1. Who is responsible for your data
LifeCarePack Plastic Trading L.L.C. ("LifeCarePack", "we") is the data controller for the personal information collected through this website. We comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable Abu Dhabi data-protection rules.
2. What we collect
We collect only the data we need to operate the store and fulfill orders:
- Account data: name, email, phone number, hashed password, optional saved addresses.
- Order data: items purchased, prices, order status, delivery address, payment method, optional delivery notes.
- Communication data: contact-form submissions, newsletter email, customer-service messages.
- Technical data: IP address, browser/user-agent, pages visited, timestamps. Used for security, fraud prevention, and aggregate analytics.
- Cookies & local storage: session cookies (HttpOnly, SameSite=Lax) to keep you logged in; localStorage for cart, wishlist, recently-viewed items, and theme preference. We do not currently use third-party advertising cookies.
3. Why we use it
- To process orders — confirming, packing, delivering, invoicing, and refunding.
- To run accounts — sign-in, password reset, order history, saved addresses.
- Customer support — answering enquiries, handling returns and complaints.
- Communications — order-status emails, password reset links, newsletter (only if you subscribe; you can unsubscribe at any time).
- Security & fraud prevention — rate limiting, abuse detection, audit logs.
- Legal compliance — tax, accounting, and regulatory record-keeping under UAE law.
4. Lawful basis
Processing is based on (a) your consent (e.g. newsletter), (b) the contract you enter into when you place an order, (c) our legitimate interests (e.g. preventing fraud, debugging the website), and (d) legal obligations (e.g. VAT records).
5. Who sees your data
We only share personal data with parties that need it to operate the service:
- Cloud infrastructure (Cloudflare — hosting, DNS, bot mitigation).
- Email delivery provider (Brevo — transactional emails).
- Payment processor when you choose online card payment (the payment processor handles card data directly; we receive only an outcome and reference).
- Delivery staff so they can deliver your order.
- Government authorities if legally required.
We do not sell your personal data to third parties.
6. International transfers
Some of our service providers operate outside the UAE. Where data is transferred internationally, we rely on the recipient's compliance with applicable data-protection law and contractual safeguards.
7. How long we keep it
- Account data — for as long as your account is active, plus a reasonable period for record-keeping.
- Order & invoice data — at least five years to comply with UAE tax-record obligations.
- Marketing email subscriptions — until you unsubscribe.
- Server access logs & security data — typically 90 days.
8. Security
- HTTPS everywhere, HSTS, secure cookies, strong content-type and frame protections.
- Passwords stored using PBKDF2 with 100,000 iterations; we never see your plaintext password.
- Payment card numbers, where applicable, are handled only by the PCI-compliant payment processor.
- Rate limiting and origin-checking on sensitive endpoints to deter abuse.
9. Your rights
You can ask us to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and personal data (subject to legal record-keeping obligations on completed orders).
- Withdraw consent (e.g. unsubscribe from marketing).
- Lodge a complaint with the UAE Data Office or another competent authority.
To exercise these rights, email us using the address on the Contact page. We will respond within a reasonable period and at no charge unless your request is manifestly unfounded or excessive.
10. Children
This website is not directed to children under 18 and we do not knowingly collect personal data from them. If you believe a child has provided personal data, contact us and we will delete it.
11. Cookies in detail
- Strictly necessary — session cookie that keeps you signed in.
- Functional — local-storage entries for cart, wishlist, recently-viewed, theme. Stored only on your device.
- Map data — when you use the address-picker map, tile imagery is fetched from OpenStreetMap.
12. Changes
We may revise this policy from time to time. The "Effective date" reflects the most recent revision. Material changes will be notified prominently on the website.
13. Contact
Questions about your data? Reach out using the details on the Contact page.