This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal data by Star Gallery Mart across all its digital platforms, including but not limited to its website (stargallery.ae), mobile applications, and customer support channels. This policy outlines the rights and obligations of both users and Star Gallery Mart regarding personal data processing in compliance with applicable United Arab Emirates (UAE) data protection laws and internationally recognized standards.

Applicability

This Privacy Policy applies to:

• Website Visitors and Users: Individuals who browse, interact with, or create accounts on the Star Gallery Mart website.
• Registered Customers: Individuals who register, place orders, and engage in transactions through our ecommerce platform.
• Mobile Application Users: Users accessing services via Star Gallery Mart's mobile application.
• Customer Support Interactions: Data collected during interactions with our support teams through phone, email, chat, or in-store visits.
• Marketing and Promotional Activities: Data collected during engagement with Star Gallery Mart's marketing emails, SMS campaigns, advertisements, surveys, or social media channels.

Excluded from Applicability

This Privacy Policy does not apply to:

• Third-Party Services and Platforms: Any websites, applications, or services operated by entities other than Star Gallery Mart, even if they are linked to or referenced on our platform. We encourage users to carefully review the privacy policies of any third-party platforms they interact with.
• Employee and Contractor Data: Personal data collected through recruitment, employment, or contractual engagements, which are governed by separate internal policies.
• Anonymous or Aggregated Data: Information that cannot be linked to an identifiable individual, such as anonymized analytics data or aggregated statistical information.

Third-Party Involvement

While this Privacy Policy governs the handling of personal data collected directly by Star Gallery Mart, certain services may require the involvement of third-party service providers (e.g., payment gateways, logistics companies, and marketing platforms). In such cases, data shared with these providers is limited to what is necessary to perform their services. These entities operate under their own privacy practices and legal obligations.

To provide, operate, and improve our services, Star Gallery Mart collects and processes various types of personal information. This data is essential to fulfilling orders, enhancing user experience, and ensuring seamless interaction with our platform. We gather personal data through direct user input, automated technologies, and third-party services, as outlined below.

A. Personal Data (Directly Provided by You)

Personal data is collected when you register for an account, place an order, or otherwise interact with our platform. This information is necessary for order processing, account management, and customer communication.

Types of Personal Data Collected:

• Full Name: To personalize communication and facilitate order delivery.
• Shipping and Billing Address: Required for product delivery and accurate invoicing.
• Email Address: For account registration, order confirmations, and marketing communications.
• Phone Number: Used for shipping updates, customer support, and two-factor authentication (where applicable).
• Payment Information: Payment details (such as credit/debit card numbers or digital wallet identifiers) are securely processed through trusted third-party gateways (e.g., Stripe, Apple Pay, Tabby). Star Gallery Mart does not store or directly process sensitive payment data on its servers.
• Account Information: When users create an account, we collect login credentials (such as username and password) and store user preferences, saved items, and purchase history to streamline future transactions.

How This Data is Collected:

• During account registration and checkout processes.
• Through customer service inquiries and support interactions.
• When subscribing to newsletters or promotional emails.
• Through surveys, reviews, or feedback forms submitted by users.

B. Transaction and Order Data

This category pertains to information generated during the purchase and order fulfillment process. This data is critical for managing order logistics, tracking shipments, and maintaining accurate records.

Types of Transaction Data Collected:

• Purchase History: Detailed records of past purchases, including product details, quantities, and prices.
• Order Fulfillment Details: Shipping information, courier tracking numbers, and estimated delivery dates.
• Invoice and Tax Data: Records of invoices generated for purchases, including applicable taxes.
• Return and Refund Information: Data related to product returns, refunds, and exchanges.

C. Technical and Usage Data (Automatically Collected)

To optimize our platform's performance, enhance user experience, and ensure security, we automatically collect certain technical data when users interact with our website or mobile application. This information helps us monitor system performance and identify areas for improvement.

Types of Technical and Usage Data Collected:

• IP Address and Device Details: To detect potential security risks and monitor website traffic.
• Browser Type and Version: Ensures compatibility and proper rendering of site elements.
• Operating System and Device Type: Used for optimizing site performance across different devices.
• Access Times and Duration: Tracks session start and end times to monitor site usage patterns.
• Navigation and Page Interaction: Data on which pages are viewed, links clicked, and products searched. This helps in improving user experience and tailoring website content.
• Error Logs and Diagnostics: Automatically collected to identify and resolve technical issues.

How This Data is Collected:

• Through the use of analytics tools embedded in our website and app.
• By logging user interactions with the platform.
• Using IP tracking and session cookies during site visits.

D. Cookies and Tracking Technologies

We use cookies, tracking pixels, web beacons, and similar technologies to improve functionality, personalize user experience, and serve relevant advertisements.

How We Use Cookies and Tracking Technologies:

• Enhance User Experience: Cookies remember user preferences and facilitate faster checkouts.
• Measure Performance: Helps us track site speed, page loading times, and responsiveness.
• Target Advertisements: Serves personalized ads based on user interests and browsing behavior.
• Analyze Engagement: Aggregated data enables us to monitor trends and improve overall service quality.

Types of Cookies We Use:

• Essential Cookies: Required to enable core website functions, such as account logins, cart management, and secure checkout. These cookies cannot be disabled.
• Performance Cookies: Collects data about website performance and user interactions to identify and resolve issues.
• Advertising Cookies: Used to deliver targeted advertisements, promotions, and product recommendations based on browsing history and user preferences.
• Analytics Cookies: Aggregates user activity data to provide insights into site traffic, popular products, and customer engagement.

Managing Cookies and Preferences:

Users can manage or disable cookies through their browser settings. However, disabling cookies may impact website functionality, including:

• The ability to log in or stay logged in.
• Retaining items in the shopping cart.
• Access to personalized recommendations and promotions.

To manage cookie settings:

• In Google Chrome: Go to Settings > Privacy and Security > Cookies and Other Site Data.
• In Safari: Preferences > Privacy > Block All Cookies.
• In Firefox: Preferences > Privacy & Security > Cookies and Site Data.

Web Beacons and Pixels:

• Web Beacons: Embedded in emails and website pages to track engagement.
• Tracking Pixels: Used for marketing analytics, retargeting ads, and social media integration.

Why We Collect This Data:

• To fulfill legal obligations under UAE law.
• To improve our understanding of user needs.
• To ensure platform security and prevent fraudulent activities.
• To enhance customer service and provide relevant product recommendations.

Star Gallery Mart collects and processes personal information to provide high-quality services, ensure seamless platform operation, and maintain legal compliance. This section outlines the purposes for which your data is used, highlighting our commitment to transparency and data security.

1. Order Processing and Fulfillment

We use your personal data to manage all aspects of order fulfillment, including:

• Order Confirmation: Sending transactional emails and notifications regarding order placement, status updates, and shipping confirmations.
• Shipping and Delivery: Coordinating with logistics partners to ensure accurate and timely product delivery to your specified address.
• Returns and Exchanges: Managing return requests, refunds, and product replacements in accordance with our return policy.

Why It's Necessary: This information is essential for ensuring that purchases are processed accurately and delivered to the right location, providing users with a smooth shopping experience.

2. User Account Management

Your data is used to facilitate account creation and management, allowing for a personalized shopping experience. This includes:

• User Registration: Enabling new account creation and verification.
• Profile Management: Allowing users to update personal information, manage shipping addresses, and view purchase history.
• Account Recovery: Assisting users in recovering access to their accounts in case of forgotten credentials or account security concerns.

Why It's Necessary: Account management enhances user convenience, providing secure, streamlined access to our platform.

3. Customer Support and Communication

We collect and process personal data to handle customer service inquiries, resolve complaints, and offer technical support. This may involve:

• Responding to Inquiries: Addressing product questions, service issues, and refund/exchange requests.
• Live Chat and Email Support: Providing real-time assistance through chat and email services.
• Customer Feedback: Collecting and analyzing user feedback to improve service quality.

Why It's Necessary: This ensures that users receive prompt and effective support when encountering issues or needing assistance with purchases.

4. Marketing and Promotional Communications

With your explicit consent, we use personal data to send promotional materials and updates about:

• Exclusive Offers and Discounts: Notifying users of sales, promotions, and special events.
• New Product Launches: Informing customers about new arrivals and product categories.
• Newsletters and Alerts: Providing curated content, seasonal campaigns, and other relevant materials.

Opt-In and Opt-Out Options:

• Users can opt-in to receive promotional emails during account registration or checkout.
• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of marketing emails or updating your profile preferences.

Why It's Necessary: Promotional communications allow us to keep users informed of relevant offers while respecting their right to opt out.

5. Platform Optimization and Development

We analyze technical and usage data to:

• Enhance Website and App Performance: Monitor website traffic, fix technical errors, and ensure compatibility across devices.
• Personalize User Experience: Tailor product recommendations and website content based on past purchases and browsing history.
• Feature Development: Identify trends to improve platform functionality and introduce new features.

Why It's Necessary: Continuous platform enhancement ensures users enjoy a seamless, responsive experience that meets evolving needs.

6. Fraud Prevention and Security

To safeguard users and Star Gallery Mart, personal data is used to:

• Monitor Suspicious Activity: Detect unauthorized transactions, mitigate account breaches, and prevent fraudulent orders.
• Identify Fraudulent Behavior: Analyze irregular account activity and payment patterns to reduce fraud risks.
• Secure Transactions: Use encryption and fraud detection tools to protect payment details and sensitive data.

Why It's Necessary: Fraud prevention measures protect users from financial harm and maintain platform integrity.

7. Legal and Regulatory Compliance

Star Gallery Mart processes personal data to comply with UAE regulatory frameworks and applicable international data protection laws. This may involve:

• Taxation and Invoicing: Generating purchase records and invoices in accordance with UAE tax regulations.
• Legal Disclosures: Responding to lawful requests, subpoenas, or court orders.
• Audits and Investigations: Assisting with regulatory audits and internal investigations to ensure legal compliance.

Why It's Necessary: Legal compliance helps us fulfill statutory obligations, ensuring our business operations align with UAE and international legal standards.

Automated Decision-Making and Profiling

In some instances, we may use automated systems to:

• Recommend Products: Based on past interactions and preferences.
• Detect Fraudulent Transactions: By analyzing transaction patterns.

These automated processes are reviewed regularly to minimize errors. Users have the right to request human intervention in decisions that significantly affect them.

Data Minimization and Purpose Limitation

We only collect data necessary to fulfill the outlined purposes. Personal data is processed solely for the purposes stated in this policy and is not used for unrelated activities without obtaining prior consent.

At Star Gallery Mart, we respect your privacy and ensure that personal data is shared only when necessary to provide essential services, improve our platform, or comply with legal obligations. We do not sell or rent personal information to third parties. However, in the course of our operations, we may share your data under the following circumstances:

A. Trusted Service Providers and Partners

To facilitate our services and maintain operational efficiency, we partner with trusted third parties who perform services on our behalf. These providers are contractually obligated to protect your personal data and are permitted to process it only to the extent required to perform their functions.

Categories of Service Providers and Partners:

• Payment Gateways and Financial Institutions: We work with third-party payment processors (e.g., Stripe, Apple Pay, Tabby) to securely handle payment transactions. Your financial data is encrypted and processed directly by these gateways, ensuring no sensitive payment information is stored on our servers.
• Logistics and Shipping Providers: To ensure timely delivery of purchased products, shipping and courier services receive relevant shipping details, such as your name, address, and phone number.
• Marketing and Advertising Agencies: To manage email campaigns, social media ads, and retargeting, your email address, browsing behavior, and purchase history may be shared with marketing platforms. This ensures personalized and relevant promotional offers. You can opt-out of such communications at any time.
• Cloud Hosting and IT Services: Our platform is hosted on secure cloud environments (such as Amazon Web Services or equivalent) to ensure reliable performance, data storage, and scalability.

