This policy explains what personal data Sonik collects when you use mysonik.com or buy from us, why we collect it, and what rights you have.
1. Who we are
HMC FZE LLC, trading as Sonik, is responsible for your personal data on this site.
- Address: [TBC: street and building], Sharjah, United Arab Emirates
- Privacy contact: [TBC: privacy email]
[LAWYER TO CONFIRM: controller or processor role for each activity.]
2. The law we follow
We aim to follow the UAE Personal Data Protection law, Federal Decree-Law No. 45 of 2021 [LAWYER TO CONFIRM: exact articles, and status of its executive regulations]. We also follow other UAE rules that apply to online sales.
[LAWYER TO CONFIRM: whether any visitors or customers outside the UAE bring other laws into scope, for example the EU GDPR. Do not add that wording until confirmed.]
3. What we collect
| Type | Examples | When |
|---|---|---|
| Contact and order details | Name, email, phone number | When you order or contact us |
| Delivery and billing details | Address, city, emirate | When you order |
| Order history | Products, lengths, head types, order value, dates | When you order |
| Payment status | Paid, failed, refunded, cash-on-delivery status | When you pay |
| Messages | Contact form and email messages, order questions | When you write to us |
| Live chat | Your name, optional email and order number, and the messages in the chat. We save the whole conversation so we can follow up. A random key stored in your browser links you to your own chat. | When you start a chat |
| Order tracking | We do not use customer accounts. We email a private tracking link to the address on your order. The link shows status and courier tracking only. | When you order |
| Marketing choices | Email sign-up, consent record, unsubscribe | When you sign up |
| Device and site data | Browser type, pages viewed, cookie data | When you visit (see Cookie Policy) |
Card details: we do not receive or store your full card number. Card details are entered on the payment provider's secure page. [TBC: confirm this for the chosen gateway and store setup. See the Payment Policy.]
4. Why we use your data and our legal basis
| Purpose | What we use | Basis [LAWYER TO CONFIRM] |
|---|---|---|
| Process and deliver your order | Contact, delivery, order and payment status | Needed to perform the contract |
| Take payment and prevent fraud | Order and payment details | Contract and legal duties |
| Customer service and returns | Order, contact and message data | Contract |
| Keep tax and sales records | Order and invoice data | Legal duty [TBC: retention period] |
| Send marketing emails | Email and consent record | Your consent |
| Understand how the site is used | Analytics data | Your consent where required (see Cookie Policy) |
| Keep the site secure | Log and device data | Our legitimate interest [LAWYER TO CONFIRM] |
5. Who we share data with
We share data only with the service providers we need to run the store. We do not sell your personal data [TBC: owner to confirm].
- Store platform: [TBC: SureCart or WooCommerce]
- Website hosting: Hostinger [TBC: server location]
- Card payments: [TBC: UAE payment gateway]
- Buy now, pay later: Tabby and Tamara, where you choose them and they approve you
- Delivery: [TBC: carrier or delivery service]
- Analytics: [TBC: Google Analytics, via Google Site Kit or MonsterInsights, if active]
- Email and forms: [TBC: email marketing and form tools, for example OptinMonster, WPForms, SureForms or SureMails. Confirm which are live.]
- Authorities: where UAE law requires it
6. Data sent outside the UAE
Some providers may store or process data outside the UAE. [TBC: list each provider and its data location.]
[LAWYER TO CONFIRM: the transfer rules and safeguards that apply under UAE law.]
7. How long we keep data
- Order and tax records: [TBC: period, set by the lawyer under UAE rules].
- Marketing data: until you unsubscribe or withdraw consent, or for [TBC: period].
- Contact messages: [TBC: period].
- Live chat conversations: [TBC: period].
- Analytics data: [TBC: period, per the analytics tool setting].
8. Your rights
You can ask us to:
- tell you what personal data we hold about you;
- correct data that is wrong;
- delete your data, where the law allows;
- limit or object to certain uses;
- stop marketing emails at any time, using the unsubscribe link in each email;
- withdraw consent you have given.
To make a request, email [TBC: privacy email] with the subject "Privacy request". We will reply within [TBC: number] days. We may ask you to confirm your identity first.
You can complain to the UAE data protection authority [LAWYER TO CONFIRM: name and contact of the regulator].
9. Security
We take reasonable steps to protect your data, including [TBC: owner to confirm the actual measures, for example HTTPS, restricted admin access and regular updates]. No website or system is completely secure. Tell us at once if you think your account or data has been misused.
We do not claim any security certification unless we hold one. [TBC: state any certification only if held.]
10. Marketing emails
We send marketing emails only if you sign up or agree to receive them. Every marketing email has an unsubscribe link. We keep a record of your consent.
11. Children
Our products are for adults buying for themselves or others. [TBC: minimum age for purchase.] We do not knowingly collect data from anyone under that age.
12. Changes to this policy
We may update this policy. The date at the top shows the latest version. For material changes we will [TBC: notify customers by email or on the site].
13. Contact us
Privacy questions: [TBC: privacy email].
Post: [TBC: street and building], Sharjah, United Arab Emirates.