Privacy Policy

Last updated: July 25, 2026

1. Introduction

GALARAY EVENTS L.L.C S.O.C ("Galaray", "we", "our", "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a purchase.

2. Data We Collect

We collect personal information you provide directly when you:

• Place an order (name, delivery address, phone number, email)
• Create an account (email, password, preferences)
• Subscribe to our newsletter (email address)
• Contact us (name, email, message content)
• Make a payment (payment card details processed by our PCI-DSS certified provider — we do not store card numbers)

We also automatically collect technical data through cookies and similar technologies (IP address, browser type, pages viewed, referral source).

3. How We Use Your Data

• Process and deliver your orders
• Send order confirmations and shipping updates
• Respond to customer service inquiries
• Send marketing communications (only with your consent)
• Improve our website and services
• Comply with legal obligations (tax, accounting, anti-fraud)

4. Legal Basis for Processing

• Contract performance: to fulfill your orders
• Legal obligation: to comply with UAE tax and consumer protection laws
• Legitimate interest: to improve our services and prevent fraud
• Consent: for marketing communications and non-essential cookies

5. Data Sharing

We only share your data with:

• Payment processors (Shopify Payments, Tabby, Tamara) to complete transactions
• Delivery partners to fulfill your order
• Email service providers to send transactional and marketing emails
• UAE authorities if legally required

We never sell your personal data to third parties.

6. Data Retention

We keep your data only as long as necessary for the purposes stated above, or as required by UAE law (typically 5 years for accounting records under UAE FTA regulations).

7. International Data Transfers

Some of our service providers (e.g. Shopify, Vercel) are located outside the UAE. When we transfer your data internationally, we ensure appropriate safeguards (Standard Contractual Clauses, adequacy decisions) are in place.

8. Your Rights Under UAE PDPL

In accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing (including marketing)
• Right to withdraw consent at any time
• Right to lodge a complaint with the UAE Data Office

To exercise these rights, contact us at contact@galaray.ae. We will respond within 30 days.

9. Your Rights Under GDPR (EU Visitors)

If you are an EU resident, you also benefit from the rights granted under the General Data Protection Regulation (EU 2016/679), which mirror those above. You may lodge a complaint with your local supervisory authority.

10. Security

We implement industry-standard technical and organizational measures to protect your data: HTTPS encryption, PCI-DSS compliant payment processing, restricted access, regular security audits, and encrypted backups.

11. Cookies

We use cookies to improve your experience. Details of our cookie use are available in our Cookie Policy. You can manage your preferences at any time through our cookie banner.

12. Children

Our services are not directed to children under 18. We do not knowingly collect data from minors. If you believe a child has provided us data, please contact us for immediate removal.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or a prominent notice on our website.