Last updated: 10/2/2025
1. Introduction
At Chich Mark, your privacy is very important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit or make purchases via our website or other services. By using our services, you consent to this policy.
We respect the requirements of the UAE Personal Data Protection Law (PDPL) and applicable consumer protection / e‑commerce laws.
2. Data We Collect
We may collect the following types of personal data:
- Identity & Contact Information — name, email address, phone number, billing address, shipping address
- Account Information — username, password, order history
- Payment Data — credit/debit card number (or payment token), transaction information
- Usage Data — browser type, device IP address, pages visited, time spent
- Cookies & Tracking Data — cookies, pixels, web beacons, analytics data
- Communications — messages you send us (support inquiries, feedback)
We collect this data directly from you (e.g. when you place an order or fill a form) or automatically (e.g. via cookies).
3. Purposes & Lawful Basis for Processing
We process your personal data for these purposes:
| Purpose | What We Do | Legal Basis / Justification |
|---|---|---|
| Order fulfillment | To process and deliver purchases, send confirmations / shipping updates | Performance of contract |
| Customer support & communication | Respond to inquiries, resolve issues, send transactional messages | Legitimate interest / contract |
| Marketing & Promotions | Send newsletters, offers (if you opted in) | Consent (you may withdraw anytime) |
| Analytics & improvement | Understand website behavior, improve our offerings | Legitimate interest |
| Fraud prevention & security | Detect and prevent fraud, protect your data | Legitimate interest, legal obligation |
| Legal & regulatory compliance | Maintain records, respond to government requests | Legal obligation |
We will only collect and use your data for a purpose compatible with one of the above, and not for unrelated purposes without your consent.
4. Cookies & Similar Technologies
We use cookies, web beacons, and tracking technologies to:
- Enable website functionality (e.g. remember your login, shopping cart)
- Analyze website usage and performance
- Personalize content, offers, and marketing
You can control or delete cookies via your browser settings, but disabling cookies may affect the functionality of our site.
5. Disclosure / Sharing of Data
We may share your personal data in these ways:
- Service Providers & Partners: shipping / logistics companies, payment processors, email / marketing platforms
- Business Transfers: in case of merger, acquisition, or sale of assets
- Legal & Regulatory: when required by law, government request, or to protect rights and safety
- With your Consent: where you agree to certain sharing (e.g. third‑party marketing)
If data is transferred outside the UAE, we will ensure that adequate safeguards are in place in compliance with the PDPL.
6. Data Retention
We retain your personal data only as long as necessary for the purposes outlined above, or as legally required (e.g. for tax, audit, legal disputes). Once no longer needed, we will securely delete or anonymize the data.
7. Your Rights
Under the UAE PDPL (and other applicable laws), you have rights including:
- Access your personal data we hold
- Rectification of inaccurate or incomplete data
- Deletion / Erasure (“right to be forgotten”) in certain circumstances
- Restriction of processing
- Objection to processing (especially for direct marketing)
- Data portability — receive data in structured form
- Withdraw consent at any time (for processing based on consent)
To exercise these rights, please contact us (see section “Contact Us” below). We may ask you to verify your identity before responding.
8. Security
We implement technical and organizational security measures to protect your data, such as:
- Encryption (in transit via HTTPS, and at rest)
- Access controls and restricted access to authorized personnel
- Regular security audits and monitoring
- Secure storage and internal policies
In the unlikely event of a data breach, we will promptly notify affected individuals and authorities as required under applicable law.
9. Children
Our services are not intended for children under the age of 16 (or local legal minimum). We do not knowingly collect data from minors. If you believe we have collected data from a child, please contact us so we can delete it.
10. Updates to This Policy
We may revise this Privacy Policy from time to time (for example, to comply with changes in law or business practices). We will notify you of significant changes by posting the updated version on our site, with the “Last updated” date. Your continued use of our service after such updates constitutes acceptance.
11. Contact Us
If you have any questions, requests, or complaints concerning your privacy or this policy, please contact:
Chich Mark
Email: info@chichmark.com
Phone: +971 56 870 0930