Safeguards for Service Providers:

• We conduct due diligence on all third-party partners before sharing personal data.
• Contracts include strict confidentiality clauses to prevent misuse of personal information.
• Data shared with service providers is minimized and limited to essential information required for service performance.

B. Legal Obligations and Authorities

In certain cases, we may be required to disclose personal information to comply with applicable laws, regulations, or legal proceedings. This disclosure is limited to the extent necessary to fulfill our legal obligations or protect our legal rights.

Circumstances Under Which We May Disclose Data:

• Legal Compliance: We may disclose information to regulatory bodies, tax authorities, or law enforcement agencies to comply with UAE laws and international legal frameworks.
• Government and Judicial Requests: If we receive a subpoena, court order, or official request, we may share necessary data with government authorities.
• Fraud Prevention and Protection: To protect Star Gallery Mart from fraudulent activities, disputes, or potential threats, data may be shared with investigative bodies or security consultants.

Your Rights:

• Where legally permitted, we will notify you if your data is shared with government authorities, except in cases where notification is prohibited by law.
• If data is shared for fraud prevention, this will be based on legitimate interest in ensuring platform security.

We prioritize safeguarding personal data by implementing industry-standard security measures and retaining information only as long as necessary for the purposes outlined in this Privacy Policy.

A. Data Retention

We retain personal data for the period required to:

• Fulfill contractual obligations (e.g., processing orders, returns, or warranties).
• Maintain user accounts (while your account remains active).
• Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
• Resolve disputes and enforce our rights.

General Retention Periods:

• Account Information: Retained as long as the user account remains active. Users may request account deletion at any time.
• Transaction Records and Invoices: Retained for up to 7 years in compliance with UAE tax and accounting laws.
• Marketing Preferences: Data related to marketing consents is retained until users opt-out or withdraw consent.
• Inactive Accounts: Accounts with no activity for more than 3 years may be deleted or anonymized, except where data retention is legally required.

Upon expiration of retention periods, personal data is either deleted, anonymized, or aggregated for analytics purposes.

Requesting Data Deletion:

Users can request to delete their personal information by contacting our Data Protection Officer (DPO) at support@stargallery.ae. In some cases, we may be unable to delete data immediately if retention is required by law.

B. Security Measures

To ensure the integrity and confidentiality of personal information, we implement robust security protocols, including:

• Encryption: Sensitive data, including passwords and payment information, is encrypted during storage and transmission. Payment transactions are processed through PCI DSS-compliant gateways to ensure secure handling of cardholder data.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Two-factor authentication (2FA) and role-based access control (RBAC) are enforced for administrative accounts.
• Regular Audits and Penetration Testing: We perform regular security audits and vulnerability assessments to identify and address potential risks. Third-party security firms conduct penetration testing on our platform to ensure defense against cyber threats.
• Firewall and Intrusion Detection Systems (IDS): Our infrastructure is safeguarded by firewalls and IDS to monitor and block unauthorized access attempts.
• Incident Response Plan: In the unlikely event of a data breach, we have an incident response team that promptly addresses vulnerabilities and notifies affected users and regulatory bodies, in accordance with applicable data protection laws.

Your Role in Security:

• Users are encouraged to create strong passwords and change them regularly.
• Be cautious of phishing emails and ensure all communications from Star Gallery Mart originate from our official domain (stargallery.ae).
• Notify us immediately if you suspect unauthorized access to your account.

At Star Gallery Mart, we are committed to ensuring transparency and empowering users to exercise control over their personal information. In accordance with applicable UAE data protection laws and international privacy standards, you are entitled to the following rights regarding your personal data:

A. Right to Access and Data Portability

You have the right to:

• Request a copy of the personal data we hold about you.
• Obtain confirmation regarding whether your personal data is being processed.
• Receive your data in a structured, commonly used, and machine-readable format.
• Request that we transmit your data directly to another organization, where technically feasible.

How to Exercise This Right:

Submit a request by contacting support@stargallery.ae. We will process data access requests within 30 days, unless additional time is required due to the complexity of the request.

B. Right to Correction (Rectification)

If you believe that any of the personal data we hold is inaccurate or incomplete, you may request:

• Correction or updates to your personal details.
• Changes to billing or shipping information associated with your account.

How to Exercise This Right:

Users can correct most account information directly by accessing their profile settings. For further assistance, contact our support team.

C. Right to Deletion (Erasure)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent (for data processed based on consent).
• Your data has been unlawfully processed.
• Legal obligations require data deletion.

Important Notes:

• Certain data (e.g., transactional records) may need to be retained for legal or regulatory purposes.
• Data deletion requests may result in loss of access to order history, loyalty rewards, and account-related preferences.

How to Request Deletion:

To delete your account or remove specific data, navigate to the "Delete Account" option in your profile settings or email us at support@stargallery.ae.

D. Right to Restrict Processing

You can request a restriction on data processing under the following circumstances:

• You contest the accuracy of the data (for the period it takes to verify).
• You object to processing, pending verification of overriding legitimate grounds.

E. Right to Object to Marketing Communications

You have the right to:

• Opt-out of receiving promotional emails, newsletters, and targeted advertisements.
• Withdraw previously given consent to marketing at any time.

How to Manage Marketing Preferences:

• Click the "unsubscribe" link at the bottom of marketing emails.
• Adjust your marketing preferences through account settings.
• Contact us directly at support@stargallery.ae to update your preferences.

As part of our operations, we may transfer personal data to trusted service providers and affiliates located outside the UAE. These transfers are necessary to facilitate services such as payment processing, cloud storage, and international shipping.

How We Protect Your Data During Transfers:

• Adequate Safeguards: We ensure that all data transferred outside the UAE is protected by contractual clauses, standard data protection mechanisms, or certifications compliant with relevant international privacy frameworks.
• Data Minimization: Only essential personal data is transferred to third-party providers.
• Third-Party Compliance: We collaborate exclusively with partners that adhere to strong privacy and security protocols.

Your Rights Regarding International Transfers:

You may request further details about the security measures in place for data transfers by contacting our support team.

Our website and mobile application may contain links to external websites, applications, and services operated by third parties. These links are provided solely for informational and convenience purposes.

Please Note:

• Independent Policies: This Privacy Policy applies exclusively to data collected by Star Gallery Mart. Third-party websites or services accessible through our platform operate independently and have their own privacy policies.
• No Liability: We do not assume responsibility for the privacy practices, content, or security measures of external platforms.
• User Discretion Advised: We strongly encourage users to review the privacy policies and terms of service of third-party websites before providing personal information.

Examples of Third-Party Links:

• Payment gateways (e.g., Stripe, Apple Pay)
• Social media platforms (e.g., Facebook, Instagram)
• Logistics and shipping service providers

Star Gallery Mart reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or service offerings.

Notification of Changes:

• Website Announcements: A notice will be posted on the homepage or login screen.
• Email Notifications: For users with active accounts or newsletter subscriptions.

Effective Date: Changes take effect immediately upon posting unless stated otherwise. Users are encouraged to review this Privacy Policy periodically.

Your Continued Use of Our Platform:

By continuing to use our website or mobile app following updates, you acknowledge and agree to the terms of the revised Privacy Policy. If you disagree with any changes, you may discontinue using our services and request account deletion.

This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal data by Star Gallery Mart across all its digital platforms, including but not limited to its website (stargallery.ae), mobile applications, and customer support channels. This policy outlines the rights and obligations of both users and Star Gallery Mart regarding personal data processing in compliance with applicable United Arab Emirates (UAE) data protection laws and internationally recognized standards.

Applicability

This Privacy Policy applies to:

• Website Visitors and Users: Individuals who browse, interact with, or create accounts on the Star Gallery Mart website.
• Registered Customers: Individuals who register, place orders, and engage in transactions through our ecommerce platform.
• Mobile Application Users: Users accessing services via Star Gallery Mart's mobile application.
• Customer Support Interactions: Data collected during interactions with our support teams through phone, email, chat, or in-store visits.
• Marketing and Promotional Activities: Data collected during engagement with Star Gallery Mart's marketing emails, SMS campaigns, advertisements, surveys, or social media channels.

Excluded from Applicability

This Privacy Policy does not apply to:

• Third-Party Services and Platforms: Any websites, applications, or services operated by entities other than Star Gallery Mart, even if they are linked to or referenced on our platform. We encourage users to carefully review the privacy policies of any third-party platforms they interact with.
• Employee and Contractor Data: Personal data collected through recruitment, employment, or contractual engagements, which are governed by separate internal policies.
• Anonymous or Aggregated Data: Information that cannot be linked to an identifiable individual, such as anonymized analytics data or aggregated statistical information.

Third-Party Involvement

While this Privacy Policy governs the handling of personal data collected directly by Star Gallery Mart, certain services may require the involvement of third-party service providers (e.g., payment gateways, logistics companies, and marketing platforms). In such cases, data shared with these providers is limited to what is necessary to perform their services. These entities operate under their own privacy practices and legal obligations.

To provide, operate, and improve our services, Star Gallery Mart collects and processes various types of personal information. This data is essential to fulfilling orders, enhancing user experience, and ensuring seamless interaction with our platform. We gather personal data through direct user input, automated technologies, and third-party services, as outlined below.

A. Personal Data (Directly Provided by You)

Personal data is collected when you register for an account, place an order, or otherwise interact with our platform. This information is necessary for order processing, account management, and customer communication.

Types of Personal Data Collected:

• Full Name: To personalize communication and facilitate order delivery.
• Shipping and Billing Address: Required for product delivery and accurate invoicing.
• Email Address: For account registration, order confirmations, and marketing communications.
• Phone Number: Used for shipping updates, customer support, and two-factor authentication (where applicable).
• Payment Information: Payment details (such as credit/debit card numbers or digital wallet identifiers) are securely processed through trusted third-party gateways (e.g., Stripe, Apple Pay, Tabby). Star Gallery Mart does not store or directly process sensitive payment data on its servers.
• Account Information: When users create an account, we collect login credentials (such as username and password) and store user preferences, saved items, and purchase history to streamline future transactions.

How This Data is Collected:

• During account registration and checkout processes.
• Through customer service inquiries and support interactions.
• When subscribing to newsletters or promotional emails.
• Through surveys, reviews, or feedback forms submitted by users.

B. Transaction and Order Data

This category pertains to information generated during the purchase and order fulfillment process. This data is critical for managing order logistics, tracking shipments, and maintaining accurate records.

Types of Transaction Data Collected:

• Purchase History: Detailed records of past purchases, including product details, quantities, and prices.
• Order Fulfillment Details: Shipping information, courier tracking numbers, and estimated delivery dates.
• Invoice and Tax Data: Records of invoices generated for purchases, including applicable taxes.
• Return and Refund Information: Data related to product returns, refunds, and exchanges.

C. Technical and Usage Data (Automatically Collected)

To optimize our platform's performance, enhance user experience, and ensure security, we automatically collect certain technical data when users interact with our website or mobile application. This information helps us monitor system performance and identify areas for improvement.

Types of Technical and Usage Data Collected:

• IP Address and Device Details: To detect potential security risks and monitor website traffic.
• Browser Type and Version: Ensures compatibility and proper rendering of site elements.
• Operating System and Device Type: Used for optimizing site performance across different devices.
• Access Times and Duration: Tracks session start and end times to monitor site usage patterns.
• Navigation and Page Interaction: Data on which pages are viewed, links clicked, and products searched. This helps in improving user experience and tailoring website content.
• Error Logs and Diagnostics: Automatically collected to identify and resolve technical issues.

How This Data is Collected:

• Through the use of analytics tools embedded in our website and app.
• By logging user interactions with the platform.
• Using IP tracking and session cookies during site visits.

D. Cookies and Tracking Technologies

We use cookies, tracking pixels, web beacons, and similar technologies to improve functionality, personalize user experience, and serve relevant advertisements.

