Privacy Policy

Last updated: 20/10/2025

Data controller: Vanillya Group FZE , Business Centre, Sharjah Publishing City Free Zone , Sharjah, UAE — privacy@vanillya.co .  

1) Data collected

• Account/order: identity, addresses, email, telephone.

• Transaction: references, amounts (card data is processed by our payment processors, not stored by us).

• Navigation: cookies/tracers (page views, UTM, device), analytics.

• Support/Marketing: messages, preferences, subscriptions.

2) Purposes & legal bases

• Execution of the contract : processing & delivery of orders, customer service.

• Legitimate interest : site improvement, fraud prevention, statistics.

• Legal obligation : invoicing & accounting.

• Consent : newsletters and marketing cookies.

3) Recipients / subcontractors

Hosting, payment service providers, logistics/transport, emailing/SMS, analytics. Contractual commitment to confidentiality and security.

4) International transfers

Possible transfers outside the EU/UK. We use standard contractual clauses (where applicable) and appropriate measures. UAE PDPL compliance for UAE; compliance with local obligations (GDPR/UK GDPR) for EU/UK customers.

5) Conservation

• Customer files/orders: duration of the relationship + legal obligations.

• Marketing: until consent is withdrawn.

• Cookies: depending on the purpose (see consent banner).

6) Rights of individuals

Access, rectification, erasure, limitation, portability, opposition, withdrawal of consent. Complaint possible with the local authority (e.g. CNIL/ICO). Contact: privacy@vanillya.co .

7) Cookies

Management via the consent banner (granularity setting: essential/analytics/marketing). List and durations in the Cookies Policy (or dedicated section).

8) Security

Reasonable technical and organizational measures (encryption, access control). Incident notification in accordance with applicable laws.

9) Modifications

Possible updates; the date at the top indicates the current version.