Privacy policy

This Privacy Policy describes how YAXSO GENERAL TRADING - L.L.C - S.P.C (“YAXSO”, “we”, “us”, or “our”) collects, uses, stores, processes, and discloses personal data when you visit www.yaxso.com, create an account, place an order, purchase a product, communicate with us, or otherwise use our online services (the “Services”).

YAXSO operates an online-only e-commerce business in the United Arab Emirates. Our online store is powered by Shopify, and we also use third-party service providers to support payments, order fulfilment, delivery, tracking, security, analytics, communications, and other business functions.

This Privacy Policy should be read together with our Terms of Service, Return & Refund Policy, and Shipping Policy.

Where this Privacy Policy applies to the processing of your personal data, it governs how that personal data is handled.

“Personal data” means information relating to an identified or identifiable individual. It does not include information that has been effectively anonymised so that an individual can no longer reasonably be identified.

Depending on how you interact with YAXSO, we may process:

• Identity and contact information, such as your name, email address, telephone number, billing address, and delivery address.
• Order and transaction information, including products viewed, added to cart, ordered, returned, refunded, exchanged, or cancelled, together with order status and transaction history.
• Payment-related information, such as the payment method selected, transaction status, payment confirmation, payment-provider reference information, and other information necessary to process or reconcile a transaction.
• Account and preference information, where applicable, including account profile details, saved preferences, and settings.
• Communications, including information you provide when contacting customer support, submitting a complaint, making a return request, or otherwise communicating with us.
• Device and technical information, such as IP address, browser type, device information, network information, cookie identifiers, and similar technical data.
• Usage information, including how you browse, search, interact with, and use our website and Services.
• Marketing and preference information, including communication preferences and interactions with marketing content where applicable.

YAXSO does not intend to receive or store complete payment-card credentials when those details are collected and securely processed directly by an authorised payment service provider. The payment provider may independently collect additional information necessary to process your payment.

We may collect personal data:

• Directly from you, for example when you place an order, create an account, complete a form, request support, or communicate with us.
• Automatically when you use the website, through cookies, pixels, log files, and similar technologies.
• From Shopify and service providers that operate technology or services on our behalf.
• From payment, fulfilment, shipping, tracking, security, analytics, or marketing partners where necessary and permitted.
• From other lawful sources where permitted or required by applicable law.

We process personal data only for legitimate and specified purposes and as permitted by applicable law. Depending on the circumstances, this may include processing that is necessary to perform a transaction with you, comply with a legal obligation, protect rights or security, pursue legitimate business purposes permitted by law, or processing based on your consent where consent is required.

We may use personal data to:

• receive, process, confirm, fulfil, deliver, and manage orders;
• process payments, refunds, returns, and transaction records;
• provide customer service and respond to enquiries or complaints;
• provide order tracking and delivery notifications;
• maintain accounts and customer preferences;
• prevent fraud, abuse, security incidents, and unlawful activity;
• operate, maintain, analyse, troubleshoot, and improve our website and Services;
• comply with accounting, tax, legal, regulatory, and record-keeping requirements;
• establish, exercise, or defend legal claims; and
• send marketing or promotional communications where permitted, subject to your communication preferences and applicable law.

YAXSO, Shopify, and authorised service providers may use cookies, pixels, tags, local storage, and similar technologies to operate and secure the website, remember preferences, understand website performance and usage, provide analytics, and, where enabled and permitted, support marketing and advertising.

Some technologies are necessary for the website and checkout to function. Other technologies may depend on your settings, consent, region, browser choices, or the customer-privacy controls made available through our store.

You may also manage certain cookie or browser preferences through your browser settings. Blocking essential cookies may affect some website or checkout functions.

We disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy or where permitted or required by law.

Recipients may include:

• Shopify, which hosts and supports our e-commerce store and related functionality.
• Payment service providers involved in authorising, processing, settling, or refunding payments.
• Suppliers and fulfilment providers where information is necessary to process and dispatch your order.
• Couriers, logistics, and tracking providers where necessary to deliver or track an order.
• IT, hosting, security, analytics, customer-support, and communications providers that assist us in operating the Services.
• Marketing and advertising service providers where their services are enabled and the processing is permitted under applicable law.
• Professional advisers, including auditors, accountants, legal advisers, and insurers, where reasonably necessary.
• Government, regulatory, judicial, or law-enforcement authorities where disclosure is legally required or permitted.
• A relevant party in connection with a lawful corporate restructuring, merger, acquisition, financing, or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

We seek to limit disclosed information to what is reasonably necessary for the relevant purpose.

Our store is powered by Shopify. Shopify processes personal data relating to your access to and use of Shopify-powered stores to provide its platform, checkout, security, and other services.