How We Use Cookies and Tracking Technologies:

• Enhance User Experience: Cookies remember user preferences and facilitate faster checkouts.
• Measure Performance: Helps us track site speed, page loading times, and responsiveness.
• Target Advertisements: Serves personalized ads based on user interests and browsing behavior.
• Analyze Engagement: Aggregated data enables us to monitor trends and improve overall service quality.

Types of Cookies We Use:

• Essential Cookies: Required to enable core website functions, such as account logins, cart management, and secure checkout. These cookies cannot be disabled.
• Performance Cookies: Collects data about website performance and user interactions to identify and resolve issues.
• Advertising Cookies: Used to deliver targeted advertisements, promotions, and product recommendations based on browsing history and user preferences.
• Analytics Cookies: Aggregates user activity data to provide insights into site traffic, popular products, and customer engagement.

Managing Cookies and Preferences:

Users can manage or disable cookies through their browser settings. However, disabling cookies may impact website functionality, including:

• The ability to log in or stay logged in.
• Retaining items in the shopping cart.
• Access to personalized recommendations and promotions.

To manage cookie settings:

• In Google Chrome: Go to Settings > Privacy and Security > Cookies and Other Site Data.
• In Safari: Preferences > Privacy > Block All Cookies.
• In Firefox: Preferences > Privacy & Security > Cookies and Site Data.

Web Beacons and Pixels:

• Web Beacons: Embedded in emails and website pages to track engagement.
• Tracking Pixels: Used for marketing analytics, retargeting ads, and social media integration.

Why We Collect This Data:

• To fulfill legal obligations under UAE law.
• To improve our understanding of user needs.
• To ensure platform security and prevent fraudulent activities.
• To enhance customer service and provide relevant product recommendations.

Star Gallery Mart collects and processes personal information to provide high-quality services, ensure seamless platform operation, and maintain legal compliance. This section outlines the purposes for which your data is used, highlighting our commitment to transparency and data security.

1. Order Processing and Fulfillment

We use your personal data to manage all aspects of order fulfillment, including:

• Order Confirmation: Sending transactional emails and notifications regarding order placement, status updates, and shipping confirmations.
• Shipping and Delivery: Coordinating with logistics partners to ensure accurate and timely product delivery to your specified address.
• Returns and Exchanges: Managing return requests, refunds, and product replacements in accordance with our return policy.

Why It's Necessary: This information is essential for ensuring that purchases are processed accurately and delivered to the right location, providing users with a smooth shopping experience.

2. User Account Management

Your data is used to facilitate account creation and management, allowing for a personalized shopping experience. This includes:

• User Registration: Enabling new account creation and verification.
• Profile Management: Allowing users to update personal information, manage shipping addresses, and view purchase history.
• Account Recovery: Assisting users in recovering access to their accounts in case of forgotten credentials or account security concerns.

Why It's Necessary: Account management enhances user convenience, providing secure, streamlined access to our platform.

3. Customer Support and Communication

We collect and process personal data to handle customer service inquiries, resolve complaints, and offer technical support. This may involve:

• Responding to Inquiries: Addressing product questions, service issues, and refund/exchange requests.
• Live Chat and Email Support: Providing real-time assistance through chat and email services.
• Customer Feedback: Collecting and analyzing user feedback to improve service quality.

Why It's Necessary: This ensures that users receive prompt and effective support when encountering issues or needing assistance with purchases.

4. Marketing and Promotional Communications

With your explicit consent, we use personal data to send promotional materials and updates about:

• Exclusive Offers and Discounts: Notifying users of sales, promotions, and special events.
• New Product Launches: Informing customers about new arrivals and product categories.
• Newsletters and Alerts: Providing curated content, seasonal campaigns, and other relevant materials.

Opt-In and Opt-Out Options:

• Users can opt-in to receive promotional emails during account registration or checkout.
• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of marketing emails or updating your profile preferences.

Why It's Necessary: Promotional communications allow us to keep users informed of relevant offers while respecting their right to opt out.

5. Platform Optimization and Development

We analyze technical and usage data to:

• Enhance Website and App Performance: Monitor website traffic, fix technical errors, and ensure compatibility across devices.
• Personalize User Experience: Tailor product recommendations and website content based on past purchases and browsing history.
• Feature Development: Identify trends to improve platform functionality and introduce new features.

Why It's Necessary: Continuous platform enhancement ensures users enjoy a seamless, responsive experience that meets evolving needs.

6. Fraud Prevention and Security

To safeguard users and Star Gallery Mart, personal data is used to:

• Monitor Suspicious Activity: Detect unauthorized transactions, mitigate account breaches, and prevent fraudulent orders.
• Identify Fraudulent Behavior: Analyze irregular account activity and payment patterns to reduce fraud risks.
• Secure Transactions: Use encryption and fraud detection tools to protect payment details and sensitive data.

Why It's Necessary: Fraud prevention measures protect users from financial harm and maintain platform integrity.

7. Legal and Regulatory Compliance

Star Gallery Mart processes personal data to comply with UAE regulatory frameworks and applicable international data protection laws. This may involve:

• Taxation and Invoicing: Generating purchase records and invoices in accordance with UAE tax regulations.
• Legal Disclosures: Responding to lawful requests, subpoenas, or court orders.
• Audits and Investigations: Assisting with regulatory audits and internal investigations to ensure legal compliance.

Why It's Necessary: Legal compliance helps us fulfill statutory obligations, ensuring our business operations align with UAE and international legal standards.

Automated Decision-Making and Profiling

In some instances, we may use automated systems to:

• Recommend Products: Based on past interactions and preferences.
• Detect Fraudulent Transactions: By analyzing transaction patterns.

These automated processes are reviewed regularly to minimize errors. Users have the right to request human intervention in decisions that significantly affect them.

Data Minimization and Purpose Limitation

We only collect data necessary to fulfill the outlined purposes. Personal data is processed solely for the purposes stated in this policy and is not used for unrelated activities without obtaining prior consent.

At Star Gallery Mart, we respect your privacy and ensure that personal data is shared only when necessary to provide essential services, improve our platform, or comply with legal obligations. We do not sell or rent personal information to third parties. However, in the course of our operations, we may share your data under the following circumstances:

A. Trusted Service Providers and Partners

To facilitate our services and maintain operational efficiency, we partner with trusted third parties who perform services on our behalf. These providers are contractually obligated to protect your personal data and are permitted to process it only to the extent required to perform their functions.

Categories of Service Providers and Partners:

• Payment Gateways and Financial Institutions: We work with third-party payment processors (e.g., Stripe, Apple Pay, Tabby) to securely handle payment transactions. Your financial data is encrypted and processed directly by these gateways, ensuring no sensitive payment information is stored on our servers.
• Logistics and Shipping Providers: To ensure timely delivery of purchased products, shipping and courier services receive relevant shipping details, such as your name, address, and phone number.
• Marketing and Advertising Agencies: To manage email campaigns, social media ads, and retargeting, your email address, browsing behavior, and purchase history may be shared with marketing platforms. This ensures personalized and relevant promotional offers. You can opt-out of such communications at any time.
• Cloud Hosting and IT Services: Our platform is hosted on secure cloud environments (such as Amazon Web Services or equivalent) to ensure reliable performance, data storage, and scalability.

Safeguards for Service Providers:

• We conduct due diligence on all third-party partners before sharing personal data.
• Contracts include strict confidentiality clauses to prevent misuse of personal information.
• Data shared with service providers is minimized and limited to essential information required for service performance.

B. Legal Obligations and Authorities

In certain cases, we may be required to disclose personal information to comply with applicable laws, regulations, or legal proceedings. This disclosure is limited to the extent necessary to fulfill our legal obligations or protect our legal rights.

Circumstances Under Which We May Disclose Data:

• Legal Compliance: We may disclose information to regulatory bodies, tax authorities, or law enforcement agencies to comply with UAE laws and international legal frameworks.
• Government and Judicial Requests: If we receive a subpoena, court order, or official request, we may share necessary data with government authorities.
• Fraud Prevention and Protection: To protect Star Gallery Mart from fraudulent activities, disputes, or potential threats, data may be shared with investigative bodies or security consultants.

Your Rights:

• Where legally permitted, we will notify you if your data is shared with government authorities, except in cases where notification is prohibited by law.
• If data is shared for fraud prevention, this will be based on legitimate interest in ensuring platform security.

We prioritize safeguarding personal data by implementing industry-standard security measures and retaining information only as long as necessary for the purposes outlined in this Privacy Policy.

A. Data Retention

We retain personal data for the period required to:

• Fulfill contractual obligations (e.g., processing orders, returns, or warranties).
• Maintain user accounts (while your account remains active).
• Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
• Resolve disputes and enforce our rights.

General Retention Periods:

• Account Information: Retained as long as the user account remains active. Users may request account deletion at any time.
• Transaction Records and Invoices: Retained for up to 7 years in compliance with UAE tax and accounting laws.
• Marketing Preferences: Data related to marketing consents is retained until users opt-out or withdraw consent.
• Inactive Accounts: Accounts with no activity for more than 3 years may be deleted or anonymized, except where data retention is legally required.

Upon expiration of retention periods, personal data is either deleted, anonymized, or aggregated for analytics purposes.

Requesting Data Deletion:

Users can request to delete their personal information by contacting our Data Protection Officer (DPO) at support@stargallery.ae. In some cases, we may be unable to delete data immediately if retention is required by law.

B. Security Measures

To ensure the integrity and confidentiality of personal information, we implement robust security protocols, including:

• Encryption: Sensitive data, including passwords and payment information, is encrypted during storage and transmission. Payment transactions are processed through PCI DSS-compliant gateways to ensure secure handling of cardholder data.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Two-factor authentication (2FA) and role-based access control (RBAC) are enforced for administrative accounts.
• Regular Audits and Penetration Testing: We perform regular security audits and vulnerability assessments to identify and address potential risks. Third-party security firms conduct penetration testing on our platform to ensure defense against cyber threats.
• Firewall and Intrusion Detection Systems (IDS): Our infrastructure is safeguarded by firewalls and IDS to monitor and block unauthorized access attempts.
• Incident Response Plan: In the unlikely event of a data breach, we have an incident response team that promptly addresses vulnerabilities and notifies affected users and regulatory bodies, in accordance with applicable data protection laws.

Your Role in Security:

• Users are encouraged to create strong passwords and change them regularly.
• Be cautious of phishing emails and ensure all communications from Star Gallery Mart originate from our official domain (stargallery.ae).
• Notify us immediately if you suspect unauthorized access to your account.

At Star Gallery Mart, we are committed to ensuring transparency and empowering users to exercise control over their personal information. In accordance with applicable UAE data protection laws and international privacy standards, you are entitled to the following rights regarding your personal data:

A. Right to Access and Data Portability

You have the right to:

• Request a copy of the personal data we hold about you.
• Obtain confirmation regarding whether your personal data is being processed.
• Receive your data in a structured, commonly used, and machine-readable format.
• Request that we transmit your data directly to another organization, where technically feasible.

How to Exercise This Right:

Submit a request by contacting support@stargallery.ae. We will process data access requests within 30 days, unless additional time is required due to the complexity of the request.

B. Right to Correction (Rectification)

If you believe that any of the personal data we hold is inaccurate or incomplete, you may request:

• Correction or updates to your personal details.
• Changes to billing or shipping information associated with your account.

How to Exercise This Right:

Users can correct most account information directly by accessing their profile settings. For further assistance, contact our support team.

C. Right to Deletion (Erasure)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent (for data processed based on consent).
• Your data has been unlawfully processed.
• Legal obligations require data deletion.

Important Notes:

• Certain data (e.g., transactional records) may need to be retained for legal or regulatory purposes.
• Data deletion requests may result in loss of access to order history, loyalty rewards, and account-related preferences.

How to Request Deletion:

To delete your account or remove specific data, navigate to the "Delete Account" option in your profile settings or email us at support@stargallery.ae.

D. Right to Restrict Processing

You can request a restriction on data processing under the following circumstances:

• You contest the accuracy of the data (for the period it takes to verify).
• You object to processing, pending verification of overriding legitimate grounds.

