Privacy Policy

Privacy Policy

Effective Date: 12 November 2025  |  Last Updated: May 2026  |  Jurisdiction: United Arab Emirates

Purla L.L.C-FZ ("Purla", "we", "us", or "our") is a Limited Liability Company registered in the Meydan Free Zone, Dubai, United Arab Emirates (License No. 2540350.01). We operate the Purla online store (the "Website") and sell marine collagen and wellness supplements directly to consumers.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you visit our Website, place an order, or interact with us in any way. It has been prepared in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.

By using our Website or purchasing from us, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use our Website.

1. Personal Data We Collect

We collect the following categories of personal data:

1.1 Information You Provide Directly

  • Full name
  • Email address
  • Phone number (including WhatsApp)
  • Delivery address (building, area, emirate/city, country)
  • Order history and preferences
  • Communications you send us (e.g. inquiries, complaints, reviews)

1.2 Payment Information

We do not store your full payment card details on our servers. Payment transactions are processed securely by our third-party payment gateway provider(s) (e.g. Stripe, PayTabs, or similar), which are PCI-DSS compliant. We may retain limited transaction references (e.g. last 4 digits of card, transaction ID) for order reconciliation purposes.

1.3 Information Collected Automatically

When you visit our Website, we automatically collect:

  • IP address and approximate location (country/city level)
  • Browser type and version
  • Device type and operating system
  • Pages viewed and time spent on site
  • Referring URL (how you found us)
  • Shopify session and cookie data

1.4 Information from Third Parties

We may receive information about you from third-party platforms such as Meta (Facebook/Instagram), Google, or TikTok if you interact with our advertisements or social media pages, in accordance with those platforms' own privacy policies.

2. How We Use Your Personal Data

2.1 To Fulfil Your Orders

  • Process and confirm your purchases
  • Arrange delivery and send shipping updates
  • Issue invoices, receipts, and handle returns or refunds
  • Contact you regarding your order status

2.2 To Communicate With You

  • Respond to your customer service inquiries via email, phone, or WhatsApp
  • Send order confirmations and transactional notifications
  • Send marketing communications (only where you have opted in or where permitted under UAE law)

2.3 To Improve Our Website and Products

  • Analyse website traffic and user behaviour to improve user experience
  • Understand purchasing patterns and product preferences
  • Conduct market research and product development

2.4 Legal and Compliance Obligations

  • Comply with UAE laws and regulations, including tax (VAT), consumer protection, and e-commerce requirements
  • Respond to lawful requests from UAE regulatory authorities or courts
  • Enforce our Terms & Conditions and protect our legal rights

2.5 Marketing (with Consent)

If you have opted in to receive marketing communications, we may send you promotional emails, SMS, or WhatsApp messages about new products, offers, and updates. You may withdraw your consent at any time by clicking the unsubscribe link in any email or contacting us directly.

3. Legal Basis for Processing

Under the UAE PDPL, we process your personal data on the following legal bases:

  • Contractual necessity - to fulfil your order and manage our customer relationship
  • Legal obligation - to comply with UAE laws and regulatory requirements
  • Legitimate interests - to improve our products, services, and website security
  • Consent - for direct marketing communications where required

4. Cookies and Tracking Technologies

Our Website uses cookies and similar technologies to enhance your browsing experience and support our analytics and marketing activities. The types of cookies we use include:

  • Essential Cookies - required for the Website to function (e.g. shopping cart, session management)
  • Analytics Cookies - help us understand how visitors use our site (e.g. Google Analytics)
  • Marketing Cookies - used to deliver relevant advertisements (e.g. Meta Pixel, Google Ads, TikTok Pixel)

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may affect the functionality of our Website. We will request your consent for non-essential cookies in accordance with applicable requirements.

5. How We Share Your Personal Data

We do not sell your personal data. We may share your data only in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in operating our business, including:

  • Shopify Inc. - e-commerce platform and website hosting
  • Courier and logistics companies - for order delivery within the UAE and internationally
  • Payment gateway providers - for secure payment processing
  • Email and SMS marketing platforms - for customer communications (where consent is given)
  • Analytics providers - e.g. Google Analytics

All service providers are bound by contractual obligations to handle your data securely and only for the purposes we specify.

5.2 Legal Disclosure

We may disclose your personal data if required to do so by UAE law, court order, or to protect our legal rights, property, or the safety of our customers or others.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of our business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections.

5.4 International Transfers

Some of our service providers (e.g. Shopify, Google) may process your data outside the UAE. Where this occurs, we take reasonable steps to ensure your data is protected to a standard consistent with UAE PDPL requirements. As we expand to other GCC countries (such as Saudi Arabia), we will comply with applicable local data protection laws in those jurisdictions.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, including:

  • Order and transaction records - retained for a minimum of 5 years in accordance with UAE commercial and VAT record-keeping requirements
  • Customer account and communication data - retained for the duration of our relationship with you, plus 2 years thereafter
  • Marketing consent records - retained until you withdraw consent
  • Website analytics data - retained in aggregated form for up to 26 months

When data is no longer needed, we securely delete or anonymise it.

7. Your Rights Under UAE PDPL

As a data subject under UAE Federal Decree-Law No. 45 of 2021, you have the following rights:

  • Right to Access - request a copy of the personal data we hold about you
  • Right to Rectification - request correction of inaccurate or incomplete data
  • Right to Erasure - request deletion of your personal data (subject to legal retention obligations)
  • Right to Restrict Processing - request that we limit how we use your data in certain circumstances
  • Right to Data Portability - request your data in a structured, commonly used format
  • Right to Object - object to processing based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent - withdraw consent for marketing communications at any time

To exercise any of these rights, please contact us using the details in Section 10 below. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

8. Data Security

We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction, including:

  • SSL/TLS encryption for all data transmitted via our Website
  • Secure hosting infrastructure provided by Shopify
  • Access controls and authentication requirements for staff who handle customer data
  • Regular review of our data security practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Our Website and products are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

Purla L.L.C-FZ
Meydan Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
License No.: 2540350.01
Email: support@purla.co
WhatsApp/Phone: +971588439812
Website: www.purla.co

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email or via a notice on our Website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

This Privacy Policy is governed by the laws of the United Arab Emirates. Purla L.L.C-FZ - Meydan Free Zone, Dubai, UAE - License No. 2540350.01