1. Introduction
Celtic Dawn Trading - FZCO ("Celtic Dawn", "we", "our", "us") is committed to protecting your privacy and safeguarding your personal data. This Privacy Policy explains how we collect, use, store, and share your personal information when you visit our website at celticdawn.me (the "Website"), make a purchase, subscribe to our communications, or otherwise interact with our services.
Celtic Dawn Trading - FZCO is a Freezone Company registered in Dubai, United Arab Emirates, under trade license number 68354, issued by the Dubai Integrated Economic Zones Authority (DIEZA). Our registered address is DSO-IFZA, IFZA Properties, Dubai Silicon Oasis, Dubai, UAE.
By using our Website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please do not use our Website or services.
2. Information We Collect
2.1 Information You Provide Directly
We collect personal information that you voluntarily provide when you:
- Place an order: Full name, email address, phone number, shipping address, and billing address.
- Create contact enquiries: Name, email address, and the content of your message via our contact form.
- Subscribe to our newsletter: Email address and, optionally, your first name.
- Engage with us on social media: Information you share publicly or send to us directly via platforms such as Instagram or WhatsApp.
2.2 Information Collected Automatically
When you visit our Website, certain information is collected automatically through cookies and similar technologies (subject to your consent):
- Device information: Browser type, operating system, device type, screen resolution, and language preferences.
- Usage data: Pages visited, time spent on pages, referring URLs, click patterns, and scrolling behaviour.
- Location data: Approximate geographic location derived from your IP address (country and city level only).
- Cookies and identifiers: Session identifiers, analytics cookies, and marketing pixels (see Section 6 below).
2.3 Payment Information
Payment details (credit/debit card numbers, bank account details) are processed securely by our commerce platform Shopify and its integrated payment providers. We do not store, access, or process your full payment card details on our servers. All payment transactions are encrypted using industry-standard SSL/TLS protocols.
3. How We Use Your Information
We use your personal information for the following purposes:
3.1 Order Fulfilment
- Processing and fulfilling your orders, including packaging and shipping.
- Sending order confirmations, shipping notifications, and delivery updates.
- Handling returns, refunds, and exchanges.
- Communicating about order-related enquiries or issues.
3.2 Customer Communication
- Responding to your contact form submissions and enquiries.
- Sending marketing communications, including newsletters and product launches (only with your explicit consent, and you may unsubscribe at any time).
- Sending transactional messages related to your purchases.
3.3 Website Improvement
- Analysing browsing patterns and usage trends to improve our Website.
- Personalising your experience and showing relevant content.
- Monitoring and preventing fraudulent activity.
- Ensuring the security and proper functioning of our Website.
3.4 Legal Compliance
- Complying with applicable UAE laws, regulations, and legal obligations.
- Responding to lawful requests from government authorities.
- Establishing, exercising, or defending legal claims.
4. Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil our contract with you (e.g., processing your order, delivering products).
- Consent: Where you have given explicit consent (e.g., subscribing to marketing emails, accepting non-essential cookies).
- Legitimate interests: Where processing is necessary for our legitimate business interests (e.g., fraud prevention, website analytics), provided these do not override your rights.
- Legal obligation: Where processing is required to comply with applicable laws and regulations.
5. Third-Party Services
We share your personal data with trusted third-party service providers who assist us in operating our business. These providers are contractually obligated to protect your data and use it only for the purposes we specify:
5.1 Commerce & Payments
- Shopify: Our e-commerce platform that hosts our online store, processes orders, and manages our checkout. Shopify processes payment information through its PCI-DSS compliant payment infrastructure. See Shopify's Privacy Policy.
- Payment processors: Stripe, Tabby, and Tamara are integrated within our Shopify checkout to process card payments and buy-now-pay-later transactions. Cash on delivery (COD) is also available.
5.2 Analytics & Marketing
- Google Analytics (GA4): Used to analyse website traffic and user behaviour. Data is anonymised where possible. Activated only with your cookie consent.
- Meta Pixel: Used to measure the effectiveness of our advertising on Facebook and Instagram. Activated only with your cookie consent.
- Google Tag Manager: Used to manage analytics and marketing tags on our Website.
5.3 Communications
- Resend: Our email service provider used for sending newsletters and marketing communications.
- Shopify Email: Used for transactional emails such as order confirmations and shipping notifications.
5.4 Hosting & Infrastructure
6. Cookies & Tracking Technologies
Our Website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help us provide and improve our services.
6.1 Essential Cookies
These cookies are strictly necessary for the Website to function and cannot be disabled. They include cookies for cart functionality, session management, and security. No consent is required for essential cookies.
6.2 Analytics Cookies
These cookies help us understand how visitors interact with our Website by collecting information such as pages visited, time on site, and navigation patterns. These are only activated with your explicit consent via our cookie consent banner.
6.3 Marketing Cookies
These cookies are used to track visitors across websites and display relevant advertisements. They include the Meta Pixel for Facebook and Instagram advertising measurement. These are only activated with your explicit consent.
6.4 Managing Your Cookie Preferences
When you first visit our Website, a cookie consent banner allows you to accept or decline non-essential cookies. You can change your preferences at any time by clearing your browser cookies and revisiting the site, or by adjusting cookie settings in your browser. Please note that disabling certain cookies may affect the functionality of our Website.
7. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
- Order data: Retained for a minimum of 5 years from the date of purchase, as required by UAE commercial and tax regulations.
- Newsletter subscribers: Retained until you unsubscribe or request deletion.
- Contact enquiries: Retained for up to 2 years to enable follow-up and maintain service quality records.
- Analytics data: Retained in anonymised/aggregated form for up to 26 months (as per Google Analytics default settings).
- Cookie data: Varies by cookie type; session cookies expire when you close your browser, while persistent cookies have defined expiry periods (typically 30 days to 2 years).
8. Your Rights
Subject to applicable UAE data protection laws, you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
- Right to erasure: You may request the deletion of your personal data, subject to any legal retention obligations.
- Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format.
- Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
To exercise any of these rights, please contact us at hello@celticdawn.me. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- SSL/TLS encryption across our entire Website.
- Secure, PCI-DSS compliant payment processing through Shopify.
- HttpOnly cookies for sensitive session data to prevent client-side access.
- Regular security reviews and updates to our systems.
- Access controls limiting employee access to personal data on a need-to-know basis.
While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining the highest commercially reasonable standards.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside the United Arab Emirates, including the United States and Canada, where our service providers (such as Shopify, Vercel, and Google) maintain their servers.
Where such transfers occur, we ensure that appropriate safeguards are in place to protect your personal data, including contractual commitments from our service providers to maintain data protection standards consistent with applicable UAE data protection legislation.
11. Children's Privacy
Our Website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@celticdawn.me and we will promptly delete such information.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our Website.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Celtic Dawn Trading - FZCO
DSO-IFZA, IFZA Properties
Dubai Silicon Oasis
Dubai, United Arab Emirates
Trade License: 68354