In some circumstances Shopify processes personal data on YAXSO's behalf. In other circumstances, including certain Shopify consumer services or enhanced platform features, Shopify may determine its own purposes and means of processing and may be responsible for responding to applicable privacy requests concerning that processing.

For more information, please review the Shopify Consumer Privacy Policy and Shopify Privacy Controls .

YAXSO operates from the United Arab Emirates, but some of our technology, payment, cloud, fulfilment, logistics, analytics, or other service providers may process or store personal data in other countries.

As a result, personal data may be transferred, stored, or processed outside the United Arab Emirates where necessary to provide the Services.

Where UAE data-protection law applies to a cross-border transfer, we will take measures reasonably required under applicable law, including relying on an appropriate level of protection or another legally permitted transfer mechanism, safeguard, contract, consent, or applicable exception as relevant.

We use reasonable administrative, organisational, and technical measures designed to protect personal data against unauthorised access, use, disclosure, alteration, loss, or destruction.

We also expect service providers processing personal data for us to implement appropriate security measures relevant to the services they provide.

However, no website, internet transmission, storage system, or security measure can be guaranteed to be completely secure. Please avoid sending payment-card details, passwords, or other highly sensitive information through unsecured communication channels.

Where required by applicable law, we will take appropriate action in response to a qualifying personal-data breach, including relevant notification obligations.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, or for any longer period required or permitted by applicable law.

Retention periods may depend on factors including:

• whether you maintain an account or active relationship with us;
• order, payment, refund, warranty, or customer-service requirements;
• legal, accounting, tax, audit, or regulatory obligations;
• fraud prevention and information-security requirements;
• the need to establish, exercise, or defend legal claims; and
• applicable contractual requirements with service providers.

When personal data is no longer required, we may delete, anonymise, or otherwise securely dispose of it, subject to applicable legal obligations.

Subject to applicable UAE law, relevant conditions, and permitted exceptions, you may have rights relating to your personal data, including:

• Right to information and access regarding personal data being processed and relevant processing details.
• Right to data portability in applicable circumstances and where technically feasible.
• Right to correction of inaccurate or incomplete personal data.
• Right to erasure in circumstances provided by applicable law.
• Right to restrict or stop processing in applicable circumstances.
• Right to object to direct marketing, including related profiling where applicable.
• Rights relating to certain automated decisions and profiling where they have a legal or significant adverse effect.
• Right to withdraw consent where processing is based on your consent, without affecting processing lawfully carried out before withdrawal.
• Right to submit a complaint to the competent UAE data-protection authority where applicable.

These rights are not absolute and may be subject to identity verification, legal retention requirements, protection of third-party rights, fraud or security requirements, legal proceedings, and other exceptions permitted by applicable law.

To exercise a privacy right relating to data controlled by YAXSO, contact us using the details in Section 14 below.

Where permitted, we may send you promotional communications relating to YAXSO products, offers, or services.

You may unsubscribe from promotional email communications at any time by using the unsubscribe mechanism included in the communication or by contacting us.

Opting out of marketing does not prevent us from sending necessary non-promotional communications relating to your orders, payments, deliveries, returns, security, account, or customer-service requests.

YAXSO's Services are intended for customers who have the legal capacity to enter into transactions under applicable law.

We do not knowingly seek to collect personal data from children contrary to applicable law. If you are a parent or legal guardian and believe a child has provided personal data to us inappropriately, please contact us so that we can review the matter and take appropriate action.

Our website may contain links, widgets, or integrations that lead to websites or services operated by independent third parties.

YAXSO does not control the independent privacy or security practices of third-party websites or services. If you leave our website or use an external service, you should review that third party's applicable privacy notice and terms.

The inclusion of a link does not by itself mean that YAXSO endorses all content, privacy practices, or activities of the relevant third party.

If you have a question about this Privacy Policy, wish to exercise an applicable privacy right, or have a complaint regarding our handling of personal data, please contact YAXSO.

We may need to verify your identity before acting on certain requests. We will review and respond to valid requests in accordance with applicable law.

If you believe that your personal data has been processed in violation of applicable UAE data-protection law, you may also have the right to submit a complaint to the competent UAE data-protection authority.

YAXSO is an online-only e-commerce retailer. The business correspondence address above is not a physical retail shop, showroom, customer collection point, or walk-in customer service location.

We may update this Privacy Policy from time to time to reflect changes to our Services, technology, service providers, business practices, or applicable legal and regulatory requirements.

When we update this Privacy Policy, we will publish the revised version on this page and update the “Last Updated” date. Where required by applicable law, we will provide additional notice or obtain consent before applying a material change.