Privacy Policy for Erabah.com

Last Updated: 14/10/2025

Effective Date: 14/10/2025

Welcome to Erabah.com (“Erabah,” “we,” “us,” or “our”). We are committed to protecting your privacy and personal data in accordance with the laws of the United Arab Emirates, specifically Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), as well as other relevant regulations. This Privacy Policy describes how we collect, use, process, and protect your Personal Data when you visit or make a purchase from Erabah.com (the “Site”).

1. Scope and Applicability

This Policy applies to all users of the Site and all forms of processing of Personal Data collected by Erabah.com. Personal Data is any data relating to an identified natural person, or a natural person who can be identified, directly or indirectly, by linking of data.

2. Personal Data We Collect

We collect Personal Data to provide and improve our e-commerce services. The types of data we collect include:

Category of Data	Examples of Data Collected	Purpose of Collection
Identity and Contact Data	Name, address, email address, phone number, delivery address.	To register your account, process and deliver your orders, and communicate with you.
Transaction Data	Details about products and services you have purchased, payment method (excluding full payment card details which are processed by our secure third-party payment processor).	To fulfill your orders and maintain a record of your purchases.
Financial Data	Partial payment card details, billing address.	To process payments for your orders. (Full details are not stored by Erabah.com).
Technical Data	Internet Protocol (IP) address, browser type and version, time zone setting, operating system, and platform.	For Site security, troubleshooting, and system administration.
Usage Data	Information about how you use our Site, products, and services (e.g., pages viewed, duration of visit).	To improve the Site, marketing, and user experience.
Marketing and Communications Data	Your preferences in receiving marketing from us and our third parties, and your communication preferences.	To send you relevant offers and manage your communication choices.

3. How We Use Your Personal Data

We process your Personal Data based on your explicit consent or as otherwise permitted by UAE law (PDPL). The purposes for which we use your data include:

Fulfilling Orders: To process and deliver the products you purchase, including managing payments, returns, and refunds.
Account Management: To manage your registration, provide you with customer support, and manage your preferences.
Marketing and Promotions: To send you promotional emails, newsletters, and special offers, but only where you have given your explicit consent. You have the right to object to processing for direct marketing purposes.
Security and Fraud Prevention: To protect the Site, our customers, and our business from fraud and illegal activities.
Site Improvement: To analyse how the Site is used to improve our offerings, site performance, and user experience.

4. Legal Basis for Processing

We will only process your Personal Data when we have a legal basis to do so under the UAE PDPL, which primarily includes:

Consent: You have given your free, specific, and unambiguous consent for the processing for one or more specific purposes.
Contractual Necessity: The processing is necessary for the performance of a contract (like your purchase order) to which you are a party.
Legal Obligation: The processing is necessary for compliance with a legal obligation to which we are subject.

5. Sharing Your Personal Data

We may share your Personal Data with the following categories of recipients:

Service Providers: Third parties who perform functions on our behalf, such as payment processors (who only receive the data necessary to process your payment securely), logistics and delivery companies (to deliver your order), and IT support.
Affiliates and Partners: Businesses that are legally part of the same group as Erabah, or partners with whom we collaborate for joint promotions, only with your explicit consent where required.
Regulators and Law Enforcement: Government bodies, regulatory authorities, or law enforcement agencies when legally required to do so under UAE law or a valid legal process.

We do not sell or rent your Personal Data to third parties for their independent marketing purposes without your explicit consent.

6. International Data Transfers

As an e-commerce business, we may transfer your Personal Data outside of the UAE to service providers located in other countries. When we transfer your data internationally, we ensure a level of protection at least equivalent to that required by the UAE PDPL by implementing appropriate safeguards, such as transferring data only to countries that provide an adequate level of protection or by entering into necessary contractual clauses.

7. Your Data Protection Rights (Data Subject Rights)

Under the UAE PDPL, you have the right to:

Right of Access: Request access to your Personal Data and obtain a copy of it.
Right to Rectification: Request the correction of inaccurate or incomplete Personal Data.
Right to Erasure (“Right to be Forgotten”): Request the deletion of your Personal Data when it is no longer necessary for the purpose for which it was collected.
Right to Restriction of Processing: Request us to temporarily limit the processing of your Personal Data under certain circumstances.
Right to Object to Processing: Object to the processing of your Personal Data for purposes like direct marketing.
Right to Data Portability: Request your Personal Data in a structured, commonly used, machine-readable, and interoperable format.
Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent. This will not affect the lawfulness of processing carried out before you withdraw your consent.

To exercise any of these rights, please contact us using the details provided in Section 9. We will respond to your request within the timeframe required by the PDPL.

8. Data Security and Retention

Data Security

We implement appropriate technical and organizational measures to protect your Personal Data against unauthorized access, use, alteration, disclosure, or destruction. These measures include data encryption, firewalls, and secure access controls.

Data Retention

We will retain your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements under UAE law.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, your rights, or how we handle your Personal Data, please contact our dedicated Data Protection point of contact:

Company Legal Name: Erabah Global FZC

Trade License Number: 8163

Registered Address: Block B-B41-072, Sharjah Research Technology and Innovation Park, Sharjah.

Email: contact@erabah.com

Telephone: +971 54 742 9444

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by posting the new policy on the Site and updating the “Last Updated” date. We encourage you to review this Policy periodically.