Who We Are
Al Borj ("we," "us," or "our") operates the website alborj.com and is committed to protecting the personal data of our visitors, customers, and users in accordance with the laws of the United Arab Emirates.
This Privacy Policy explains what personal data we collect, why we collect it, how it is used, and what rights you have under applicable UAE law — including UAE Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and, where applicable, the regulations of the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM).
By using alborj.com, you consent to the practices described in this policy. If you do not agree, please discontinue use of the site.
Information We Gather
We may collect the following categories of personal data:
- Identity Data: Full name, username, or similar identifiers.
- Contact Data: Email address, phone number, billing and delivery address.
- Transaction Data: Details of purchases, order history, and payment records.
- Technical Data: IP address, browser type and version, device identifiers, time zone, and operating system.
- Usage Data: Information about how you navigate and interact with our website.
- Marketing & Communications Data: Your preferences in receiving marketing materials from us.
- Sensitive Data: We do not intentionally collect sensitive personal data (e.g., financial credentials, biometric, or health data) beyond what is necessary for transactional processing.
Data is collected directly when you register, place an order, subscribe to communications, or interact with our site, and indirectly through cookies and analytics tools.
Purposes of Processing
We use personal data for the following purposes:
- To fulfill and manage your orders and contracts with us.
- To process payments and prevent fraudulent transactions.
- To manage your account and provide customer support.
- To send transactional communications (order confirmations, shipping updates).
- To send marketing communications where you have opted in.
- To improve our website, products, and services through analytics.
- To comply with applicable UAE legal and regulatory obligations.
- To enforce our terms of service and other agreements.
Why We Are Permitted to Process
Under UAE Federal Law No. 45 of 2021, we process your personal data on the following legal grounds:
- Contractual Necessity: Processing required to execute a purchase or service agreement with you.
- Consent: Where you have given explicit, informed consent (e.g., marketing emails). Consent may be withdrawn at any time.
- Legal Obligation: Where processing is required under UAE law, including tax, customs, or consumer protection regulations.
- Legitimate Interest: For fraud prevention, security, and improving our services, provided such interests are not overridden by your rights.
Third Parties & Disclosure
We do not sell or rent your personal data. We may share data with:
- Service Providers: Payment processors, logistics partners, cloud hosting, and analytics providers who process data on our behalf under binding data processing agreements.
- Legal Authorities: UAE government entities, law enforcement, or regulatory bodies where required by law or court order.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
All third-party service providers are contractually bound to process your data only for specified purposes and in compliance with applicable UAE data protection law.
How We Use Cookies
Our website uses cookies and similar tracking technologies to enhance functionality and analyze traffic. Categories of cookies we use:
- Strictly Necessary: Required for the website to function. Cannot be disabled.
- Analytical/Performance: Help us understand how users interact with the site (e.g., Google Analytics).
- Functional: Remember your preferences to improve your experience.
- Marketing: Track visits across websites to deliver relevant advertising. Only deployed with your consent.
You may manage cookie preferences through your browser settings or any cookie consent tool displayed on the site. Disabling certain cookies may affect site functionality.
How Long We Keep Your Data
We retain personal data only as long as necessary for the purpose it was collected, or as required by UAE law. General retention periods:
- Customer transaction records: 5 years (UAE Commercial Transactions Law)
- Financial and accounting records: 5 years (UAE Federal Law No. 2 of 2015)
- Marketing consent records: Until consent is withdrawn, plus 1 year
- Technical/log data: 12 months
After the applicable retention period, data is securely deleted or anonymized.
Rights Under UAE PDPL
Under UAE Federal Law No. 45 of 2021, you have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
- Right to Restriction: Request that we limit processing of your data in certain circumstances.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interest or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based.
To exercise any of these rights, contact us using the details in Section 14. We will respond within 30 days of receiving a verified request.
If you believe your rights have been violated, you may file a complaint with the UAE Data Office at dataoffice.ae.
How We Protect Your Data
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These include:
- SSL/TLS encryption for data transmitted to and from the site.
- Access controls restricting data to authorized personnel only.
- Regular security assessments and monitoring of our systems.
- Secure payment processing through PCI-DSS compliant providers.
No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by UAE law.
Minors Under 18
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data without verified parental consent, we will take steps to delete that information promptly.
If you believe a minor has provided us with personal data, please contact us immediately.
External Websites
Our website may contain links to third-party websites, plugins, or services. Clicking those links may allow third parties to collect or share data about you. We do not control these external sites and are not responsible for their privacy practices. We encourage you to review the privacy policy of every website you visit.
International Transfers
Some of our service providers operate outside the UAE. Where personal data is transferred to countries that may not offer equivalent data protection standards, we ensure that adequate safeguards are in place — including contractual clauses approved under UAE law — to protect your data to the standard required by UAE Federal Law No. 45 of 2021.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any material changes will be communicated by posting the updated policy on this page with a revised effective date.
We encourage you to review this page periodically. Your continued use of alborj.com after changes are posted constitutes acceptance of the updated policy.
Get in Touch
For any questions, requests, or concerns relating to this Privacy Policy or your personal data, please contact us:
We are committed to resolving any complaints or concerns in a fair and timely manner.