Privacy Policy

1. Who is responsible for your data

Versailles Zone FZE, trading as Eloria, trade licence 1777, registered in Dubai, United Arab Emirates, is the data controller for personal data collected through this website. Our contact point for privacy matters is info@eloria-shoes.com.

2. What we collect

Category	Examples	Where it comes from
Identity & contact	Name, email, mobile number, delivery and billing address	You, at checkout or registration
Order data	Items, sizes, order value, order history, returns	Generated when you buy
Payment data	Payment method, last four digits, authorisation result. We never see or store your full card number.	Our payment provider
Account data	Password (encrypted), saved addresses, wishlist, preferences	You
Technical data	IP address, device and browser type, pages viewed, referring site	Automatically, via cookies
Communications	Emails, WhatsApp messages, contact-form submissions, reviews	You

3. Why we use it

• To process and deliver your order, and to handle returns, exchanges and refunds.
• To take payment and to prevent and detect fraud.
• To answer your questions and provide customer service.
• To manage your account and keep your wishlist and addresses available.
• To send order and delivery notifications (these are not marketing and are sent regardless of your marketing preferences).
• To send marketing emails, where you have agreed.
• To understand how the site is used so we can improve it.
• To meet our legal, tax and accounting obligations in the UAE.

4. Our legal basis

We rely on: performance of a contract (to fulfil your order); consent (marketing emails and non-essential cookies, which you can withdraw at any time); legal obligation (VAT and accounting records); and legitimate interests (fraud prevention, service improvement and site security), where these are not overridden by your rights.

5. Who we share it with

We do not sell your personal data. We share it only with parties who need it to run the service:

• Courier and logistics partners — your name, address and phone number, so they can deliver. Aramex
• Payment providers — to take payment securely and prevent fraud. Stripe processes card payments as an independent data controller under its own privacy policy; where Tabby is used, Tabby receives the personal and order data it needs to assess and administer your instalment plan, also under its own privacy policy.
• Mailchimp (Intuit Inc.) — to send the newsletter, if you asked to receive it. Order notifications are sent from our own mail server, not through a third party.
• Tasjeel — our website hosting, which stores the site and its database, including your account and order records.
• Google Analytics (Google LLC), and Meta and TikTok advertising measurement — only if you accept analytics cookies. Decline them and none of these receive anything about your visit.
• Professional advisers and authorities — where required by UAE law.

6. International transfers

Some of our providers process data outside the UAE. Where that happens we take reasonable steps to ensure an adequate level of protection, through contractual safeguards and by choosing providers with recognised security standards, as required by the UAE Personal Data Protection Law.

7. How long we keep it

Data	Retention
Order and invoice records	At least 5 years, as required by UAE VAT law
Account data	While your account is active, then 24 months
Marketing consent records	Until you unsubscribe, then 24 months as proof of consent
Customer service correspondence	24 months
Analytics data	Up to 26 months

8. Security

The site is served over encrypted HTTPS. Passwords are stored hashed, never in plain text. Card data is handled by a PCI-DSS compliant provider and never reaches our servers. Access to customer data is limited to staff who need it. No system is perfectly secure, but if a breach occurs that is likely to affect your rights we will notify you and the relevant UAE authority without undue delay.

9. Your rights

Under UAE data protection law you may ask us to:

• give you access to the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• delete your data, where we have no continuing legal reason to keep it;
• restrict or object to how we process it;
• transfer your data to another provider in a machine-readable format;
• withdraw consent at any time, without affecting processing already carried out.

Write to info@eloria-shoes.com. We respond within 30 days. If you are not satisfied you may complain to the UAE Data Office.

10. Marketing

We send marketing emails only if you asked for them. Every email has a one-click unsubscribe link, and you can also change your preferences in My Account. Unsubscribing stops marketing but not transactional messages about orders you have placed.

11. Cookies

Cookies are small files stored on your device. We use four kinds:

Type	What it does	Can you refuse it?
Strictly necessary	Keeps your bag, your session and checkout working	No — the site cannot function without these
Preference	Remembers your language, size and wishlist	Yes
Analytics	Tells us which pages are used and where people drop off	Yes
Marketing	Measures advertising and shows relevant ads on other sites	Yes

You can accept or reject non-essential cookies through the banner shown on your first visit, change your mind at any time, and block or delete cookies in your browser settings — though blocking necessary cookies will stop checkout from working.

Stripe and Tabby set their own cookies for fraud prevention and to keep a checkout session working. These are necessary and cannot be switched off without breaking payment. Analytics and advertising cookies are loaded only after you accept them — if you choose “Essential only”, no advertising tracker is loaded at all. Full details of the cookies each payment provider sets are published in their own privacy notices, lised once those tools are chosen.

12. Children

This site is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

13. Changes and how to contact us

We may update this policy. The current version is always the one on this page, and the “last updated” date shows when it changed. Material changes are notified to account holders by email.

Questions about privacy: info@eloria-shoes.com · Or use the contact form.