Scope and our role
This Privacy Policy applies to personal data processed through sweetlouziye.com, our online store, order and customer-care communications, corporate and bulk-gifting enquiries, and related services operated by Sweet Louziye in the United Arab Emirates.
For personal data for which we decide the purpose and means of processing, Sweet Louziye acts as the controller or equivalent responsible party under applicable data-protection law. Our store is hosted by Shopify, and Shopify and certain integrated services may also process personal data in accordance with their own terms and privacy notices.
This Policy does not apply to independent third-party websites, services, payment tools, social platforms, or delivery providers that publish their own privacy notices.
Personal data we collect
Information you provide
- Identity and contact data: name, email address, telephone number, billing address, delivery address, and account details where an account is available.
- Order and gifting data: products selected, quantities, flavours, packaging, gift messages, recipient details, corporate-gifting requirements, order history, and delivery instructions.
- Transaction data: payment status, currency, refunds, discounts, and limited payment-related information provided by payment processors. We do not intentionally store complete payment-card details.
- Communications: enquiries, feedback, support requests, survey responses, and records of communications with us by email, telephone, WhatsApp, Instagram, or other available channels.
- Marketing preferences: whether you choose to receive or refuse promotional communications and your related consent choices.
Information collected automatically or from others
- Device and usage data: IP address, browser and device type, operating system, language, approximate location derived from IP, pages viewed, referral source, interactions, and timestamps.
- Cookie and analytics data: identifiers and activity information collected through cookies, pixels, local storage, and similar technologies, subject to available consent controls.
- Service-provider data: information received from Shopify, payment providers, delivery partners, fraud-prevention providers, analytics services, advertising partners, and social platforms where permitted by law.
Please do not send us sensitive personal data that is not necessary for your order or enquiry. If you provide another person’s details, including a gift recipient’s name, address, or telephone number, you confirm that you are authorised to provide them for the intended delivery or service.
How and why we use personal data
We process personal data only for clear and lawful purposes, including where processing is needed to perform or prepare an order, comply with law, protect rights and security, or where you have given valid consent when consent is required.
- To provide the website, create and manage customer accounts, process orders, payments, deliveries, returns, and refunds.
- To prepare gifts, contact recipients or purchasers when necessary, and manage corporate, bulk, or personalised enquiries.
- To communicate about orders, respond to questions and complaints, and provide customer care.
- To verify transactions, prevent fraud, misuse, security incidents, or unlawful activity, and enforce our terms.
- To maintain business, tax, accounting, product-safety, and legal records and respond to lawful requests.
- To understand website performance, improve our products and customer experience, and measure campaigns using aggregated or appropriately protected data where practical.
- To send marketing or personalise advertising only where permitted, taking account of your consent and opt-out choices.
If we need to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where applicable law requires it.
How we disclose personal data
We disclose only the personal data reasonably needed for the relevant purpose. Recipients may include:
- Shopify and approved store apps that provide hosting, storefront, checkout, account, analytics, security, and operational services.
- Payment processors, banks, and fraud-prevention services used to authorise, settle, verify, or refund transactions.
- Couriers, fulfilment providers, and delivery partners that require recipient and delivery details.
- Email, communications, customer-care, analytics, and marketing providers acting under appropriate instructions or their own lawful responsibilities.
- Professional advisers, insurers, auditors, and technology or security providers.
- Government, regulatory, judicial, law-enforcement, or other authorised parties where disclosure is required or permitted by law.
- A buyer, investor, successor, or adviser involved in a genuine business reorganisation, financing, sale, or transfer, subject to appropriate confidentiality and legal safeguards.
We do not sell personal data for money. Some analytics or advertising arrangements may be treated as a “sale,” “sharing,” or targeted advertising under certain laws; where those laws apply, we provide the consent or opt-out choices they require.
International data transfers
Shopify and other service providers may process or store personal data outside the United Arab Emirates. When personal data is transferred across borders, we take steps required by applicable law, which may include assessing the destination, using contractual or organisational safeguards, relying on an approved transfer mechanism, or obtaining consent where necessary.
Service providers may maintain infrastructure in multiple countries. Their own privacy notices provide further information about their locations and safeguards.
How long we keep personal data
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to complete orders, maintain customer-service and business records, meet tax, accounting, food-safety, regulatory, and legal obligations, prevent fraud, resolve disputes, and enforce agreements.
Retention periods vary by record type and legal context. When data is no longer required, we delete, anonymise, or securely isolate it, unless continued retention is required or permitted by law or technically necessary in protected backup systems.
Security and data accuracy
We use reasonable administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure service providers, payment-security practices, monitoring, and staff or contractor confidentiality requirements.
No website, transmission, or storage system can be guaranteed completely secure. You are responsible for protecting any account credentials and for notifying us promptly if you suspect unauthorised use. Please keep your contact and delivery details accurate so we can fulfil orders correctly.
Your privacy rights
Subject to applicable law, conditions, and exceptions, you may have the right to:
- Request information about the personal data we process and how it is used or shared.
- Request access to or a copy of your personal data.
- Correct inaccurate or incomplete personal data.
- Request deletion of personal data when there is no lawful reason to keep it.
- Restrict, stop, or object to certain processing, including direct marketing.
- Request transfer of eligible data in a structured, machine-readable form where applicable.
- Withdraw consent at any time, without affecting processing already carried out lawfully.
- Request information about qualifying automated decisions and object where applicable.
- Submit a complaint to the UAE Data Office or another competent data-protection authority where you have that right.
To protect customers and prevent fraud, we may request reasonable information to verify your identity and authority before acting. Rights are not absolute: we may retain or withhold information where law requires or permits, including for legal claims, the rights of others, security, or record-keeping obligations. We will respond within the period required by applicable law.
Marketing choices and children
Marketing
You may unsubscribe from promotional email using the link in the message or contact us using the details below. You may also refuse or stop promotional communication through the relevant channel. We may still send non-promotional messages needed for an order, security notice, service request, or legal matter.
Children
Our online purchasing services are intended for people who can enter a binding contract. We do not knowingly request personal data directly from children without the authorisation of a parent or legal guardian where required. If you believe a child has provided personal data improperly, please contact us so we can review and take appropriate action.
Third-party links and Policy updates
Our website may link to external websites, social platforms, or services. Their privacy and security practices are controlled by their operators, and we encourage you to review their notices before providing personal data.
We may update this Policy to reflect changes to our services, providers, technology, or legal requirements. The revised version will be posted on this page with an updated date. Where a change materially affects how we use personal data, we will provide any additional notice or choice required by law.
Contact us or make a privacy request
For a privacy question, rights request, or complaint, contact Sweet Louziye and describe what you need. We will review the request under the law that applies to you.