Privacy Policy

1.Who is responsible for your data

Orvione.ae, licensed in Dubai under trade licence number [LICENCE NUMBER], is the controller of the personal data collected through ORVIONE.AE.

For anything about your data, write to support@orvione.ae or call 0504018823. A named member of our team handles these requests.

2.What we collect

We do not collect data revealing your racial or family origin, political or religious beliefs, criminal record, health or biometrics. Please do not send us such information.

• Your name, phone number, email address and delivery address — so we can take and deliver an order
• What you ordered, when, and the amount — your order history
• Payment confirmation from our payment provider. We never see or store your full card number
• Messages you send us, and notes from calls about your order
• How you use the website: pages viewed, device and browser, and an approximate location from your IP address

3.Why we are allowed to use it

UAE law requires your consent unless one of the exceptions in Article 4 of Federal Decree-Law No. 45 of 2021 applies. Two of them cover almost everything we do.

• To perform our contract with you — Article 4(9). This covers taking your order, delivering it, taking payment, handling returns and warranty claims, and contacting you about an order you placed. We cannot sell to you without this, so it does not depend on consent.
• With your consent — Article 4(1). This covers marketing emails and messages, and the analytics and advertising tools described below. You can refuse, and still buy from us exactly as before.
• To meet a legal obligation — for example keeping tax and invoice records.

Everything that depends on your consent is optional. Refusing it never blocks a purchase, and withdrawing it later is as easy as giving it.

4.Marketing, and how to stop it

We send marketing only to people who asked for it. Every message carries an unsubscribe link, and unsubscribing takes effect immediately.

A call or message about an order you already placed — confirming a cash-on-delivery order, arranging a delivery time, telling you about a delay — is not marketing, and continues even if you have unsubscribed. If you would rather we did not call at all, tell us and we will note it.

Marketing calls are made only between 9:00 and 18:00, only to people who opted in, and never to a number on the national Do Not Call Registry, as required by Cabinet Resolution No. 56 of 2024.

5.Advertising and measurement

We advertise on Meta (Facebook and Instagram). To know which adverts actually lead to orders — and to stop paying for the ones that do not — we use Meta's measurement tools on this website.

What we share with Meta is the event itself: a page was viewed, an item was added to the cart, an order was placed and for how much. When an order is placed we also send your email, phone number, name and city, but scrambled first with a one-way code (SHA-256). Meta uses it only to match the order to an advert it already showed you; it cannot read the original back out of it.

We never send Meta your delivery address, your payment details or what is inside your order beyond its value.

You can tell us to stop at any time. Write to support@orvione.ae and we will exclude you from advertising measurement — Article 17 of Federal Decree-Law No. 45 of 2021 gives you that right, we do not ask for a reason, and it changes nothing about your order, your delivery or your prices. You can also limit what Meta does with your data from your own Meta account settings.

6.Who we share it with

We do not sell your personal data, and we do not share it with anyone for their own marketing.

• Our courier — your name, address and phone number, so the parcel reaches you
• Our payment providers, including the instalment provider if you choose instalments
• The companies that host our website and send our email and SMS
• Our accountant and auditor, and any authority entitled to the information by law
• Meta, for advertising measurement, as described above

7.Data that leaves the UAE

Some of our providers store data outside the UAE. Articles 22 and 23 of Federal Decree-Law No. 45 of 2021 allow this, and we rely on two grounds: a written contract obliging the provider to protect your data to the standard the law requires, and, for anything optional such as advertising tools, your express consent.

We check what a provider commits to before we use it, and we keep the list of providers under review.

8.How long we keep it

When a purpose is finished we delete the data or anonymise it so it can no longer identify you.

• Order and invoice records: for the period UAE tax and commercial law requires
• Your account: for as long as you keep it, and 6 months after you ask us to close it
• Marketing consent and the record of it: until you withdraw it, then a minimal record that you did
• Our own visit counts: 14 months, then they are aggregated so they no longer point to anyone

9.Your rights

Under Federal Decree-Law No. 45 of 2021 you can ask us to:

Write to support@orvione.ae. We aim to answer within 30 days. That is a service commitment we set ourselves — the law does not yet fix a deadline — and we will tell you if a request is complex and needs longer.

If you are not satisfied with our answer, you may complain to the UAE Data Office.

• Tell you what we hold and why, and give you a copy — free of charge (Articles 13, 14)
• Correct anything inaccurate, or delete data we no longer need (Article 15)
• Restrict how we use it while a question is being resolved (Article 16)
• Stop using it for direct marketing or related profiling (Article 17)
• Have a person review a decision made automatically about you (Article 18)

10.Keeping it safe

The website runs over an encrypted connection, access to customer data is limited to the people who need it for their work, and our providers are chosen for their security as much as their price.

If a breach ever happens that could affect you, we will notify the authority and tell you directly, explaining what happened and what to do.

11.Children

This shop is for adults. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, tell us and we will delete it.

12.Changes to this notice

We update this page when our practices change and when the Executive Regulations to the UAE data protection law are issued, which is still awaited. The date at the top always shows the current version.