E. Right to Object to Marketing Communications

You have the right to:

• Opt-out of receiving promotional emails, newsletters, and targeted advertisements.
• Withdraw previously given consent to marketing at any time.

How to Manage Marketing Preferences:

• Click the "unsubscribe" link at the bottom of marketing emails.
• Adjust your marketing preferences through account settings.
• Contact us directly at support@stargallery.ae to update your preferences.

As part of our operations, we may transfer personal data to trusted service providers and affiliates located outside the UAE. These transfers are necessary to facilitate services such as payment processing, cloud storage, and international shipping.

How We Protect Your Data During Transfers:

• Adequate Safeguards: We ensure that all data transferred outside the UAE is protected by contractual clauses, standard data protection mechanisms, or certifications compliant with relevant international privacy frameworks.
• Data Minimization: Only essential personal data is transferred to third-party providers.
• Third-Party Compliance: We collaborate exclusively with partners that adhere to strong privacy and security protocols.

Your Rights Regarding International Transfers:

You may request further details about the security measures in place for data transfers by contacting our support team.

Our website and mobile application may contain links to external websites, applications, and services operated by third parties. These links are provided solely for informational and convenience purposes.

Please Note:

• Independent Policies: This Privacy Policy applies exclusively to data collected by Star Gallery Mart. Third-party websites or services accessible through our platform operate independently and have their own privacy policies.
• No Liability: We do not assume responsibility for the privacy practices, content, or security measures of external platforms.
• User Discretion Advised: We strongly encourage users to review the privacy policies and terms of service of third-party websites before providing personal information.

Examples of Third-Party Links:

• Payment gateways (e.g., Stripe, Apple Pay)
• Social media platforms (e.g., Facebook, Instagram)
• Logistics and shipping service providers

Star Gallery Mart reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or service offerings.

Notification of Changes:

• Website Announcements: A notice will be posted on the homepage or login screen.
• Email Notifications: For users with active accounts or newsletter subscriptions.

Effective Date: Changes take effect immediately upon posting unless stated otherwise. Users are encouraged to review this Privacy Policy periodically.

Your Continued Use of Our Platform:

By continuing to use our website or mobile app following updates, you acknowledge and agree to the terms of the revised Privacy Policy. If you disagree with any changes, you may discontinue using our services and request account deletion.

This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal data by Star Gallery Mart across all its digital platforms, including but not limited to its website (stargallery.ae), mobile applications, and customer support channels. This policy outlines the rights and obligations of both users and Star Gallery Mart regarding personal data processing in compliance with applicable United Arab Emirates (UAE) data protection laws and internationally recognized standards.

Applicability

This Privacy Policy applies to:

• Website Visitors and Users: Individuals who browse, interact with, or create accounts on the Star Gallery Mart website.
• Registered Customers: Individuals who register, place orders, and engage in transactions through our ecommerce platform.
• Mobile Application Users: Users accessing services via Star Gallery Mart's mobile application.
• Customer Support Interactions: Data collected during interactions with our support teams through phone, email, chat, or in-store visits.
• Marketing and Promotional Activities: Data collected during engagement with Star Gallery Mart's marketing emails, SMS campaigns, advertisements, surveys, or social media channels.

Excluded from Applicability

This Privacy Policy does not apply to:

• Third-Party Services and Platforms: Any websites, applications, or services operated by entities other than Star Gallery Mart, even if they are linked to or referenced on our platform. We encourage users to carefully review the privacy policies of any third-party platforms they interact with.
• Employee and Contractor Data: Personal data collected through recruitment, employment, or contractual engagements, which are governed by separate internal policies.
• Anonymous or Aggregated Data: Information that cannot be linked to an identifiable individual, such as anonymized analytics data or aggregated statistical information.

Third-Party Involvement

While this Privacy Policy governs the handling of personal data collected directly by Star Gallery Mart, certain services may require the involvement of third-party service providers (e.g., payment gateways, logistics companies, and marketing platforms). In such cases, data shared with these providers is limited to what is necessary to perform their services. These entities operate under their own privacy practices and legal obligations.

To provide, operate, and improve our services, Star Gallery Mart collects and processes various types of personal information. This data is essential to fulfilling orders, enhancing user experience, and ensuring seamless interaction with our platform. We gather personal data through direct user input, automated technologies, and third-party services, as outlined below.

A. Personal Data (Directly Provided by You)

Personal data is collected when you register for an account, place an order, or otherwise interact with our platform. This information is necessary for order processing, account management, and customer communication.

Types of Personal Data Collected:

• Full Name: To personalize communication and facilitate order delivery.
• Shipping and Billing Address: Required for product delivery and accurate invoicing.
• Email Address: For account registration, order confirmations, and marketing communications.
• Phone Number: Used for shipping updates, customer support, and two-factor authentication (where applicable).
• Payment Information: Payment details (such as credit/debit card numbers or digital wallet identifiers) are securely processed through trusted third-party gateways (e.g., Stripe, Apple Pay, Tabby). Star Gallery Mart does not store or directly process sensitive payment data on its servers.
• Account Information: When users create an account, we collect login credentials (such as username and password) and store user preferences, saved items, and purchase history to streamline future transactions.

How This Data is Collected:

• During account registration and checkout processes.
• Through customer service inquiries and support interactions.
• When subscribing to newsletters or promotional emails.
• Through surveys, reviews, or feedback forms submitted by users.

B. Transaction and Order Data

This category pertains to information generated during the purchase and order fulfillment process. This data is critical for managing order logistics, tracking shipments, and maintaining accurate records.

Types of Transaction Data Collected:

• Purchase History: Detailed records of past purchases, including product details, quantities, and prices.
• Order Fulfillment Details: Shipping information, courier tracking numbers, and estimated delivery dates.
• Invoice and Tax Data: Records of invoices generated for purchases, including applicable taxes.
• Return and Refund Information: Data related to product returns, refunds, and exchanges.

C. Technical and Usage Data (Automatically Collected)

To optimize our platform's performance, enhance user experience, and ensure security, we automatically collect certain technical data when users interact with our website or mobile application. This information helps us monitor system performance and identify areas for improvement.

Types of Technical and Usage Data Collected:

• IP Address and Device Details: To detect potential security risks and monitor website traffic.
• Browser Type and Version: Ensures compatibility and proper rendering of site elements.
• Operating System and Device Type: Used for optimizing site performance across different devices.
• Access Times and Duration: Tracks session start and end times to monitor site usage patterns.
• Navigation and Page Interaction: Data on which pages are viewed, links clicked, and products searched. This helps in improving user experience and tailoring website content.
• Error Logs and Diagnostics: Automatically collected to identify and resolve technical issues.

How This Data is Collected:

• Through the use of analytics tools embedded in our website and app.
• By logging user interactions with the platform.
• Using IP tracking and session cookies during site visits.

D. Cookies and Tracking Technologies

We use cookies, tracking pixels, web beacons, and similar technologies to improve functionality, personalize user experience, and serve relevant advertisements.

How We Use Cookies and Tracking Technologies:

• Enhance User Experience: Cookies remember user preferences and facilitate faster checkouts.
• Measure Performance: Helps us track site speed, page loading times, and responsiveness.
• Target Advertisements: Serves personalized ads based on user interests and browsing behavior.
• Analyze Engagement: Aggregated data enables us to monitor trends and improve overall service quality.

Types of Cookies We Use:

• Essential Cookies: Required to enable core website functions, such as account logins, cart management, and secure checkout. These cookies cannot be disabled.
• Performance Cookies: Collects data about website performance and user interactions to identify and resolve issues.
• Advertising Cookies: Used to deliver targeted advertisements, promotions, and product recommendations based on browsing history and user preferences.
• Analytics Cookies: Aggregates user activity data to provide insights into site traffic, popular products, and customer engagement.

Managing Cookies and Preferences:

Users can manage or disable cookies through their browser settings. However, disabling cookies may impact website functionality, including:

• The ability to log in or stay logged in.
• Retaining items in the shopping cart.
• Access to personalized recommendations and promotions.

To manage cookie settings:

• In Google Chrome: Go to Settings > Privacy and Security > Cookies and Other Site Data.
• In Safari: Preferences > Privacy > Block All Cookies.
• In Firefox: Preferences > Privacy & Security > Cookies and Site Data.

Web Beacons and Pixels:

• Web Beacons: Embedded in emails and website pages to track engagement.
• Tracking Pixels: Used for marketing analytics, retargeting ads, and social media integration.

Why We Collect This Data:

• To fulfill legal obligations under UAE law.
• To improve our understanding of user needs.
• To ensure platform security and prevent fraudulent activities.
• To enhance customer service and provide relevant product recommendations.

Star Gallery Mart collects and processes personal information to provide high-quality services, ensure seamless platform operation, and maintain legal compliance. This section outlines the purposes for which your data is used, highlighting our commitment to transparency and data security.

1. Order Processing and Fulfillment

We use your personal data to manage all aspects of order fulfillment, including:

• Order Confirmation: Sending transactional emails and notifications regarding order placement, status updates, and shipping confirmations.
• Shipping and Delivery: Coordinating with logistics partners to ensure accurate and timely product delivery to your specified address.
• Returns and Exchanges: Managing return requests, refunds, and product replacements in accordance with our return policy.

Why It's Necessary: This information is essential for ensuring that purchases are processed accurately and delivered to the right location, providing users with a smooth shopping experience.

2. User Account Management

Your data is used to facilitate account creation and management, allowing for a personalized shopping experience. This includes:

• User Registration: Enabling new account creation and verification.
• Profile Management: Allowing users to update personal information, manage shipping addresses, and view purchase history.
• Account Recovery: Assisting users in recovering access to their accounts in case of forgotten credentials or account security concerns.

Why It's Necessary: Account management enhances user convenience, providing secure, streamlined access to our platform.

3. Customer Support and Communication

We collect and process personal data to handle customer service inquiries, resolve complaints, and offer technical support. This may involve:

• Responding to Inquiries: Addressing product questions, service issues, and refund/exchange requests.
• Live Chat and Email Support: Providing real-time assistance through chat and email services.
• Customer Feedback: Collecting and analyzing user feedback to improve service quality.

Why It's Necessary: This ensures that users receive prompt and effective support when encountering issues or needing assistance with purchases.

4. Marketing and Promotional Communications

With your explicit consent, we use personal data to send promotional materials and updates about:

• Exclusive Offers and Discounts: Notifying users of sales, promotions, and special events.
• New Product Launches: Informing customers about new arrivals and product categories.
• Newsletters and Alerts: Providing curated content, seasonal campaigns, and other relevant materials.

Opt-In and Opt-Out Options:

• Users can opt-in to receive promotional emails during account registration or checkout.
• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of marketing emails or updating your profile preferences.

Why It's Necessary: Promotional communications allow us to keep users informed of relevant offers while respecting their right to opt out.

5. Platform Optimization and Development

We analyze technical and usage data to:

• Enhance Website and App Performance: Monitor website traffic, fix technical errors, and ensure compatibility across devices.
• Personalize User Experience: Tailor product recommendations and website content based on past purchases and browsing history.
• Feature Development: Identify trends to improve platform functionality and introduce new features.

Why It's Necessary: Continuous platform enhancement ensures users enjoy a seamless, responsive experience that meets evolving needs.

6. Fraud Prevention and Security

To safeguard users and Star Gallery Mart, personal data is used to:

• Monitor Suspicious Activity: Detect unauthorized transactions, mitigate account breaches, and prevent fraudulent orders.
• Identify Fraudulent Behavior: Analyze irregular account activity and payment patterns to reduce fraud risks.
• Secure Transactions: Use encryption and fraud detection tools to protect payment details and sensitive data.

Why It's Necessary: Fraud prevention measures protect users from financial harm and maintain platform integrity.

