Privacy policy

Last updated: May 10, 2026

La Suede beauty LLC S.P.C (registered in Abu Dhabi, United Arab Emirates) operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). xlash.ae is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

This Privacy Policy is governed by and complies with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations, as well as any other applicable UAE laws and regulations.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term "personal information," we are referring to information that identifies or can reasonably be linked to you or another person. We may collect or process the following categories of personal information, depending on how you interact with the Services:

  • Contact details including your name, address, billing address, shipping address, phone number, and email address.
  • Financial information including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, and payment confirmation. All payment transactions are processed securely through Telr, our certified payment gateway. We do not store, sell, share, rent or lease your credit/debit card details. Your card information is transmitted directly to Telr and is handled in accordance with Telr's Privacy Policy and PCI DSS (Payment Card Industry Data Security Standard) compliance requirements. xlash.uae will not pass any debit/credit card details to any third parties other than Telr for the sole purpose of processing your payment.
  • Account information including your username, password, security questions, preferences and settings.
  • Transaction information including the items you view, put in your cart, add to your wishlist, or purchase, return, exchange or cancel, and your past transactions.
  • Communications with us including the information you include in communications with us, for example, when sending a customer support inquiry.
  • Device information including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Legal Basis for Processing

Under the UAE PDPL, we process your personal information on the following legal grounds:

  • Performance of a contract — to process your orders, payments, and deliver the Services you have requested.
  • Consent — for marketing communications and non-essential cookies, where we have obtained your explicit consent.
  • Legitimate interests — for fraud prevention, security, improving our Services, and analytics, where these interests are not overridden by your rights.
  • Legal obligation — to comply with applicable UAE laws and regulations.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you — when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information.
  • Automatically through the Services — from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
  • From our service providers — including Shopify (hosting and e-commerce platform), Telr (payment processing), IQ Fulfillment (logistics and order fulfillment), and other partners who collect or process your personal information on our behalf.
  • From our partners or other third parties — including Instagram (@xlasharabia) and TikTok (@xlasharabia) when you interact with our social media content.

How We Use Your Personal Information

We may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services — to process your payments via Telr, fulfill your orders through IQ Fulfillment, manage your account, arrange shipping, facilitate returns and exchanges, and create a customized shopping experience.
  • Marketing and Advertising — to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you relevant online advertisements including through our Instagram (@xlasharabia) and TikTok (@xlasharabia) channels. We will only do so where we have your consent or a legitimate interest to do so.
  • Security and Fraud Prevention — to authenticate your account, detect and prevent fraudulent or malicious activity, and secure our services.
  • Communicating with You — to provide customer support and maintain our business relationship with you.
  • Legal Compliance — to comply with applicable UAE law and respond to valid legal process, including requests from UAE law enforcement or government agencies.

Cookie Policy

We use cookies and similar tracking technologies to improve your browsing experience on our website. Cookies are small text files stored on your device that help us provide and improve our services.

Types of cookies we use:

  • Essential cookies — Required for the website to function properly (e.g., shopping cart, checkout).
  • Analytics cookies — Help us understand how visitors interact with our site (e.g., Google Analytics).
  • Marketing cookies — Used to deliver relevant ads and track the effectiveness of our campaigns, including on Instagram (@xlasharabia) and TikTok (@xlasharabia).
  • Preference cookies — Remember your settings and preferences for a better experience.

Your choices: Non-essential cookies (analytics, marketing, preference) are only placed with your consent. You can withdraw your consent or manage your cookie preferences at any time through your browser settings or our cookie consent tool. Please note that disabling certain cookies may affect the functionality of our website.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy:

  • Service providers — including Shopify (hosting and platform), Telr (payment processing), IQ Fulfillment (logistics and order fulfillment), IT management, data analytics, and customer support providers, who process data on our behalf.
  • Business and marketing partners — to provide marketing services and advertise to you, including through Instagram (@xlasharabia) and TikTok (@xlasharabia). Our business and marketing partners will use your information in accordance with their own privacy notices.
  • When you direct or consent — such as to ship you products via IQ Fulfillment, or through your use of social media widgets or login integrations, including our social media pages on Instagram (@xlasharabia) and TikTok (@xlasharabia).
  • Within our corporate group — with our affiliates or otherwise within our corporate group.
  • Legal and business reasons — in connection with a business transaction such as a merger, to comply with applicable legal obligations (including requests from UAE authorities), to enforce our terms of service, or to protect our rights and the rights of our users.

We do not sell your personal information to third parties.

Relationship with Shopify

The Services are hosted by Shopify Inc. (Canada), which collects and processes personal information about your access to and use of the Services. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than the UAE. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. You may also exercise certain rights with respect to your personal information via the Shopify Privacy Portal.

Social Media

You may interact with us through our social media channels on Instagram (@xlasharabia) and TikTok (@xlasharabia). Please note that these platforms have their own privacy policies and data practices, which are independent of ours. We recommend reviewing Instagram's Privacy Policy and TikTok's Privacy Policy before engaging with our content on those platforms.

International Transfers of Personal Data

As our Services are hosted by Shopify (Canada) and we use service providers including Telr and IQ Fulfillment, your personal information may be transferred to, stored, and processed outside the UAE. We ensure that any such transfers are carried out in accordance with the UAE PDPL and with appropriate safeguards in place, such as standard contractual clauses or equivalent data transfer mechanisms recognized under applicable law.

Third Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. We do not guarantee and are not responsible for the privacy or security of such sites. We recommend you review their privacy policies before providing any personal information.

Children's Data

The Services are not intended to be used by children under the age of 18. We do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, please contact us using the details below to request that it be deleted.

Security and Retention of Your Information

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. However, no security measures are perfect or impenetrable.

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:

  • For as long as your account is active or as needed to provide you with the Services.
  • To comply with our legal obligations under UAE law (typically up to 5 years for commercial records).
  • To resolve disputes and enforce our agreements.

When your personal information is no longer required, we will securely delete or anonymize it.

Your Rights Under UAE PDPL

As a customer whose data we process, you have the following rights under the UAE Federal Decree-Law No. 45 of 2021:

  • Right to Access — You may request access to the personal information we hold about you.
  • Right to Correction — You may request that we correct any inaccurate or incomplete personal information.
  • Right to Erasure — You may request that we delete your personal information, subject to certain legal exceptions.
  • Right to Restriction — You may request that we restrict the processing of your personal information in certain circumstances.
  • Right to Data Portability — You may request a copy of your personal information in a structured, commonly used format.
  • Right to Object — You may object to the processing of your personal information for marketing purposes at any time.
  • Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us using the details below. We will respond to your request within the timeframe required by applicable UAE law. We may need to verify your identity before processing your request.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or lodge your complaint with your local data protection authority

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and where required by law, notify you by email or a prominent notice on our website.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of your rights, please contact us at:

la Suede Beauty LLC S.P.C  Abu Dhabi, United Arab Emirates, xlasharabia@gmail.com