Privacy Policy

We collect information you provide directly to us, including:

• Name, email address, and phone number (when joining the waitlist, placing an order, or contacting us)
• Delivery address and emirate (when placing an order)
• Brand information such as Instagram handle, product categories, and description (when applying as a brand)
• Shopping preferences and interests (when joining the waitlist)

We also collect technical data automatically, including page views, device type, and browser, through standard web analytics tools.

• To process and fulfil order requests
• To communicate with you about your orders, applications, and platform updates
• To send early-access notifications to waitlist members (you can unsubscribe at any time)
• To review brand applications and onboard approved brands
• To improve the platform and understand how it is used

We process your personal data where it is necessary to provide our services and perform a contract with you (for example, fulfilling an order request), where you have given consent (for example, joining the waitlist or opting in to marketing), where it is necessary for our legitimate business interests (such as improving and securing the platform), and where required to comply with a legal or regulatory obligation in the UAE.

Your data is stored securely using Supabase infrastructure. We implement industry-standard technical and organisational measures — including encryption in transit, access controls, and the principle of least privilege — to protect your personal data against unauthorised access, loss, or disclosure.

We do not sell your personal information to third parties. We share information with service providers — such as our database host (Supabase), email provider (Resend), and hosting platform (Vercel) — only as necessary to operate the platform, and only under agreements that require them to protect your data.

We use cookies to maintain session state, store your language preference, and for analytics purposes. No advertising or third-party tracking cookies are used. You can control cookies through your browser settings, though disabling them may affect parts of the platform.

Under the UAE PDPL, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, where there is no overriding legal reason to retain it
• Object to or restrict certain processing of your data
• Withdraw consent and opt out of marketing communications at any time

To exercise any of these rights, contact us at support@nidwah.ae. We will respond within a reasonable period and in line with applicable law.

We retain your data for as long as necessary to provide our services. Order records are retained for a minimum of 5 years for accounting, tax, and legal compliance purposes. You may request deletion of non-essential data at any time, subject to our legal obligations.

Some of our service providers store or process data on servers located outside the UAE. Where personal data is transferred internationally, we take steps to ensure it receives an adequate level of protection and that the transfer complies with the UAE PDPL.

NIDWAH is not directed at children under the age of 18, and we do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us and we will delete it.

We may update this Privacy Policy from time to time. The “last updated” date at the top of this page reflects the most recent revision. Where changes are material, we will take reasonable steps to notify you.

For privacy inquiries or data requests, contact us at support@nidwah.ae.