7. Legal and Regulatory Compliance

Star Gallery Mart processes personal data to comply with UAE regulatory frameworks and applicable international data protection laws. This may involve:

• Taxation and Invoicing: Generating purchase records and invoices in accordance with UAE tax regulations.
• Legal Disclosures: Responding to lawful requests, subpoenas, or court orders.
• Audits and Investigations: Assisting with regulatory audits and internal investigations to ensure legal compliance.

Why It's Necessary: Legal compliance helps us fulfill statutory obligations, ensuring our business operations align with UAE and international legal standards.

Automated Decision-Making and Profiling

In some instances, we may use automated systems to:

• Recommend Products: Based on past interactions and preferences.
• Detect Fraudulent Transactions: By analyzing transaction patterns.

These automated processes are reviewed regularly to minimize errors. Users have the right to request human intervention in decisions that significantly affect them.

Data Minimization and Purpose Limitation

We only collect data necessary to fulfill the outlined purposes. Personal data is processed solely for the purposes stated in this policy and is not used for unrelated activities without obtaining prior consent.

At Star Gallery Mart, we respect your privacy and ensure that personal data is shared only when necessary to provide essential services, improve our platform, or comply with legal obligations. We do not sell or rent personal information to third parties. However, in the course of our operations, we may share your data under the following circumstances:

A. Trusted Service Providers and Partners

To facilitate our services and maintain operational efficiency, we partner with trusted third parties who perform services on our behalf. These providers are contractually obligated to protect your personal data and are permitted to process it only to the extent required to perform their functions.

Categories of Service Providers and Partners:

• Payment Gateways and Financial Institutions: We work with third-party payment processors (e.g., Stripe, Apple Pay, Tabby) to securely handle payment transactions. Your financial data is encrypted and processed directly by these gateways, ensuring no sensitive payment information is stored on our servers.
• Logistics and Shipping Providers: To ensure timely delivery of purchased products, shipping and courier services receive relevant shipping details, such as your name, address, and phone number.
• Marketing and Advertising Agencies: To manage email campaigns, social media ads, and retargeting, your email address, browsing behavior, and purchase history may be shared with marketing platforms. This ensures personalized and relevant promotional offers. You can opt-out of such communications at any time.
• Cloud Hosting and IT Services: Our platform is hosted on secure cloud environments (such as Amazon Web Services or equivalent) to ensure reliable performance, data storage, and scalability.

Safeguards for Service Providers:

• We conduct due diligence on all third-party partners before sharing personal data.
• Contracts include strict confidentiality clauses to prevent misuse of personal information.
• Data shared with service providers is minimized and limited to essential information required for service performance.

B. Legal Obligations and Authorities

In certain cases, we may be required to disclose personal information to comply with applicable laws, regulations, or legal proceedings. This disclosure is limited to the extent necessary to fulfill our legal obligations or protect our legal rights.

Circumstances Under Which We May Disclose Data:

• Legal Compliance: We may disclose information to regulatory bodies, tax authorities, or law enforcement agencies to comply with UAE laws and international legal frameworks.
• Government and Judicial Requests: If we receive a subpoena, court order, or official request, we may share necessary data with government authorities.
• Fraud Prevention and Protection: To protect Star Gallery Mart from fraudulent activities, disputes, or potential threats, data may be shared with investigative bodies or security consultants.

Your Rights:

• Where legally permitted, we will notify you if your data is shared with government authorities, except in cases where notification is prohibited by law.
• If data is shared for fraud prevention, this will be based on legitimate interest in ensuring platform security.

We prioritize safeguarding personal data by implementing industry-standard security measures and retaining information only as long as necessary for the purposes outlined in this Privacy Policy.

A. Data Retention

We retain personal data for the period required to:

• Fulfill contractual obligations (e.g., processing orders, returns, or warranties).
• Maintain user accounts (while your account remains active).
• Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
• Resolve disputes and enforce our rights.

General Retention Periods:

• Account Information: Retained as long as the user account remains active. Users may request account deletion at any time.
• Transaction Records and Invoices: Retained for up to 7 years in compliance with UAE tax and accounting laws.
• Marketing Preferences: Data related to marketing consents is retained until users opt-out or withdraw consent.
• Inactive Accounts: Accounts with no activity for more than 3 years may be deleted or anonymized, except where data retention is legally required.

Upon expiration of retention periods, personal data is either deleted, anonymized, or aggregated for analytics purposes.

Requesting Data Deletion:

Users can request to delete their personal information by contacting our Data Protection Officer (DPO) at support@stargallery.ae. In some cases, we may be unable to delete data immediately if retention is required by law.

B. Security Measures

To ensure the integrity and confidentiality of personal information, we implement robust security protocols, including:

• Encryption: Sensitive data, including passwords and payment information, is encrypted during storage and transmission. Payment transactions are processed through PCI DSS-compliant gateways to ensure secure handling of cardholder data.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Two-factor authentication (2FA) and role-based access control (RBAC) are enforced for administrative accounts.
• Regular Audits and Penetration Testing: We perform regular security audits and vulnerability assessments to identify and address potential risks. Third-party security firms conduct penetration testing on our platform to ensure defense against cyber threats.
• Firewall and Intrusion Detection Systems (IDS): Our infrastructure is safeguarded by firewalls and IDS to monitor and block unauthorized access attempts.
• Incident Response Plan: In the unlikely event of a data breach, we have an incident response team that promptly addresses vulnerabilities and notifies affected users and regulatory bodies, in accordance with applicable data protection laws.

Your Role in Security:

• Users are encouraged to create strong passwords and change them regularly.
• Be cautious of phishing emails and ensure all communications from Star Gallery Mart originate from our official domain (stargallery.ae).
• Notify us immediately if you suspect unauthorized access to your account.

At Star Gallery Mart, we are committed to ensuring transparency and empowering users to exercise control over their personal information. In accordance with applicable UAE data protection laws and international privacy standards, you are entitled to the following rights regarding your personal data:

A. Right to Access and Data Portability

You have the right to:

• Request a copy of the personal data we hold about you.
• Obtain confirmation regarding whether your personal data is being processed.
• Receive your data in a structured, commonly used, and machine-readable format.
• Request that we transmit your data directly to another organization, where technically feasible.

How to Exercise This Right:

Submit a request by contacting support@stargallery.ae. We will process data access requests within 30 days, unless additional time is required due to the complexity of the request.

B. Right to Correction (Rectification)

If you believe that any of the personal data we hold is inaccurate or incomplete, you may request:

• Correction or updates to your personal details.
• Changes to billing or shipping information associated with your account.

How to Exercise This Right:

Users can correct most account information directly by accessing their profile settings. For further assistance, contact our support team.

C. Right to Deletion (Erasure)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent (for data processed based on consent).
• Your data has been unlawfully processed.
• Legal obligations require data deletion.

Important Notes:

• Certain data (e.g., transactional records) may need to be retained for legal or regulatory purposes.
• Data deletion requests may result in loss of access to order history, loyalty rewards, and account-related preferences.

How to Request Deletion:

To delete your account or remove specific data, navigate to the "Delete Account" option in your profile settings or email us at support@stargallery.ae.

D. Right to Restrict Processing

You can request a restriction on data processing under the following circumstances:

• You contest the accuracy of the data (for the period it takes to verify).
• You object to processing, pending verification of overriding legitimate grounds.

E. Right to Object to Marketing Communications

You have the right to:

• Opt-out of receiving promotional emails, newsletters, and targeted advertisements.
• Withdraw previously given consent to marketing at any time.

How to Manage Marketing Preferences:

• Click the "unsubscribe" link at the bottom of marketing emails.
• Adjust your marketing preferences through account settings.
• Contact us directly at support@stargallery.ae to update your preferences.

As part of our operations, we may transfer personal data to trusted service providers and affiliates located outside the UAE. These transfers are necessary to facilitate services such as payment processing, cloud storage, and international shipping.

How We Protect Your Data During Transfers:

• Adequate Safeguards: We ensure that all data transferred outside the UAE is protected by contractual clauses, standard data protection mechanisms, or certifications compliant with relevant international privacy frameworks.
• Data Minimization: Only essential personal data is transferred to third-party providers.
• Third-Party Compliance: We collaborate exclusively with partners that adhere to strong privacy and security protocols.

Your Rights Regarding International Transfers:

You may request further details about the security measures in place for data transfers by contacting our support team.

Our website and mobile application may contain links to external websites, applications, and services operated by third parties. These links are provided solely for informational and convenience purposes.

Please Note:

• Independent Policies: This Privacy Policy applies exclusively to data collected by Star Gallery Mart. Third-party websites or services accessible through our platform operate independently and have their own privacy policies.
• No Liability: We do not assume responsibility for the privacy practices, content, or security measures of external platforms.
• User Discretion Advised: We strongly encourage users to review the privacy policies and terms of service of third-party websites before providing personal information.

Examples of Third-Party Links:

• Payment gateways (e.g., Stripe, Apple Pay)
• Social media platforms (e.g., Facebook, Instagram)
• Logistics and shipping service providers

Star Gallery Mart reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or service offerings.

Notification of Changes:

• Website Announcements: A notice will be posted on the homepage or login screen.
• Email Notifications: For users with active accounts or newsletter subscriptions.

Effective Date: Changes take effect immediately upon posting unless stated otherwise. Users are encouraged to review this Privacy Policy periodically.

Your Continued Use of Our Platform:

By continuing to use our website or mobile app following updates, you acknowledge and agree to the terms of the revised Privacy Policy. If you disagree with any changes, you may discontinue using our services and request account deletion.

This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal data by Star Gallery Mart across all its digital platforms, including but not limited to its website (stargallery.ae), mobile applications, and customer support channels. This policy outlines the rights and obligations of both users and Star Gallery Mart regarding personal data processing in compliance with applicable United Arab Emirates (UAE) data protection laws and internationally recognized standards.

Applicability

This Privacy Policy applies to:

• Website Visitors and Users: Individuals who browse, interact with, or create accounts on the Star Gallery Mart website.
• Registered Customers: Individuals who register, place orders, and engage in transactions through our ecommerce platform.
• Mobile Application Users: Users accessing services via Star Gallery Mart's mobile application.
• Customer Support Interactions: Data collected during interactions with our support teams through phone, email, chat, or in-store visits.
• Marketing and Promotional Activities: Data collected during engagement with Star Gallery Mart's marketing emails, SMS campaigns, advertisements, surveys, or social media channels.

Excluded from Applicability

This Privacy Policy does not apply to:

• Third-Party Services and Platforms: Any websites, applications, or services operated by entities other than Star Gallery Mart, even if they are linked to or referenced on our platform. We encourage users to carefully review the privacy policies of any third-party platforms they interact with.
• Employee and Contractor Data: Personal data collected through recruitment, employment, or contractual engagements, which are governed by separate internal policies.
• Anonymous or Aggregated Data: Information that cannot be linked to an identifiable individual, such as anonymized analytics data or aggregated statistical information.

Third-Party Involvement

While this Privacy Policy governs the handling of personal data collected directly by Star Gallery Mart, certain services may require the involvement of third-party service providers (e.g., payment gateways, logistics companies, and marketing platforms). In such cases, data shared with these providers is limited to what is necessary to perform their services. These entities operate under their own privacy practices and legal obligations.

To provide, operate, and improve our services, Star Gallery Mart collects and processes various types of personal information. This data is essential to fulfilling orders, enhancing user experience, and ensuring seamless interaction with our platform. We gather personal data through direct user input, automated technologies, and third-party services, as outlined below.

A. Personal Data (Directly Provided by You)

Personal data is collected when you register for an account, place an order, or otherwise interact with our platform. This information is necessary for order processing, account management, and customer communication.

Types of Personal Data Collected:

• Full Name: To personalize communication and facilitate order delivery.
• Shipping and Billing Address: Required for product delivery and accurate invoicing.
• Email Address: For account registration, order confirmations, and marketing communications.
• Phone Number: Used for shipping updates, customer support, and two-factor authentication (where applicable).
• Payment Information: Payment details (such as credit/debit card numbers or digital wallet identifiers) are securely processed through trusted third-party gateways (e.g., Stripe, Apple Pay, Tabby). Star Gallery Mart does not store or directly process sensitive payment data on its servers.
• Account Information: When users create an account, we collect login credentials (such as username and password) and store user preferences, saved items, and purchase history to streamline future transactions.

