Version: 1.0 · Effective date: [INSERT EFFECTIVE DATE] · Last updated: 25 October 2026 · Contact:hello@fashuki.com
1. Who we are
[INSERT FULL UAE LEGAL COMPANY NAME] is the controller of personal data described in this policy when operating Fashuki. Our registered office is [INSERT FULL REGISTERED OFFICE ADDRESS, EMIRATE, UAE]. Our trade licence is [INSERT TRADE LICENCE NUMBER], issued by [INSERT LICENSING AUTHORITY]. Contact hello@fashuki.com. Data protection contact: [INSERT DPO CONTACT IF APPOINTED, OTHERWISE hello@fashuki.com].
2. Data we collect
Account and identity data, including name, date of birth where required, username, password hash, identification, verification results, and account type.
Contact and address data, including email, telephone number, delivery, return, billing, and business addresses.
Transaction data, including listings, baskets, orders, prices, fees, refunds, returns, disputes, invoices, seller balance, payout status, and payment references. Full card data is handled by the payment provider and is not stored by Fashuki.
Seller and business data, including licence, tax, bank, beneficial owner, source of goods, authenticity, performance, and compliance information.
Content and communications, including photographs, listings, reviews, support requests, reports, and messages exchanged through the platform.
Device and usage data, including IP address, device, browser, logs, pages, searches, clicks, referral source, cookie identifiers, and security events.
Location data inferred from address, IP, seller location, or delivery. Precise device location is collected only if a feature needs it and you permit it.
Fraud, safety, and compliance data, including risk signals, sanctions or identity checks, evidence, and moderation history.
3. How we use data and our grounds
We use data to create accounts, provide listings, process orders, coordinate payment and delivery, support users, prevent fraud, moderate content, enforce rules, improve the service, comply with law, establish or defend legal claims, and send permitted communications.
The legal ground depends on the activity. It may be performance of a contract, steps requested before a contract, compliance with law, protection of rights, consent, or another ground permitted by the UAE Personal Data Protection Law. Where we rely on consent, it must be clear and provable and may be withdrawn as easily as it was given.
4. Marketing
We send electronic marketing only where permitted. Each message will identify Fashuki and provide a simple unsubscribe. Account, security, order, delivery, policy, and service messages are not marketing. You can change preferences in your account or email hello@fashuki.com.
5. Who receives data
We share only the data reasonably needed with the buyer or seller involved in a transaction, payment providers, licensed couriers, hosting and technology suppliers, analytics or communications suppliers used with the appropriate consent or ground, identity and fraud providers, professional advisers, insurers, regulators, courts, law enforcement, rights holders, and a buyer of the business where lawful.
Our service providers: [INSERT ACTUAL PROCESSORS, PURPOSES, AND LOCATIONS, INCLUDING HOST, PAYMOB ENTITY, EMAIL, ANALYTICS, COOKIE PLATFORM, TRACKSHIP, AND SUPPORT TOOLS].
6. International transfers
Some recipients may process data outside the UAE. Before a transfer, we assess the destination and use a lawful transfer mechanism, contractual safeguards, consent where valid, or another exception permitted by UAE law. Contact us for information about applicable safeguards.
7. Retention
We keep personal data only for the period needed for the stated purpose, legal obligations, tax and accounting, fraud prevention, dispute resolution, and legal claims. We then delete or anonymise it securely.
Retention periods: account data [INSERT PERIOD], order and invoice records [INSERT PERIOD], identity verification [INSERT PERIOD], messages [INSERT PERIOD], support and disputes [INSERT PERIOD], security logs [INSERT PERIOD], cookie consent records [INSERT PERIOD], and marketing suppression records [INSERT PERIOD].
8. Security
We use organisational and technical safeguards appropriate to risk, including access controls, encryption where appropriate, secure development, monitoring, backups, supplier controls, staff confidentiality, and incident response. No service is completely secure. Users must protect passwords and report suspected compromise.
9. Your rights
Subject to UAE law and applicable exceptions, you may request information about processing, access, a copy or transfer of data, correction, erasure, restriction, cessation of direct marketing, review of certain automated decisions, and withdrawal of consent. You may also complain to the UAE Data Office or other competent authority.
Send a request to hello@fashuki.com. We may verify identity and ask for information needed to locate the data. We will respond within the legal period and explain any lawful refusal or limitation.
10. Automated decisions
Fashuki may use automated signals to detect fraud, unsafe activity, spam, or policy abuse. Where a decision has a serious legal or similarly significant effect, we provide information and human review rights as required by law.
11. Children
Fashuki is for users aged 18 or over. We do not knowingly offer accounts to children. If you believe a child has provided data, contact hello@fashuki.com.
12. Data breaches
We investigate suspected personal data breaches, contain risk, document decisions, and notify the UAE Data Office and affected individuals where and within the time required by law.
13. Changes and contact
We may update this policy. We will post the new version and give prominent notice of material changes where required. Questions and requests should be sent to hello@fashuki.com or [INSERT REGISTERED OFFICE ADDRESS].
We use necessary technologies to operate and secure Fashuki. With your permission, we also use preferences, analytics, and marketing technologies. Read our Cookie Policy and Privacy Policy.
