Privacy Policy
Last updated: 9 November 2026
This Privacy Policy explains how [LEGAL ENTITY NAME] ("Horse Centre", "we", "us") collects and uses personal data when you visit this website, place an order, or book a lesson. We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.
1. Who is responsible
The data controller is:
- Business: [LEGAL ENTITY NAME] (trading as Horse Centre)
- Trade licence / permit no.: [TRADE LICENCE / PERMIT NO.]
- Address: [ADDRESS], United Arab Emirates
- Email: [EMAIL]
- Phone / WhatsApp: +971 55 505 6798
2. What we collect
- Order details you give us: name, mobile number, email address, delivery address (if you choose delivery), order notes (for example sizes or preferred lesson time), and the items you order.
- Payment information: payments are made on Ziina's secure payment page. We do not see or store your full card number. Ziina tells us whether a payment succeeded, the amount, and a payment reference.
- Messages: if you contact us by WhatsApp, email or phone, we receive what you send and your contact details.
- Technical data: our hosting provider processes standard server data (such as IP address, browser type and request time) to deliver and protect the website.
- Data stored on your device: your cart is saved in your browser's local storage, and your order details are kept briefly in session storage so the confirmation page can show them. This data stays on your device. See our Cookie notice.
We do not use advertising trackers or analytics, and we do not sell personal data.
3. Why we use it and our legal basis
- To process, deliver and support your order or lesson booking: performance of a contract with you, and your consent given at checkout.
- To take payment and prevent fraud: performance of a contract and our legitimate interest in secure payments.
- To keep accounting, tax and commercial records: compliance with UAE legal obligations.
- To reply to your questions: your consent, or steps you ask us to take before a contract.
We only send marketing messages if you separately ask to receive them, and you can opt out at any time.
4. Who we share it with
We share personal data only with service providers who help us run the shop, and only as needed:
- Ziina (payment processing, UAE).
- Cloudflare (website hosting, security and delivery; may process data outside the UAE).
- Resend (order notification emails to our team, if enabled; may process data outside the UAE).
- WhatsApp / Meta (only if you choose to message us on WhatsApp).
- Couriers or delivery partners (name, phone and address, for delivery only).
- Authorities, where UAE law requires it.
Our product list is kept in a Google Sheet. It contains product information only, never customer data.
5. International transfers
Some providers above may process data outside the UAE. Where this happens, we rely on the safeguards permitted under the PDPL, such as transfers to countries with adequate protection, contractual safeguards, or transfers necessary to perform your contract with us.
6. How long we keep it
We keep order and payment records for as long as UAE commercial and tax law requires (generally up to 7 years), then delete or anonymise them. Messages and enquiries that do not lead to an order are deleted within 12 months. Data in your browser stays until you clear your cart or browser storage.
7. Your rights
Under the PDPL you can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct inaccurate or incomplete data;
- delete your data, where we no longer need to keep it by law;
- restrict or stop certain processing, or object to it;
- transfer your data to another provider, where technically possible;
- withdraw your consent at any time (this does not affect processing already carried out).
To make a request, email [EMAIL]. We will reply within 30 days. If you are not satisfied, you may complain to the UAE Data Office.
8. Security
The website is served only over HTTPS. Payments are handled by Ziina, a licensed payment provider, and card data never reaches our servers. Access to order information is limited to staff who need it.
9. Children
Orders must be placed by an adult (18+). Lessons for children are booked by a parent or guardian, who provides any information about the child.
10. Changes
We may update this policy. The "Last updated" date above shows the latest version.
11. Language
This page is available in English and Arabic. If there is any difference or inconsistency between the two versions, the English version prevails.