Privacy Policy

Personal data refers to any information that can directly or indirectly identify an individual. This includes, but is not limited to, your name, date of birth, email address, contact number, billing information, preferences, purchase history, and browsing behavior.

We may collect your personal data in the following circumstances:

- When you create an account on our website or mobile application

- When you make a purchase online or in-store

- When you subscribe to our newsletter or marketing communications

- When you join our loyalty or membership program

- When you engage with us via social media or customer service channels

- When you participate in events, surveys, or promotional campaigns

- When you browse our website (including cookies and tracking technologies)

- When you submit a request or enquiry to us

Depending on your interactions with us, we may collect:

- Identification Data: Name, date of birth, gender

- Contact Details: Email, phone number, postal address

- Purchase Information: Order history, product preferences

- Payment Information: Credit/debit card details (processed securely via our payment partners)

- Browsing Data: Pages viewed, time spent, links clicked, etc.

- Communication Preferences: Language, subscription status

- Customer Service Data: Feedback, complaints, returns, etc.

- Special Categories (if applicable): For example, skincare sensitivity details in case of consultations

Mandatory fields are marked with an asterisk (*) and are required to process your requests or orders. Optional fields help us personalize your experience.

Your personal data is processed for the following purposes:

- Creating and managing your Canéza account

- Fulfilling and tracking your orders

- Managing returns, exchanges, and customer service queries

- Sending personalized marketing messages, with your consent

- Administering loyalty programs

- Improving your customer experience and website personalization

- Analyzing site performance and user behavior

- Ensuring payment security and preventing fraud

- Complying with legal obligations and regulations

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect or process personal data from minors without verified parental consent. If we become aware that such data has been collected, we will take immediate steps to delete it.

Canéza may use certain customer information for profiling in order to personalize your experience and recommend products based on your preferences. However, no decisions producing legal or similarly significant effects are made solely through automated processing.

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies before sharing any data.

We implement a variety of technical and organizational measures to ensure the security and confidentiality of your personal data, including encryption, access controls, and regular system monitoring.

We rely on the following legal grounds to process your data:

- Contractual necessity: To fulfill your order or manage your account

- Consent: For marketing communications and cookies

- Legitimate interests: For business development and customer service

- Legal compliance: Taxation, invoicing, and regulatory reporting

Your data may be shared, only when necessary, with:

- Internal Canéza departments

- Payment service providers

- Logistics and delivery partners

- IT service providers (e.g., Shopify for website hosting and transactions)

- Customer support and CRM solution providers

- Marketing and advertising agencies

- Social media and digital advertising platforms (e.g., Meta, Google, TikTok, Snapchat, etc.)*

- Legal authorities or regulators, if required by law

*In some cases, these third parties may act as independent data controllers. We encourage you to refer to their respective privacy policies for further details.

Our website is powered by Shopify Plus, with data hosted on secure servers outside the UAE, primarily in Canada and the United States. For UAE users, data transfers are conducted in accordance with the UAE Personal Data Protection Law, with appropriate safeguards in place. We are actively exploring local hosting solutions to meet future compliance requirements.

We retain your personal data only for as long as needed to fulfill the purposes outlined above and to comply with legal and regulatory obligations. Once the data is no longer required, it will be securely deleted or anonymized.

This Privacy Policy may be updated from time to time to reflect changes in regulations, technology, or business practices. We encourage you to review it periodically. Material changes will be communicated via our website or email.

In accordance UAE PDPL you have the right to:

- Access and review your personal data

- Correct or update inaccuracies

- Request deletion of your data

- Withdraw consent at any time

- Object to or restrict processing

- Request data portability

To exercise any of these rights, you may contact us at privacy@caneza.com, along with proof of identity. You may also unsubscribe from marketing emails at any time by clicking the link provided in each message.

We use cookies and similar technologies to enhance your browsing experience, improve our website’s functionality, and deliver personalized content. You can withdraw your consent for marketing communications or cookie usage at any time by updating your preferences in your Canéza account, clicking the unsubscribe link in our emails, adjusting your browser settings, or managing your choices through our website’s cookie consent banner. If you have any questions regarding this policy or your personal data, please contact our Data Protection Officer at: admin@caneza.com