This Privacy Policy describes how Faqihi Enterprises LLC ("we", "us", "our") collects, uses, stores, and protects personal information provided by visitors, customers, and business partners ("you") when you use our website, mobile applications, or any related services.
This policy applies to all personal data processed by Faqihi Enterprises LLC in connection with our e-commerce operations, B2B trade accounts, marketing activities, and customer support functions. It does not apply to third-party websites or services linked from our platform.
By accessing or using our services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services and contact us to request deletion of any data we may hold.
We collect personal data through multiple channels — directly from you when you register, place an order, or contact us, and automatically through our website and analytics tools.
| Category | Data Types | Source |
|---|---|---|
| Identity Data | Full name, username, title, date of birth, gender | Registration, order forms |
| Contact Data | Email address, phone/WhatsApp number, delivery address, billing address | Account creation, checkout |
| Business Data | Company name, trade licence number, VAT registration, industry type | B2B account application |
| Transaction Data | Order history, purchase amounts, payment method type (not card numbers), invoices | Order processing system |
| Technical Data | IP address, browser type, device identifiers, operating system, time zone | Cookies, analytics tools |
| Usage Data | Pages viewed, search queries, products clicked, session duration, referral source | Website analytics |
| Communication Data | Enquiry messages, support tickets, chat transcripts, email correspondence | Contact form, email, phone |
| Marketing Data | Communication preferences, subscription status, campaign interactions | Newsletter sign-up, account settings |
We use your personal data only for the purposes outlined below and on a lawful basis at all times:
- Order fulfilment: Processing, confirming, dispatching, and delivering your orders; communicating order status and tracking updates via email, SMS, or WhatsApp.
- Account management: Creating and maintaining your customer account, authenticating logins, managing saved addresses, wishlists, and order history.
- Payment processing: Facilitating secure payment transactions and issuing tax invoices compliant with UAE Federal Tax Authority requirements.
- Customer support: Responding to enquiries, resolving complaints, processing returns, warranty claims, and after-sales requests.
- B2B trade services: Evaluating trade account applications, issuing bulk quotations, managing credit terms, and processing purchase orders.
- Marketing communications: Sending promotional emails, product updates, and exclusive offers — only where you have given explicit consent or have an existing customer relationship.
- Website improvement: Analysing usage patterns, optimising site performance, and conducting A/B testing to improve user experience.
- Legal compliance: Meeting obligations under UAE commercial law, tax law, anti-money laundering regulations, and responding to lawful government requests.
- Fraud prevention: Detecting, investigating, and preventing fraudulent orders, chargebacks, account misuse, and security breaches.
We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:
- Delivery & logistics partners — courier companies (e.g., Aramex, DHL, SMSA) receive your name, phone number, and delivery address to fulfil your shipment.
- Payment processors — PCI-DSS certified providers (e.g., Stripe, Network International, Tabby) process transaction data. They do not receive your full browsing history.
- IT & cloud infrastructure providers — hosting, database, and cloud services that store and process data on our behalf under strict data processing agreements.
- Email & SMS service providers — used to send transactional messages (order confirmations, dispatch alerts) and marketing communications (where consented).
- Analytics providers — tools such as Google Analytics process anonymised usage data to help us understand website performance.
- Brand & manufacturer partners — for warranty claims and product support, we may share relevant order data with authorised service centres (e.g., Bosch, Makita UAE distributors).
- Legal & regulatory authorities — UAE government bodies, courts, or law enforcement when required by applicable law or to protect our legal rights.
- Business transfers — in the event of a merger, acquisition, or sale of assets, customer data may be transferred to the successor entity under equivalent privacy protections.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Retention periods vary by data category:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account data | Duration of account + 3 years after closure | Customer service, legal disputes |
| Order & transaction records | 7 years | UAE Commercial Transactions Law, VAT compliance |
| Tax invoices | 5 years minimum | UAE Federal Tax Authority requirement |
| Support communications | 3 years | Quality assurance, dispute resolution |
| Marketing preferences | Until consent withdrawn | PDPL consent requirement |
| Analytics & usage data | 26 months (anonymised) | Website performance analytics |
| Cookie data | Varies (see Cookie Policy) | Session management, preferences |
| CCTV footage (showroom) | 30 days unless incident | Security purposes |
After the applicable retention period, data is securely deleted or anonymised. Anonymised data may be retained indefinitely for statistical and business intelligence purposes as it cannot be linked back to any individual.
We implement industry-standard technical and organisational measures to safeguard your personal data against unauthorised access, accidental loss, alteration, or disclosure.
- All data transmitted via our website is encrypted using TLS 1.3 / SSL encryption
- Payment processing handled exclusively by PCI-DSS Level 1 certified gateways
- Customer passwords stored as salted bcrypt hashes — never in plain text
- Role-based access controls limit staff access to data on a need-to-know basis
- Regular penetration testing and security audits conducted by independent third parties
- Two-factor authentication (2FA) available and encouraged for all customer accounts
- Automatic session timeout after 30 minutes of inactivity
- Real-time fraud monitoring on all payment transactions
- Data backup systems with encrypted offsite storage
- Staff data protection training conducted annually
Our website uses cookies — small text files stored on your device — to improve functionality, remember your preferences, and understand how our site is used. You can manage your cookie preferences below.
You may also control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website, such as preventing items from being saved in your cart.
We use the following third-party services that may set cookies: Google Analytics (usage tracking), Hotjar (heatmaps), Google Tag Manager (tag management), Stripe (payment fraud prevention), and Tabby (instalment payment flow).
Our services are intended for individuals aged 18 years and above. We do not knowingly collect personal data from children under the age of 18. Our products are professional-grade industrial and commercial tools not intended for use by minors.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at privacy@faqihienterprises.com and we will take prompt steps to delete that information from our systems.
Faqihi Enterprises LLC is based in Dubai, UAE, and primarily processes data within the UAE and GCC region. However, certain service providers (such as cloud hosting and analytics tools) may process data on servers located outside the UAE.
Where data is transferred internationally, we ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses (SCCs) with service providers in jurisdictions without adequate data protection laws
- Binding Corporate Rules (BCRs) where applicable for multinational service providers
- Transfers only to countries recognised by the UAE Data Office as providing adequate protection
- Explicit consent obtained from you where required by applicable law
Countries where our data processors may be based include: Germany (Bosch support systems), United States (Google Analytics, AWS), United Kingdom (payment infrastructure), and India (customer support tools). All transfers are governed by appropriate data protection agreements.
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or new services we introduce. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Display a prominent notice on our website for at least 30 days
- Send an email notification to registered account holders with a summary of key changes
- For significant changes affecting your rights, seek fresh consent where legally required
We encourage you to review this page periodically. Your continued use of our services after any changes constitutes your acceptance of the revised policy. Previous versions of this policy are available on request by contacting our Data Protection Officer.
| Version | Date | Key Changes |
|---|---|---|
| v3.0 (Current) | 1 May 2026 | Updated cookie preferences, added cross-border transfers section, aligned with UAE PDPL 2021 |
| v2.0 | 15 Jan 2025 | Added B2B data processing, Tabby payment integration, data retention table |
| v1.0 | 1 Mar 2022 | Initial policy for e-commerce launch |
If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your personal data, please contact our Data Protection Officer (DPO). We are committed to resolving all queries promptly and transparently.