How This Data is Collected:

• During account registration and checkout processes.
• Through customer service inquiries and support interactions.
• When subscribing to newsletters or promotional emails.
• Through surveys, reviews, or feedback forms submitted by users.

B. Transaction and Order Data

This category pertains to information generated during the purchase and order fulfillment process. This data is critical for managing order logistics, tracking shipments, and maintaining accurate records.

Types of Transaction Data Collected:

• Purchase History: Detailed records of past purchases, including product details, quantities, and prices.
• Order Fulfillment Details: Shipping information, courier tracking numbers, and estimated delivery dates.
• Invoice and Tax Data: Records of invoices generated for purchases, including applicable taxes.
• Return and Refund Information: Data related to product returns, refunds, and exchanges.

C. Technical and Usage Data (Automatically Collected)

To optimize our platform's performance, enhance user experience, and ensure security, we automatically collect certain technical data when users interact with our website or mobile application. This information helps us monitor system performance and identify areas for improvement.

Types of Technical and Usage Data Collected:

• IP Address and Device Details: To detect potential security risks and monitor website traffic.
• Browser Type and Version: Ensures compatibility and proper rendering of site elements.
• Operating System and Device Type: Used for optimizing site performance across different devices.
• Access Times and Duration: Tracks session start and end times to monitor site usage patterns.
• Navigation and Page Interaction: Data on which pages are viewed, links clicked, and products searched. This helps in improving user experience and tailoring website content.
• Error Logs and Diagnostics: Automatically collected to identify and resolve technical issues.

How This Data is Collected:

• Through the use of analytics tools embedded in our website and app.
• By logging user interactions with the platform.
• Using IP tracking and session cookies during site visits.

D. Cookies and Tracking Technologies

We use cookies, tracking pixels, web beacons, and similar technologies to improve functionality, personalize user experience, and serve relevant advertisements.

How We Use Cookies and Tracking Technologies:

• Enhance User Experience: Cookies remember user preferences and facilitate faster checkouts.
• Measure Performance: Helps us track site speed, page loading times, and responsiveness.
• Target Advertisements: Serves personalized ads based on user interests and browsing behavior.
• Analyze Engagement: Aggregated data enables us to monitor trends and improve overall service quality.

Types of Cookies We Use:

• Essential Cookies: Required to enable core website functions, such as account logins, cart management, and secure checkout. These cookies cannot be disabled.
• Performance Cookies: Collects data about website performance and user interactions to identify and resolve issues.
• Advertising Cookies: Used to deliver targeted advertisements, promotions, and product recommendations based on browsing history and user preferences.
• Analytics Cookies: Aggregates user activity data to provide insights into site traffic, popular products, and customer engagement.

Managing Cookies and Preferences:

Users can manage or disable cookies through their browser settings. However, disabling cookies may impact website functionality, including:

• The ability to log in or stay logged in.
• Retaining items in the shopping cart.
• Access to personalized recommendations and promotions.

To manage cookie settings:

• In Google Chrome: Go to Settings > Privacy and Security > Cookies and Other Site Data.
• In Safari: Preferences > Privacy > Block All Cookies.
• In Firefox: Preferences > Privacy & Security > Cookies and Site Data.

Web Beacons and Pixels:

• Web Beacons: Embedded in emails and website pages to track engagement.
• Tracking Pixels: Used for marketing analytics, retargeting ads, and social media integration.

Why We Collect This Data:

• To fulfill legal obligations under UAE law.
• To improve our understanding of user needs.
• To ensure platform security and prevent fraudulent activities.
• To enhance customer service and provide relevant product recommendations.

Star Gallery Mart collects and processes personal information to provide high-quality services, ensure seamless platform operation, and maintain legal compliance. This section outlines the purposes for which your data is used, highlighting our commitment to transparency and data security.

1. Order Processing and Fulfillment

We use your personal data to manage all aspects of order fulfillment, including:

• Order Confirmation: Sending transactional emails and notifications regarding order placement, status updates, and shipping confirmations.
• Shipping and Delivery: Coordinating with logistics partners to ensure accurate and timely product delivery to your specified address.
• Returns and Exchanges: Managing return requests, refunds, and product replacements in accordance with our return policy.

Why It's Necessary: This information is essential for ensuring that purchases are processed accurately and delivered to the right location, providing users with a smooth shopping experience.

2. User Account Management

Your data is used to facilitate account creation and management, allowing for a personalized shopping experience. This includes:

• User Registration: Enabling new account creation and verification.
• Profile Management: Allowing users to update personal information, manage shipping addresses, and view purchase history.
• Account Recovery: Assisting users in recovering access to their accounts in case of forgotten credentials or account security concerns.

Why It's Necessary: Account management enhances user convenience, providing secure, streamlined access to our platform.

3. Customer Support and Communication

We collect and process personal data to handle customer service inquiries, resolve complaints, and offer technical support. This may involve:

• Responding to Inquiries: Addressing product questions, service issues, and refund/exchange requests.
• Live Chat and Email Support: Providing real-time assistance through chat and email services.
• Customer Feedback: Collecting and analyzing user feedback to improve service quality.

Why It's Necessary: This ensures that users receive prompt and effective support when encountering issues or needing assistance with purchases.

4. Marketing and Promotional Communications

With your explicit consent, we use personal data to send promotional materials and updates about:

• Exclusive Offers and Discounts: Notifying users of sales, promotions, and special events.
• New Product Launches: Informing customers about new arrivals and product categories.
• Newsletters and Alerts: Providing curated content, seasonal campaigns, and other relevant materials.

Opt-In and Opt-Out Options:

• Users can opt-in to receive promotional emails during account registration or checkout.
• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of marketing emails or updating your profile preferences.

Why It's Necessary: Promotional communications allow us to keep users informed of relevant offers while respecting their right to opt out.

5. Platform Optimization and Development

We analyze technical and usage data to:

• Enhance Website and App Performance: Monitor website traffic, fix technical errors, and ensure compatibility across devices.
• Personalize User Experience: Tailor product recommendations and website content based on past purchases and browsing history.
• Feature Development: Identify trends to improve platform functionality and introduce new features.

Why It's Necessary: Continuous platform enhancement ensures users enjoy a seamless, responsive experience that meets evolving needs.

6. Fraud Prevention and Security

To safeguard users and Star Gallery Mart, personal data is used to:

• Monitor Suspicious Activity: Detect unauthorized transactions, mitigate account breaches, and prevent fraudulent orders.
• Identify Fraudulent Behavior: Analyze irregular account activity and payment patterns to reduce fraud risks.
• Secure Transactions: Use encryption and fraud detection tools to protect payment details and sensitive data.

Why It's Necessary: Fraud prevention measures protect users from financial harm and maintain platform integrity.

7. Legal and Regulatory Compliance

Star Gallery Mart processes personal data to comply with UAE regulatory frameworks and applicable international data protection laws. This may involve:

• Taxation and Invoicing: Generating purchase records and invoices in accordance with UAE tax regulations.
• Legal Disclosures: Responding to lawful requests, subpoenas, or court orders.
• Audits and Investigations: Assisting with regulatory audits and internal investigations to ensure legal compliance.

Why It's Necessary: Legal compliance helps us fulfill statutory obligations, ensuring our business operations align with UAE and international legal standards.

Automated Decision-Making and Profiling

In some instances, we may use automated systems to:

• Recommend Products: Based on past interactions and preferences.
• Detect Fraudulent Transactions: By analyzing transaction patterns.

These automated processes are reviewed regularly to minimize errors. Users have the right to request human intervention in decisions that significantly affect them.

Data Minimization and Purpose Limitation

We only collect data necessary to fulfill the outlined purposes. Personal data is processed solely for the purposes stated in this policy and is not used for unrelated activities without obtaining prior consent.

At Star Gallery Mart, we respect your privacy and ensure that personal data is shared only when necessary to provide essential services, improve our platform, or comply with legal obligations. We do not sell or rent personal information to third parties. However, in the course of our operations, we may share your data under the following circumstances:

A. Trusted Service Providers and Partners

To facilitate our services and maintain operational efficiency, we partner with trusted third parties who perform services on our behalf. These providers are contractually obligated to protect your personal data and are permitted to process it only to the extent required to perform their functions.

Categories of Service Providers and Partners:

• Payment Gateways and Financial Institutions: We work with third-party payment processors (e.g., Stripe, Apple Pay, Tabby) to securely handle payment transactions. Your financial data is encrypted and processed directly by these gateways, ensuring no sensitive payment information is stored on our servers.
• Logistics and Shipping Providers: To ensure timely delivery of purchased products, shipping and courier services receive relevant shipping details, such as your name, address, and phone number.
• Marketing and Advertising Agencies: To manage email campaigns, social media ads, and retargeting, your email address, browsing behavior, and purchase history may be shared with marketing platforms. This ensures personalized and relevant promotional offers. You can opt-out of such communications at any time.
• Cloud Hosting and IT Services: Our platform is hosted on secure cloud environments (such as Amazon Web Services or equivalent) to ensure reliable performance, data storage, and scalability.

Safeguards for Service Providers:

• We conduct due diligence on all third-party partners before sharing personal data.
• Contracts include strict confidentiality clauses to prevent misuse of personal information.
• Data shared with service providers is minimized and limited to essential information required for service performance.

B. Legal Obligations and Authorities

In certain cases, we may be required to disclose personal information to comply with applicable laws, regulations, or legal proceedings. This disclosure is limited to the extent necessary to fulfill our legal obligations or protect our legal rights.

Circumstances Under Which We May Disclose Data:

• Legal Compliance: We may disclose information to regulatory bodies, tax authorities, or law enforcement agencies to comply with UAE laws and international legal frameworks.
• Government and Judicial Requests: If we receive a subpoena, court order, or official request, we may share necessary data with government authorities.
• Fraud Prevention and Protection: To protect Star Gallery Mart from fraudulent activities, disputes, or potential threats, data may be shared with investigative bodies or security consultants.

Your Rights:

• Where legally permitted, we will notify you if your data is shared with government authorities, except in cases where notification is prohibited by law.
• If data is shared for fraud prevention, this will be based on legitimate interest in ensuring platform security.

We prioritize safeguarding personal data by implementing industry-standard security measures and retaining information only as long as necessary for the purposes outlined in this Privacy Policy.

A. Data Retention

We retain personal data for the period required to:

• Fulfill contractual obligations (e.g., processing orders, returns, or warranties).
• Maintain user accounts (while your account remains active).
• Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
• Resolve disputes and enforce our rights.

General Retention Periods:

• Account Information: Retained as long as the user account remains active. Users may request account deletion at any time.
• Transaction Records and Invoices: Retained for up to 7 years in compliance with UAE tax and accounting laws.
• Marketing Preferences: Data related to marketing consents is retained until users opt-out or withdraw consent.
• Inactive Accounts: Accounts with no activity for more than 3 years may be deleted or anonymized, except where data retention is legally required.

Upon expiration of retention periods, personal data is either deleted, anonymized, or aggregated for analytics purposes.

Requesting Data Deletion:

Users can request to delete their personal information by contacting our Data Protection Officer (DPO) at support@stargallery.ae. In some cases, we may be unable to delete data immediately if retention is required by law.

