Privacy Policy

This Privacy Policy explains how Andean Life Store (“Andean Life”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal data when you visit andean.life, purchase our products, contact us, or otherwise use our services.

We aim to process personal data in accordance with applicable United Arab Emirates data protection law, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data and its implementing requirements (“UAE PDPL”). This policy is a general disclosure and does not replace any consent notice or other notice provided at the point of collection.

1. Data controller and contact details

The controller responsible for personal data processed through this store is:

Legal business name: Andean Impex General Trading - FZCO
Registered address:  IFZA Business Park, Al-364137905, 43678-001, Dubai DU, United Arab Emirates
Email: andeanlife.s@gmail.com

2. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact information, such as your name, email address, telephone number, billing address, and delivery address.
  • Order and transaction information, such as products purchased, order history, payment status, returns, refunds, and delivery details. Full payment card details are generally processed by payment providers rather than stored by us.
  • Account information, such as login details, preferences, and saved information.
  • Communications, including customer-support requests, reviews, survey responses, and correspondence.
  • Device and usage information, such as IP address, browser, device identifiers, pages viewed, referring links, and interactions with our store.
  • Marketing preferences and information about your response to our campaigns.
  • Any other information you choose to provide.

Please do not provide sensitive personal data unless we specifically request it and have a lawful basis to process it.

3. How we collect personal data

We collect personal data directly from you, automatically through cookies and similar technologies, and from service providers and business partners that help us operate our store, process payments, fulfil and deliver orders, prevent fraud, provide analytics, or conduct marketing.

4. Purposes and legal bases

We process personal data only where permitted by applicable law. Depending on the circumstances, our legal basis may be your consent, performance of a contract with you, compliance with a legal obligation, protection of public interests, establishment or defence of legal claims, or another basis permitted by the UAE PDPL.

We may use personal data to:

  • Provide products and services, process payments, fulfil orders, arrange delivery, and manage returns or refunds.
  • Create and manage customer accounts.
  • Communicate with you about orders, enquiries, and support requests.
  • Detect, investigate, and prevent fraud, abuse, security incidents, and unlawful activity.
  • Maintain, analyse, personalise, and improve our store and services.
  • Send marketing communications where you have consented or where otherwise permitted by law. You may unsubscribe at any time.
  • Comply with legal, tax, accounting, regulatory, and record-keeping obligations.
  • Establish, exercise, or defend legal claims.

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing already carried out lawfully before withdrawal.

5. Cookies and similar technologies

We and our service providers may use essential, analytics, personalisation, and advertising cookies or similar technologies. Where required, we request consent before using non-essential technologies. You can manage choices through our cookie banner, privacy settings, or browser controls. Disabling some technologies may affect store functionality.

6. When we disclose personal data

We may disclose personal data where necessary to:

  • Shopify and other technology providers that host and operate our ecommerce services.
  • Payment providers, banks, fraud-prevention providers, and financial institutions.
  • Warehouses, fulfilment partners, couriers, and delivery providers.
  • Customer support, analytics, advertising, marketing, and professional service providers.
  • Government authorities, regulators, courts, law-enforcement bodies, or other parties where required or permitted by law.
  • A buyer, investor, adviser, or successor in connection with a proposed or completed business transaction.

Service providers are permitted to process personal data only for authorised purposes and subject to appropriate obligations.

7. International transfers

Our service providers may process personal data outside the UAE. Where personal data is transferred internationally, we take steps required by applicable law to ensure an adequate level of protection, such as using an approved transfer mechanism, appropriate contractual safeguards, or another lawful exception.

8. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to fulfil orders, maintain business and tax records, resolve disputes, enforce agreements, and comply with legal obligations. Retention periods vary according to the type of data, our relationship with you, and applicable legal requirements. We securely delete or anonymise data when it is no longer required.

9. Data security

We use reasonable administrative, technical, and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction. No system or method of transmission is completely secure, so we cannot guarantee absolute security.

10. Your rights

Subject to the UAE PDPL and any applicable conditions or exceptions, you may have the right to:

  • Receive information about the personal data we process and request access to it.
  • Request transfer of your personal data where applicable.
  • Request correction or completion of inaccurate personal data.
  • Request erasure of personal data in applicable circumstances.
  • Restrict or stop processing in applicable circumstances.
  • Object to certain automated processing and request human review where applicable.
  • Withdraw consent where processing is based on consent.
  • Complain to the competent UAE data protection authority.

To exercise a right, contact us using the details above. We may need to verify your identity and may decline or limit a request where permitted by law. We will respond within the period required by applicable law.

11. Children’s privacy

Our services are not directed to children who cannot lawfully consent to the processing of their personal data. We do not knowingly collect children’s personal data without any consent or authorisation required by applicable law. If you believe a child has provided personal data improperly, please contact us.

12. Third-party links

Our store may contain links to websites or services operated by third parties. Their privacy practices are governed by their own notices, and we are not responsible for those practices.

13. Changes to this policy

We may update this policy to reflect changes in our practices, technologies, legal requirements, or other factors. We will post the updated version on this page, revise the “Last updated” date, and provide any additional notice required by law.

14. Contact and complaints

Questions, requests, or complaints about this policy or our handling of personal data can be sent to [INSERT PRIVACY CONTACT EMAIL]. You may also have the right to submit a complaint to the competent UAE data protection authority.