PRIVACY POLICY

1. Information we collect

We collect information that you provide directly — email address when you subscribe to newsletters or create an account, search filters when you save a search, and payment details (processed by Stripe and never stored on our servers) when you subscribe to Insider.

We also collect technical information automatically: pages viewed, browser type, approximate location derived from IP, and anonymous usage statistics.

2. How we use your data

• To send the price-drop digest and product updates you opt into
• To personalise your saved searches and alerts
• To process subscription payments via Stripe
• To improve site functionality and surface better deals
• To comply with legal obligations under UAE law

3. Cookies & tracking

We use three categories of cookies:

• Necessary — required for authentication and basic site function. Cannot be disabled.
• Analytics — anonymous page-view counts to improve the product. Optional.
• Marketing — to remember your saved searches and improve email targeting. Optional.

You can manage your cookie preferences at any time via the banner on your first visit, or by clearing your browser storage to be prompted again.

4. Data sharing

We do not sell your personal data. We share limited data only with the following processors, all of whom are GDPR/PDPL-compliant:

• Supabase (database hosting, EU/US)
• Stripe (payment processing, US)
• Resend (transactional email, US)
• Netlify (site hosting + CDN, US)

5. Your rights

Under UAE PDPL you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Withdraw consent for non-essential processing at any time
• Receive your data in a portable format
• Lodge a complaint with the UAE Data Office

To exercise any of these rights, email privacy@uaepricedrops.com. We will respond within 30 days.

6. Data retention

We retain account data while your account is active and for 12 months after you delete it (to comply with UAE financial-records requirements). Newsletter subscriptions are retained until you unsubscribe.

7. Security

All data is encrypted in transit (TLS 1.3) and at rest. Payment details are processed directly by Stripe — we never see or store credit-card numbers. Authentication uses magic-link email tokens; we never store passwords.

8. Changes to this policy

We will notify subscribers by email of material changes. Continued use of the site after changes implies acceptance.

9. Contact

Questions about privacy? privacy@uaepricedrops.com.