B. Security Measures

To ensure the integrity and confidentiality of personal information, we implement robust security protocols, including:

• Encryption: Sensitive data, including passwords and payment information, is encrypted during storage and transmission. Payment transactions are processed through PCI DSS-compliant gateways to ensure secure handling of cardholder data.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Two-factor authentication (2FA) and role-based access control (RBAC) are enforced for administrative accounts.
• Regular Audits and Penetration Testing: We perform regular security audits and vulnerability assessments to identify and address potential risks. Third-party security firms conduct penetration testing on our platform to ensure defense against cyber threats.
• Firewall and Intrusion Detection Systems (IDS): Our infrastructure is safeguarded by firewalls and IDS to monitor and block unauthorized access attempts.
• Incident Response Plan: In the unlikely event of a data breach, we have an incident response team that promptly addresses vulnerabilities and notifies affected users and regulatory bodies, in accordance with applicable data protection laws.

Your Role in Security:

• Users are encouraged to create strong passwords and change them regularly.
• Be cautious of phishing emails and ensure all communications from Star Gallery Mart originate from our official domain (stargallery.ae).
• Notify us immediately if you suspect unauthorized access to your account.

At Star Gallery Mart, we are committed to ensuring transparency and empowering users to exercise control over their personal information. In accordance with applicable UAE data protection laws and international privacy standards, you are entitled to the following rights regarding your personal data:

A. Right to Access and Data Portability

You have the right to:

• Request a copy of the personal data we hold about you.
• Obtain confirmation regarding whether your personal data is being processed.
• Receive your data in a structured, commonly used, and machine-readable format.
• Request that we transmit your data directly to another organization, where technically feasible.

How to Exercise This Right:

Submit a request by contacting support@stargallery.ae. We will process data access requests within 30 days, unless additional time is required due to the complexity of the request.

B. Right to Correction (Rectification)

If you believe that any of the personal data we hold is inaccurate or incomplete, you may request:

• Correction or updates to your personal details.
• Changes to billing or shipping information associated with your account.

How to Exercise This Right:

Users can correct most account information directly by accessing their profile settings. For further assistance, contact our support team.

C. Right to Deletion (Erasure)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent (for data processed based on consent).
• Your data has been unlawfully processed.
• Legal obligations require data deletion.

Important Notes:

• Certain data (e.g., transactional records) may need to be retained for legal or regulatory purposes.
• Data deletion requests may result in loss of access to order history, loyalty rewards, and account-related preferences.

How to Request Deletion:

To delete your account or remove specific data, navigate to the "Delete Account" option in your profile settings or email us at support@stargallery.ae.

D. Right to Restrict Processing

You can request a restriction on data processing under the following circumstances:

• You contest the accuracy of the data (for the period it takes to verify).
• You object to processing, pending verification of overriding legitimate grounds.

E. Right to Object to Marketing Communications

You have the right to:

• Opt-out of receiving promotional emails, newsletters, and targeted advertisements.
• Withdraw previously given consent to marketing at any time.

How to Manage Marketing Preferences:

• Click the "unsubscribe" link at the bottom of marketing emails.
• Adjust your marketing preferences through account settings.
• Contact us directly at support@stargallery.ae to update your preferences.

As part of our operations, we may transfer personal data to trusted service providers and affiliates located outside the UAE. These transfers are necessary to facilitate services such as payment processing, cloud storage, and international shipping.

How We Protect Your Data During Transfers:

• Adequate Safeguards: We ensure that all data transferred outside the UAE is protected by contractual clauses, standard data protection mechanisms, or certifications compliant with relevant international privacy frameworks.
• Data Minimization: Only essential personal data is transferred to third-party providers.
• Third-Party Compliance: We collaborate exclusively with partners that adhere to strong privacy and security protocols.

Your Rights Regarding International Transfers:

You may request further details about the security measures in place for data transfers by contacting our support team.

Our website and mobile application may contain links to external websites, applications, and services operated by third parties. These links are provided solely for informational and convenience purposes.

Please Note:

• Independent Policies: This Privacy Policy applies exclusively to data collected by Star Gallery Mart. Third-party websites or services accessible through our platform operate independently and have their own privacy policies.
• No Liability: We do not assume responsibility for the privacy practices, content, or security measures of external platforms.
• User Discretion Advised: We strongly encourage users to review the privacy policies and terms of service of third-party websites before providing personal information.

Examples of Third-Party Links:

• Payment gateways (e.g., Stripe, Apple Pay)
• Social media platforms (e.g., Facebook, Instagram)
• Logistics and shipping service providers

Star Gallery Mart reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or service offerings.

Notification of Changes:

• Website Announcements: A notice will be posted on the homepage or login screen.
• Email Notifications: For users with active accounts or newsletter subscriptions.

Effective Date: Changes take effect immediately upon posting unless stated otherwise. Users are encouraged to review this Privacy Policy periodically.

Your Continued Use of Our Platform:

By continuing to use our website or mobile app following updates, you acknowledge and agree to the terms of the revised Privacy Policy. If you disagree with any changes, you may discontinue using our services and request account deletion.

This Privacy Policy governs the collection, use, disclosure, and safeguarding of personal data by Star Gallery Mart across all its digital platforms, including but not limited to its website (stargallery.ae), mobile applications, and customer support channels. This policy outlines the rights and obligations of both users and Star Gallery Mart regarding personal data processing in compliance with applicable United Arab Emirates (UAE) data protection laws and internationally recognized standards.

Applicability

This Privacy Policy applies to:

• Website Visitors and Users: Individuals who browse, interact with, or create accounts on the Star Gallery Mart website.
• Registered Customers: Individuals who register, place orders, and engage in transactions through our ecommerce platform.
• Mobile Application Users: Users accessing services via Star Gallery Mart's mobile application.
• Customer Support Interactions: Data collected during interactions with our support teams through phone, email, chat, or in-store visits.
• Marketing and Promotional Activities: Data collected during engagement with Star Gallery Mart's marketing emails, SMS campaigns, advertisements, surveys, or social media channels.

Excluded from Applicability

This Privacy Policy does not apply to:

• Third-Party Services and Platforms: Any websites, applications, or services operated by entities other than Star Gallery Mart, even if they are linked to or referenced on our platform. We encourage users to carefully review the privacy policies of any third-party platforms they interact with.
• Employee and Contractor Data: Personal data collected through recruitment, employment, or contractual engagements, which are governed by separate internal policies.
• Anonymous or Aggregated Data: Information that cannot be linked to an identifiable individual, such as anonymized analytics data or aggregated statistical information.

Third-Party Involvement

While this Privacy Policy governs the handling of personal data collected directly by Star Gallery Mart, certain services may require the involvement of third-party service providers (e.g., payment gateways, logistics companies, and marketing platforms). In such cases, data shared with these providers is limited to what is necessary to perform their services. These entities operate under their own privacy practices and legal obligations.

To provide, operate, and improve our services, Star Gallery Mart collects and processes various types of personal information. This data is essential to fulfilling orders, enhancing user experience, and ensuring seamless interaction with our platform. We gather personal data through direct user input, automated technologies, and third-party services, as outlined below.

A. Personal Data (Directly Provided by You)

Personal data is collected when you register for an account, place an order, or otherwise interact with our platform. This information is necessary for order processing, account management, and customer communication.

Types of Personal Data Collected:

• Full Name: To personalize communication and facilitate order delivery.
• Shipping and Billing Address: Required for product delivery and accurate invoicing.
• Email Address: For account registration, order confirmations, and marketing communications.
• Phone Number: Used for shipping updates, customer support, and two-factor authentication (where applicable).
• Payment Information: Payment details (such as credit/debit card numbers or digital wallet identifiers) are securely processed through trusted third-party gateways (e.g., Stripe, Apple Pay, Tabby). Star Gallery Mart does not store or directly process sensitive payment data on its servers.
• Account Information: When users create an account, we collect login credentials (such as username and password) and store user preferences, saved items, and purchase history to streamline future transactions.

How This Data is Collected:

• During account registration and checkout processes.
• Through customer service inquiries and support interactions.
• When subscribing to newsletters or promotional emails.
• Through surveys, reviews, or feedback forms submitted by users.

B. Transaction and Order Data

This category pertains to information generated during the purchase and order fulfillment process. This data is critical for managing order logistics, tracking shipments, and maintaining accurate records.

Types of Transaction Data Collected:

• Purchase History: Detailed records of past purchases, including product details, quantities, and prices.
• Order Fulfillment Details: Shipping information, courier tracking numbers, and estimated delivery dates.
• Invoice and Tax Data: Records of invoices generated for purchases, including applicable taxes.
• Return and Refund Information: Data related to product returns, refunds, and exchanges.

C. Technical and Usage Data (Automatically Collected)

To optimize our platform's performance, enhance user experience, and ensure security, we automatically collect certain technical data when users interact with our website or mobile application. This information helps us monitor system performance and identify areas for improvement.

Types of Technical and Usage Data Collected:

• IP Address and Device Details: To detect potential security risks and monitor website traffic.
• Browser Type and Version: Ensures compatibility and proper rendering of site elements.
• Operating System and Device Type: Used for optimizing site performance across different devices.
• Access Times and Duration: Tracks session start and end times to monitor site usage patterns.
• Navigation and Page Interaction: Data on which pages are viewed, links clicked, and products searched. This helps in improving user experience and tailoring website content.
• Error Logs and Diagnostics: Automatically collected to identify and resolve technical issues.

How This Data is Collected:

• Through the use of analytics tools embedded in our website and app.
• By logging user interactions with the platform.
• Using IP tracking and session cookies during site visits.

D. Cookies and Tracking Technologies

We use cookies, tracking pixels, web beacons, and similar technologies to improve functionality, personalize user experience, and serve relevant advertisements.

How We Use Cookies and Tracking Technologies:

• Enhance User Experience: Cookies remember user preferences and facilitate faster checkouts.
• Measure Performance: Helps us track site speed, page loading times, and responsiveness.
• Target Advertisements: Serves personalized ads based on user interests and browsing behavior.
• Analyze Engagement: Aggregated data enables us to monitor trends and improve overall service quality.

Types of Cookies We Use:

• Essential Cookies: Required to enable core website functions, such as account logins, cart management, and secure checkout. These cookies cannot be disabled.
• Performance Cookies: Collects data about website performance and user interactions to identify and resolve issues.
• Advertising Cookies: Used to deliver targeted advertisements, promotions, and product recommendations based on browsing history and user preferences.
• Analytics Cookies: Aggregates user activity data to provide insights into site traffic, popular products, and customer engagement.

Managing Cookies and Preferences:

Users can manage or disable cookies through their browser settings. However, disabling cookies may impact website functionality, including:

• The ability to log in or stay logged in.
• Retaining items in the shopping cart.
• Access to personalized recommendations and promotions.

To manage cookie settings:

• In Google Chrome: Go to Settings > Privacy and Security > Cookies and Other Site Data.
• In Safari: Preferences > Privacy > Block All Cookies.
• In Firefox: Preferences > Privacy & Security > Cookies and Site Data.

Web Beacons and Pixels:

• Web Beacons: Embedded in emails and website pages to track engagement.
• Tracking Pixels: Used for marketing analytics, retargeting ads, and social media integration.

Why We Collect This Data:

• To fulfill legal obligations under UAE law.
• To improve our understanding of user needs.
• To ensure platform security and prevent fraudulent activities.
• To enhance customer service and provide relevant product recommendations.

Star Gallery Mart collects and processes personal information to provide high-quality services, ensure seamless platform operation, and maintain legal compliance. This section outlines the purposes for which your data is used, highlighting our commitment to transparency and data security.

1. Order Processing and Fulfillment

We use your personal data to manage all aspects of order fulfillment, including:

• Order Confirmation: Sending transactional emails and notifications regarding order placement, status updates, and shipping confirmations.
• Shipping and Delivery: Coordinating with logistics partners to ensure accurate and timely product delivery to your specified address.
• Returns and Exchanges: Managing return requests, refunds, and product replacements in accordance with our return policy.

Why It's Necessary: This information is essential for ensuring that purchases are processed accurately and delivered to the right location, providing users with a smooth shopping experience.

2. User Account Management

Your data is used to facilitate account creation and management, allowing for a personalized shopping experience. This includes:

• User Registration: Enabling new account creation and verification.
• Profile Management: Allowing users to update personal information, manage shipping addresses, and view purchase history.
• Account Recovery: Assisting users in recovering access to their accounts in case of forgotten credentials or account security concerns.

