hashed form, expires after 15 minutes, and is deleted once used. Your sign-in session is a random token stored in your browser, valid for 30 days, which you can end at any time by signing out.
Stored in your browser
Your shopping cart, your chosen delivery zone and your sign-in token are stored locally in your own browser using localStorage. They are not advertising cookies, they are not shared with third parties, and clearing your browser data removes them.
Who we share data with
- Delivery partners — your name, address and phone number, so your order can be delivered.
- Our email provider — to send order confirmations and sign-in codes.
- Authorities — only where we are legally required to.
We do not sell your personal data, and we do not pass it to advertisers or data brokers.
How long we keep it
Order records are kept for as long as we are required to retain business records under UAE law. Account details are kept until you ask us to delete them. Expired sign-in codes and sessions are removed automatically.
Security
The site is served over HTTPS. Order data is stored on our own server with restricted access. No system is perfectly secure, but we do not keep data we do not need, which is the most effective protection available.
Your rights
You can ask us what data we hold about you, ask us to correct it, or ask us to delete your account and its data. Write to info@diffa-dubai.com and we will respond within 30 days.
Children
This site is not intended for children, and we do not knowingly collect data from anyone under 18.
Changes
If we change this policy we will update this page. Material changes affecting how we use existing data will be communicated to account holders by email.