Privacy Policy

This Privacy Policy explains how the online jewellery store Rangiferra at rangiferra.com/ae (the “Store”, “we”) collects, uses, stores and protects the personal data of its users and customers (“you”).

We process personal data of customers in the United Arab Emirates in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”).

When you place an Order, we collect:

• your first and last name;
• your phone number;
• your emirate, city and delivery address;
• the items and total of your Order;
• a comment to the Order, if you leave one.

We collect your email address only if you give it to us yourself.

If you leave a review of a purchased item, we collect the name you enter, your rating and the text of the review. Reviews are published on the product page after moderation.

When you visit the website, technical data is processed automatically: IP address, device and browser type, cookies (section 6) and how you use the website.

There are no payments on the website: you pay the courier on delivery. We do not collect, process or store your bank card details.

• to accept and fulfil your Order, including buying and delivering the piece;
• to contact you about your Order, including by messenger to help you choose the size — this is part of fulfilling the contract, not advertising;
• to provide customer support;
• to publish reviews you choose to leave;
• to protect the order form from automated and repeated abuse;
• to understand how the website is used and improve it;
• to comply with legal obligations, including accounting.

We do not use your personal data for advertising mailings.

• processing is necessary to perform the contract with you (the Terms of Sale) or to take steps at your request before entering into it;
• your consent, given when you place an Order or leave a review;
• compliance with our legal obligations.

We do not sell personal data and do not share it for marketing purposes. Data is shared only with those without whom the Order cannot be fulfilled or the website cannot run:

• Courier company in the UAE — your name, phone number, delivery address and the amount payable on delivery, to deliver the Order and collect payment;
• Supabase — database hosting for Orders and reviews;
• Vercel — website hosting and request processing;
• Cloudflare — the Turnstile service, which checks that a human is placing the Order;
• Google — Google Analytics, which collects statistics on website use (pages viewed, device type, approximate location) without your name or phone number;
• Telegram — only if you connect the Order status bot yourself; the bot receives the Order number and its status.

The Store is operated from Ukraine, and the servers of Supabase, Vercel, Cloudflare, Google and Telegram are located outside the United Arab Emirates. Your data is therefore transferred outside the UAE. We transfer it because this is necessary to perform the contract with you, and only to providers that apply appropriate security measures.

The website uses the following cookies:

• rangiferra_did — a random device identifier used to protect the order form from abuse (limiting the number of attempts); it does not contain your name, phone or other details;
• rangiferra_slogan — which slogan variant is shown on the home page; a session cookie deleted when you close the browser;
• rangiferra_market — remembers which country’s website you chose (Ukraine or the UAE) so that you are not redirected again; set on your first visit to the UAE website and kept for one year; it contains no personal data;
• rangiferra_admin — access to the staff area; set only for Store staff;
• Google Analytics cookies (_ga and _ga_*) — anonymous website usage statistics.

Your cart and favourites are kept in your browser’s local storage, not on our servers, and are not sent anywhere until you place an Order.

Cloudflare Turnstile may set its own technical cookies. You can block cookies in your browser settings, but the order form may then fail its check and you will not be able to place an Order.

Under the PDPL, you have the right to:

• obtain information about the personal data we hold about you and how we process it;
• request a copy of your data, including in a structured, machine-readable format;
• request correction of inaccurate or outdated data;
• request erasure of your data where there is no lawful ground to keep it;
• request restriction of processing or object to processing;
• withdraw your consent at any time, without affecting processing carried out before withdrawal;
• file a complaint with the UAE Data Office if you believe your data is processed unlawfully.

To exercise these rights, contact us using the details in section 10.

Order data is kept for as long as needed to fulfil the Order and then for the periods required for accounting and for handling possible claims about the quality of the Goods.

Technical data used to protect the order form is kept no longer than needed for that protection. When there is no longer a lawful ground for processing, data is deleted or anonymised.

We apply organisational and technical measures to protect personal data from unauthorised access, loss, destruction or disclosure, including encrypted connections (HTTPS) and restricted access to the database and the staff area of the website.

For any questions about your personal data, contact us:

• Store name: Rangiferra
• Website: rangiferra.com/ae
• The Seller operates from Kyiv, Ukraine.
• Email: rangiferra@gmail.com
• Hours: 09:00–21:00 (Kyiv time)

We may update this Policy. The current version is always available on this page; the date of the last update is shown at the top.