Privacy Policy

 

Hanae Beauty Privacy Policy

Last Updated: 09/11/2025

Hanae Beauty (collectively, "Hanae Beauty," "we," "us," or "our") is a Korean beauty company based in the United Arab Emirates (UAE). We are committed to protecting the privacy of our customers worldwide. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data in compliance with the UAE Personal Data Protection Law (PDPL) and other applicable international data protection standards.


1. Scope and Application

This policy applies to all personal data processing activities conducted by Hanae Beauty through our website, mobile applications, social media, and in-person transactions.

  • UAE Compliance: As a UAE-based entity, we comply with the PDPL, which requires us to process your data lawfully, fairly, and transparently, and to implement appropriate security measures.
  • Global Customers: We respect the privacy rights of our global customer base, including data subjects in the European Union (EU) and other jurisdictions, and aim to provide a high standard of data protection.

2. The Information We Collect

We collect information necessary to provide our products and services.

Category of Data

Examples of Data Collected

Purpose of Collection

Identity/Contact Data

Name, email address, phone number, shipping and billing addresses.

To process and deliver your orders, manage your account, and communicate with you.

Financial Data

Payment card details (processed securely via third-party gateways; we do not store full card details), and transaction history.

To process payments and prevent fraudulent transactions.

Usage Data

IP address, browser type, device information, pages viewed, time spent on site, and product preferences.

To analyze website performance, personalize your shopping experience, and improve our services.

Marketing/Communications Data

Your preferences in receiving marketing from us and your communication history.

To send you promotional materials with your express consent and manage your marketing preferences.


3. How We Use Your Personal Data

We process your data only for specific, legitimate, and clear purposes, and we rely on a lawful basis for all processing, primarily your express consent or necessity for contract performance.

  • Contractual Necessity: Fulfilling and managing your purchase orders, processing payments, and arranging for shipping.
  • Legitimate Interest: Improving our website, products, and services; conducting internal business analysis; and ensuring the security of our IT systems and preventing fraud.
  • Legal Obligation: Complying with UAE laws, tax requirements, regulatory requests, and legal proceedings.
  • Consent: Sending you marketing and promotional communications about our products. You have the right to withdraw this consent at any time.

4. International Data Transfers (Cross-Border Data Processing)

As a global e-commerce company, we may transfer your personal data outside the UAE to process your orders or for cloud storage.

  • PDPL Requirement: Transfers outside the UAE are permitted only to countries that offer an adequate level of data protection as determined by the UAE Data Office, or when we implement appropriate safeguards (like Standard Contractual Clauses or Binding Corporate Rules).
  • Your Consent: By using our services and consenting to this policy, you acknowledge and agree to such transfers as necessary for the fulfillment of your orders.

5. Disclosing Your Personal Data

We do not sell your personal data. We may share your information only with the following categories of third parties:

  • Service Providers: Third-party partners who perform functions on our behalf, such as payment processors (e.g., Visa/Mastercard gateways), shipping companies (e.g., Aramex, DHL), IT services, and marketing platforms. These providers are strictly required to protect your data and only use it for the contracted purpose.
  • Legal and Regulatory Authorities: When required by UAE law, court order, or governmental requests (e.g., law enforcement).
  • Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity under strict confidentiality agreements.

6. Data Security and Retention

Security Measures: We implement appropriate technical and organisational measures as required by PDPL and global standards, including encryption, pseudonymisation, access controls, and firewalls, to protect your personal data from unauthorised access, disclosure, alteration, or destruction.

Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Generally, customer data related to purchases is kept for a minimum of five (5) years as required by certain UAE regulations.


7. Your Data Protection Rights

Under the PDPL and depending on your location, you have strong rights regarding your personal data. To exercise these rights, please contact us using the details below.

Your Right

Description

Right to Access/Information

The right to know what personal data we hold about you and how we process it.

Right to Rectification

The right to request correction of inaccurate or incomplete personal data.

Right to Erasure (Right to be Forgotten)

The right to request the deletion of your personal data when it is no longer necessary for the purpose it was collected.

Right to Restriction

The right to request that we limit the processing of your data in certain circumstances.

Right to Data Portability

The right to receive your data in a structured, commonly used, and machine-readable format.

Right to Object

The right to object to the processing of your data, particularly for direct marketing purposes.

Right to Withdraw Consent

The right to withdraw your consent at any time where processing is based on consent.


8. Contact Us

If you have any questions about this Privacy Policy, your data protection rights, or our data handling practices, please contact our Data Protection representative:

Hanae Beauty

  • Address: Al Barsha, Dubai, UAE
  • Email: info@hanaebeauty.ae
  • Phone: +971508498837

 

We will respond to your requests to exercise your rights in a timely manner.