Why It's Necessary: Account management enhances user convenience, providing secure, streamlined access to our platform.

3. Customer Support and Communication

We collect and process personal data to handle customer service inquiries, resolve complaints, and offer technical support. This may involve:

• Responding to Inquiries: Addressing product questions, service issues, and refund/exchange requests.
• Live Chat and Email Support: Providing real-time assistance through chat and email services.
• Customer Feedback: Collecting and analyzing user feedback to improve service quality.

Why It's Necessary: This ensures that users receive prompt and effective support when encountering issues or needing assistance with purchases.

4. Marketing and Promotional Communications

With your explicit consent, we use personal data to send promotional materials and updates about:

• Exclusive Offers and Discounts: Notifying users of sales, promotions, and special events.
• New Product Launches: Informing customers about new arrivals and product categories.
• Newsletters and Alerts: Providing curated content, seasonal campaigns, and other relevant materials.

Opt-In and Opt-Out Options:

• Users can opt-in to receive promotional emails during account registration or checkout.
• You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of marketing emails or updating your profile preferences.

Why It's Necessary: Promotional communications allow us to keep users informed of relevant offers while respecting their right to opt out.

5. Platform Optimization and Development

We analyze technical and usage data to:

• Enhance Website and App Performance: Monitor website traffic, fix technical errors, and ensure compatibility across devices.
• Personalize User Experience: Tailor product recommendations and website content based on past purchases and browsing history.
• Feature Development: Identify trends to improve platform functionality and introduce new features.

Why It's Necessary: Continuous platform enhancement ensures users enjoy a seamless, responsive experience that meets evolving needs.

6. Fraud Prevention and Security

To safeguard users and Star Gallery Mart, personal data is used to:

• Monitor Suspicious Activity: Detect unauthorized transactions, mitigate account breaches, and prevent fraudulent orders.
• Identify Fraudulent Behavior: Analyze irregular account activity and payment patterns to reduce fraud risks.
• Secure Transactions: Use encryption and fraud detection tools to protect payment details and sensitive data.

Why It's Necessary: Fraud prevention measures protect users from financial harm and maintain platform integrity.

7. Legal and Regulatory Compliance

Star Gallery Mart processes personal data to comply with UAE regulatory frameworks and applicable international data protection laws. This may involve:

• Taxation and Invoicing: Generating purchase records and invoices in accordance with UAE tax regulations.
• Legal Disclosures: Responding to lawful requests, subpoenas, or court orders.
• Audits and Investigations: Assisting with regulatory audits and internal investigations to ensure legal compliance.

Why It's Necessary: Legal compliance helps us fulfill statutory obligations, ensuring our business operations align with UAE and international legal standards.

Automated Decision-Making and Profiling

In some instances, we may use automated systems to:

• Recommend Products: Based on past interactions and preferences.
• Detect Fraudulent Transactions: By analyzing transaction patterns.

These automated processes are reviewed regularly to minimize errors. Users have the right to request human intervention in decisions that significantly affect them.

Data Minimization and Purpose Limitation

We only collect data necessary to fulfill the outlined purposes. Personal data is processed solely for the purposes stated in this policy and is not used for unrelated activities without obtaining prior consent.

At Star Gallery Mart, we respect your privacy and ensure that personal data is shared only when necessary to provide essential services, improve our platform, or comply with legal obligations. We do not sell or rent personal information to third parties. However, in the course of our operations, we may share your data under the following circumstances:

A. Trusted Service Providers and Partners

To facilitate our services and maintain operational efficiency, we partner with trusted third parties who perform services on our behalf. These providers are contractually obligated to protect your personal data and are permitted to process it only to the extent required to perform their functions.

Categories of Service Providers and Partners:

• Payment Gateways and Financial Institutions: We work with third-party payment processors (e.g., Stripe, Apple Pay, Tabby) to securely handle payment transactions. Your financial data is encrypted and processed directly by these gateways, ensuring no sensitive payment information is stored on our servers.
• Logistics and Shipping Providers: To ensure timely delivery of purchased products, shipping and courier services receive relevant shipping details, such as your name, address, and phone number.
• Marketing and Advertising Agencies: To manage email campaigns, social media ads, and retargeting, your email address, browsing behavior, and purchase history may be shared with marketing platforms. This ensures personalized and relevant promotional offers. You can opt-out of such communications at any time.
• Cloud Hosting and IT Services: Our platform is hosted on secure cloud environments (such as Amazon Web Services or equivalent) to ensure reliable performance, data storage, and scalability.

Safeguards for Service Providers:

• We conduct due diligence on all third-party partners before sharing personal data.
• Contracts include strict confidentiality clauses to prevent misuse of personal information.
• Data shared with service providers is minimized and limited to essential information required for service performance.

B. Legal Obligations and Authorities

In certain cases, we may be required to disclose personal information to comply with applicable laws, regulations, or legal proceedings. This disclosure is limited to the extent necessary to fulfill our legal obligations or protect our legal rights.

Circumstances Under Which We May Disclose Data:

• Legal Compliance: We may disclose information to regulatory bodies, tax authorities, or law enforcement agencies to comply with UAE laws and international legal frameworks.
• Government and Judicial Requests: If we receive a subpoena, court order, or official request, we may share necessary data with government authorities.
• Fraud Prevention and Protection: To protect Star Gallery Mart from fraudulent activities, disputes, or potential threats, data may be shared with investigative bodies or security consultants.

Your Rights:

• Where legally permitted, we will notify you if your data is shared with government authorities, except in cases where notification is prohibited by law.
• If data is shared for fraud prevention, this will be based on legitimate interest in ensuring platform security.

We prioritize safeguarding personal data by implementing industry-standard security measures and retaining information only as long as necessary for the purposes outlined in this Privacy Policy.

A. Data Retention

We retain personal data for the period required to:

• Fulfill contractual obligations (e.g., processing orders, returns, or warranties).
• Maintain user accounts (while your account remains active).
• Comply with legal obligations (e.g., tax, accounting, and regulatory requirements).
• Resolve disputes and enforce our rights.

General Retention Periods:

• Account Information: Retained as long as the user account remains active. Users may request account deletion at any time.
• Transaction Records and Invoices: Retained for up to 7 years in compliance with UAE tax and accounting laws.
• Marketing Preferences: Data related to marketing consents is retained until users opt-out or withdraw consent.
• Inactive Accounts: Accounts with no activity for more than 3 years may be deleted or anonymized, except where data retention is legally required.

Upon expiration of retention periods, personal data is either deleted, anonymized, or aggregated for analytics purposes.

Requesting Data Deletion:

Users can request to delete their personal information by contacting our Data Protection Officer (DPO) at support@stargallery.ae. In some cases, we may be unable to delete data immediately if retention is required by law.

B. Security Measures

To ensure the integrity and confidentiality of personal information, we implement robust security protocols, including:

• Encryption: Sensitive data, including passwords and payment information, is encrypted during storage and transmission. Payment transactions are processed through PCI DSS-compliant gateways to ensure secure handling of cardholder data.
• Access Controls: Personal data is accessible only to authorized personnel on a need-to-know basis. Two-factor authentication (2FA) and role-based access control (RBAC) are enforced for administrative accounts.
• Regular Audits and Penetration Testing: We perform regular security audits and vulnerability assessments to identify and address potential risks. Third-party security firms conduct penetration testing on our platform to ensure defense against cyber threats.
• Firewall and Intrusion Detection Systems (IDS): Our infrastructure is safeguarded by firewalls and IDS to monitor and block unauthorized access attempts.
• Incident Response Plan: In the unlikely event of a data breach, we have an incident response team that promptly addresses vulnerabilities and notifies affected users and regulatory bodies, in accordance with applicable data protection laws.

Your Role in Security:

• Users are encouraged to create strong passwords and change them regularly.
• Be cautious of phishing emails and ensure all communications from Star Gallery Mart originate from our official domain (stargallery.ae).
• Notify us immediately if you suspect unauthorized access to your account.

At Star Gallery Mart, we are committed to ensuring transparency and empowering users to exercise control over their personal information. In accordance with applicable UAE data protection laws and international privacy standards, you are entitled to the following rights regarding your personal data:

A. Right to Access and Data Portability

You have the right to:

• Request a copy of the personal data we hold about you.
• Obtain confirmation regarding whether your personal data is being processed.
• Receive your data in a structured, commonly used, and machine-readable format.
• Request that we transmit your data directly to another organization, where technically feasible.

How to Exercise This Right:

Submit a request by contacting support@stargallery.ae. We will process data access requests within 30 days, unless additional time is required due to the complexity of the request.

B. Right to Correction (Rectification)

If you believe that any of the personal data we hold is inaccurate or incomplete, you may request:

• Correction or updates to your personal details.
• Changes to billing or shipping information associated with your account.

How to Exercise This Right:

Users can correct most account information directly by accessing their profile settings. For further assistance, contact our support team.

C. Right to Deletion (Erasure)

You may request the deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected.
• You withdraw your consent (for data processed based on consent).
• Your data has been unlawfully processed.
• Legal obligations require data deletion.

Important Notes:

• Certain data (e.g., transactional records) may need to be retained for legal or regulatory purposes.
• Data deletion requests may result in loss of access to order history, loyalty rewards, and account-related preferences.

How to Request Deletion:

To delete your account or remove specific data, navigate to the "Delete Account" option in your profile settings or email us at support@stargallery.ae.

D. Right to Restrict Processing

You can request a restriction on data processing under the following circumstances:

• You contest the accuracy of the data (for the period it takes to verify).
• You object to processing, pending verification of overriding legitimate grounds.

E. Right to Object to Marketing Communications

You have the right to:

• Opt-out of receiving promotional emails, newsletters, and targeted advertisements.
• Withdraw previously given consent to marketing at any time.

How to Manage Marketing Preferences:

• Click the "unsubscribe" link at the bottom of marketing emails.
• Adjust your marketing preferences through account settings.
• Contact us directly at support@stargallery.ae to update your preferences.

As part of our operations, we may transfer personal data to trusted service providers and affiliates located outside the UAE. These transfers are necessary to facilitate services such as payment processing, cloud storage, and international shipping.

How We Protect Your Data During Transfers:

• Adequate Safeguards: We ensure that all data transferred outside the UAE is protected by contractual clauses, standard data protection mechanisms, or certifications compliant with relevant international privacy frameworks.
• Data Minimization: Only essential personal data is transferred to third-party providers.
• Third-Party Compliance: We collaborate exclusively with partners that adhere to strong privacy and security protocols.

Your Rights Regarding International Transfers:

You may request further details about the security measures in place for data transfers by contacting our support team.

Our website and mobile application may contain links to external websites, applications, and services operated by third parties. These links are provided solely for informational and convenience purposes.

Please Note:

• Independent Policies: This Privacy Policy applies exclusively to data collected by Star Gallery Mart. Third-party websites or services accessible through our platform operate independently and have their own privacy policies.
• No Liability: We do not assume responsibility for the privacy practices, content, or security measures of external platforms.
• User Discretion Advised: We strongly encourage users to review the privacy policies and terms of service of third-party websites before providing personal information.

Examples of Third-Party Links:

• Payment gateways (e.g., Stripe, Apple Pay)
• Social media platforms (e.g., Facebook, Instagram)
• Logistics and shipping service providers

Star Gallery Mart reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or service offerings.

Notification of Changes:

• Website Announcements: A notice will be posted on the homepage or login screen.
• Email Notifications: For users with active accounts or newsletter subscriptions.

Effective Date: Changes take effect immediately upon posting unless stated otherwise. Users are encouraged to review this Privacy Policy periodically.

Your Continued Use of Our Platform:

By continuing to use our website or mobile app following updates, you acknowledge and agree to the terms of the revised Privacy Policy. If you disagree with any changes, you may discontinue using our services and request account deletion.