Privacy and Personal Data Processing Policy

Introduction
This Privacy and Personal Data Processing Policy (hereinafter – the "Policy") defines the procedure for collecting, storing, processing, using, transferring, and protecting the personal data of users (hereinafter – "Users") of the website O2pets.ae (hereinafter – the "Site"), operated by O2PETS TRADING LLC (hereinafter – the "Company"), registered at Corpus No.7, DIP 1, Jebel Ali, Dubai, with registration number 1325283.
The Company is committed to ensuring the confidentiality and security of Users' personal data in accordance with the applicable legislation of the UAE, including Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

1. General Provisions
1.1. This Policy applies to the entire O2pets.ae website and any information provided by the user while using the site.
1.2. By using this site, the user agrees to the terms of this Policy.
1.3. The Company acts as the data controller for personal data as defined by Federal Law No. 45 of 2021.

2. Information Collected
2.1. The Company may collect the following types of Users' personal data:
• Identification Data: First name, last name, patronymic (if provided), email address, phone number, residential address (during registration/order placement).
• Demographic Data: Gender, age, date of birth (during registration/order placement).
• Site Usage Data: IP address, location data, browser type, operating system, pages visited, time and date of visit, services viewed, interaction data with advertising materials.
• Financial Data: Billing information, bank card details, payment details (during order placement). The Company does not store bank card details; this data is processed by the payment gateway.
• Communication Data: Content of correspondence with the Company, feedback, comments.
• Data Provided Voluntarily by Users: Any information provided by the User to the Company through filling out forms on the Site, participating in surveys, contests, etc.
2.2. Personal information: name, surname, address, email, phone number, financial details if necessary for service provision.
2.3. Automatic information: IP address, browser type, interface language, date and time of visit, pages viewed on the site, actions on the site, using tracking technologies such as third-party cookies and cookieless technologies. The Company may use information obtained from the site user when they register, subscribe to a newsletter, respond to a survey or marketing communication, browse the website, or use other site features in the following ways:
• To personalize the user's experience and allow the Company to deliver content and offerings that are of most interest.
• To send periodic emails regarding products or other services.
• To contact the user after correspondence (live chat, email, or phone inquiries).
2.4. The Company does not collect or process special categories of personal data (sensitive data) as defined by the PDPL, except in cases expressly provided for by law or agreed with the User.

3. Purposes of Collecting and Processing Personal Data
3.1. The Company collects and processes Users' personal data for the following purposes:
• Providing access to the Site and its functionality: Ensuring the Site operates, personalizing content, managing User accounts.
• Processing orders and providing services: Processing and fulfilling orders and payments, delivering goods, providing services, offering user support, responding to user inquiries.
• Improving the quality of the Site and services: Analyzing Site usage data, conducting research, developing new features and services, sending users information about products, services, promotions, and news.
• Marketing communications: Sending promotional and informational materials, notifications about promotions and special offers, conducting surveys, distributing newsletters and offers, posting reviews (only with the User's consent).
The Company will send advertising and marketing messages only with the User's prior consent, provided via a subscription form, registration, or checkbox confirmation.
• Personalizing the user's experience on the Website, analyzing Website usage to improve its functionality and content. Preventing fraud and ensuring Website security. Fulfilling legal obligations.
• Compliance with legal requirements: Fulfilling the requirements of UAE legislation, including Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
• Fraud prevention and security: Detecting and preventing fraudulent activities, ensuring the security of the Site and User data.

4. Legal Bases for Processing Personal Data
The Company processes Users' personal data on the following legal bases:
• User Consent: Processing data for marketing communications, using cookies (where required).
• Performance of a contract: Processing data necessary for placing and fulfilling orders, providing services.
• Legitimate interests of the Company: Processing data to improve the quality of the Site and services, prevent fraud (provided that the legitimate interests are not overridden by the User's rights and freedoms).
• Compliance with legal obligations: Processing data necessary to comply with the requirements of UAE legislation.

5. Disclosure of Personal Data to Third Parties
5.1. The Company may disclose Users' personal data to the following third parties:
• Service Providers: Companies providing hosting, delivery, payment, marketing, analytics, and other services necessary for the functioning of the Site and providing services to Users.
• Government Authorities: In cases provided for by UAE legislation.
• Partners: Companies with which the Company collaborates to provide services to Users.
5.2. The Company undertakes to ensure that third parties to whom Users' personal data is disclosed comply with the personal data protection requirements established by UAE law.
5.3. Data disclosure is carried out in accordance with current UAE legislation and only to the extent necessary to achieve the processing purposes.
5.4. The transfer of personal data outside the UAE is carried out only to countries that ensure an adequate level of protection or based on agreements complying with PDPL requirements (e.g., standard contractual clauses).

6. Protection of Personal Data
6.1. The Company takes necessary organizational and technical measures to protect Users' personal data from unauthorized access, use, disclosure, alteration, or destruction. These measures include:
• Using data encryption during transmission.
• Restricting access to personal data only to those employees who need it to perform their job duties.
• Regularly updating software and hardware.
• Conducting employee training on personal data protection.
• Using malware protection tools.

7. User Rights
7.1. In accordance with Federal Law No. 45 of 2021 on the Protection of Personal Data (PDPL), Users have the following rights regarding their personal data:
• Right to be informed: The right to know what personal data the Company collects and processes.
• Right of access: The right to access their personal data stored by the Company.
• Right to rectification: The right to request the correction of inaccurate or incomplete personal data.
• Right to erasure ('right to be forgotten'): The right to request the deletion of their personal data.
• Right to restriction of processing: The right to request the restriction of processing of their personal data (in certain cases).
• Right to data portability: The right to receive their personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.
• Right to object: The right to object to the processing of their personal data (in certain cases).
• Right to withdraw consent: The right to withdraw their consent to the processing of personal data at any time (if processing is based on consent).
To exercise their rights, Users can contact the Company at the email address info@o2pets.ae or at the postal address: Corpus No.7, DIP 1, Jebel Ali, Dubai.
The User may withdraw consent via email or through their account (if applicable), without affecting the lawfulness of processing based on consent before its withdrawal.

8. Data Retention
The Company retains Users' personal data for the period necessary to achieve the purposes for which it was collected, as well as for the period established by UAE legislation. After this period, personal data will be deleted or anonymized.
• Financial data is stored until the completion of settlements and for 5 years in accordance with tax and accounting requirements.
• Communication data – up to 3 years from the last contact.
• Activity data – no more than 1 year from the date of collection.

9. Cookies
The Site uses cookies to enhance the user experience and provide personalized content. Cookies are small text files that are stored on the User's computer when visiting the Site. They allow the site to remember user preferences, analyze Website usage, and improve its functionality.
The User can configure their browser to refuse all or some cookies, or to alert them when cookies are being stored on their computer. However, disabling cookies may affect the Site's functionality.

10. Changes to the Privacy Policy
The Company reserves the right to make changes to this Privacy Policy at any time. The updated version of the Policy will be published on the Site with an indication of the last update date. It is recommended to review the Privacy Policy regularly to stay informed of any changes. Continued use of the Site after changes are made to the Privacy Policy signifies the User's agreement to these changes.

11. Contact Information
For questions related to this Privacy Policy and the processing of personal data, Users can contact the Company:
• By email: info@o2pets.ae
• By address: Corpus No.7, DIP 1, Jebel Ali, Dubai
• By phone: +971 585958 871
Conclusion
We value your privacy and are committed to protecting your personal data. By using our site, you agree to the terms of this Policy.