Privacy policy

Controller: Sticky Gecko Handicraft Works (trading as “Sticky Gecko”)
Registered Location: Dubai, United Arab Emirates
Trade/License No.: 1436403
Email: [email protected]

1) What data we collect

We collect the following categories of personal data:

  • Identity & contact data: name, email, phone number, delivery address, country/city.
  • Order & payment data: items purchased, order notes, billing details, transaction identifiers and status. Card details are processed securely by our payment provider; we do not store full card numbers.
  • Communications: messages you send us (email, social media DMs), support requests, and our responses.
  • Usage & technical data: IP address, device/browser type, pages viewed, referral URLs, time/date stamps, approximate location (city/country), and similar diagnostics collected via cookies or similar tech.
  • Marketing preferences: newsletter opt-in/opt-out, campaign engagement (e.g., email opens/clicks).
  • User-provided content: artwork approvals or personalization notes you provide for made-to-order items.

We collect data from you directly, automatically (via cookies/analytics), and from service providers (e.g., payment processors, courier partners who confirm delivery status).

2) Why we use your data (purposes)

We process personal data to:

  1. Provide the Services – accept/fulfil orders, personalize products, deliver items, provide customer support.
  2. Payments & fraud prevention – process transactions securely, detect/prevent misuse.
  3. Operate, maintain & secure our Site – debugging, analytics, performance monitoring, information security.
  4. Communicate with you – order updates, artwork approvals, service messages, responding to inquiries.
  5. Marketing (with your consent where required) – newsletters, offers, product updates; you can unsubscribe any time.
  6. Legal, compliance & record-keeping – tax, accounting, regulatory requirements and dispute handling.

3) Our legal grounds

We rely on the legal bases permitted under applicable UAE law, including:

  • Contractual necessity (to process and deliver your order, provide support);
  • Consent (e.g., for optional marketing or certain cookies);
  • Legal obligations (e.g., tax/accounting, responding to lawful requests);
  • Protection of vital interests where applicable.

Your rights under UAE law may include the right to access, correct, delete, restrict/stop processing, and request data portability, as well as to withdraw consent at any time without affecting prior lawful processing.

4) Cookies & similar technologies

We use cookies and similar technologies to run the Site, remember choices, measure performance, and (where enabled) personalize marketing. You can manage cookies through your browser settings. If we provide a cookie banner, you can update preferences there at any time. For more details, see our Cookie Notice (or the Cookies section below if hosted on this page).

5) Who we share data with

We share data only as needed to run our business, including with:

  • Payment processors (e.g., Visa/Mastercard gateway) to process transactions securely;
  • Logistics & delivery partners (UAE couriers) to deliver orders and handle returns;
  • Hosting/CDN, IT & security providers (website hosting, backup, DDoS/edge security, email delivery);
  • Analytics & marketing tools (if enabled) to understand site usage and, with consent where required, run campaigns;
  • Professional advisors & authorities (auditors, accountants, regulators or law enforcement) where legally required.

We require our providers to use personal data only for the specified purposes and to protect it appropriately.

6) International transfers

Our servers, tools, or service providers may be located outside the UAE. Where we transfer personal data internationally, we do so in accordance with UAE law, using one or more of the following:

  • transfers to jurisdictions recognized as having an adequate level of protection;
  • appropriate safeguards (e.g., contractual protections); or
  • your explicit consent where required.

7) Data retention

We keep personal data only as long as necessary for the purposes described above, including to comply with legal, tax and accounting requirements, resolve disputes, and enforce agreements. Retention periods vary by record type and legal obligations. We securely delete or anonymize data when it is no longer needed.

8) Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is 100% secure; if we detect an incident that affects your data, we will act promptly and, where required, notify you and/or regulators.

9) Your choices & rights

Subject to applicable law, you may:

  • Request access to your personal data and receive a copy;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your data (e.g., where it’s no longer needed);
  • Request restriction/cessation of processing in certain cases;
  • Request portability of data you provided to us;
  • Withdraw consent (e.g., unsubscribe from marketing) at any time.

To exercise these rights, email [email protected]. We may ask for information to verify your identity and will respond within the timeframes set by UAE law. You also have the right to lodge a complaint with the UAE Data Office or relevant authority.

10) Marketing communications

If you opt in, we may send you emails about products, offers and tips. You can unsubscribe at any time using the link in our emails or by contacting us. We will still send essential service messages (order confirmations, delivery updates).

11) Children’s privacy

Our Services are not directed to children and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact [email protected] and we will delete it where required. (Note: UAE PDPL does not set a specific online age threshold; we take a cautious approach and ask parents/guardians to supervise minors’ use of our Services.)

12) Third-party links

Our Site may contain links to third-party websites or services. Their privacy practices are governed by their own policies; we are not responsible for them. We encourage you to read those policies.

13) Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will post the updated version with a new Effective date above, and take additional steps if required by law.

14) How to contact us

Controller: Sticky Gecko Handicraft Works (trading as “Sticky Gecko”)
Registered Location: Dubai, United Arab Emirates
Trade/License No.: 1436403
Email: [email protected]

If you have questions about this Policy or how we handle your personal data, please contact us.