Privacy & Data Protection
Policy & Safeguards

When you interact with yallavapeuae.com or our official WhatsApp concierge (+971 50 123 4567), we collect only the personal information required to execute fast deliveries and comply with UAE trade and tax regulations:

• Identity & Contact Information: Full customer name, UAE mobile/WhatsApp number, and email address for order notifications and digital VAT invoice delivery.
• Delivery Location Data: Street address, villa/apartment number, hotel name & room number, area (e.g. Dubai Marina, Downtown, Business Bay), and optional GPS location pins provided via WhatsApp.
• Transactional History: Details of products ordered, nicotine strengths, order dates, payment status (Cash on Delivery or Card POS), and courier dispatch logs.
• Technical Information: IP address, device type, browser settings, and time-zone data collected automatically for fraud detection and performance optimization.

Your personal data is processed strictly under lawful bases specified by the UAE Personal Data Protection Law (PDPL):

• Express Order Fulfillment: Routing our delivery fleet to your doorstep within 1 to 3 hours in Dubai and same-day across other Emirates.
• Customer Concierge & Support: Communicating order confirmations, live delivery driver updates, and resolving warranty inquiries on WhatsApp.
• UAE Tax & Legal Compliance: Generating Federal Tax Authority (FTA) compliant 5% VAT invoices and verifying 21+ age eligibility.
• Fraud Prevention & Platform Security: Detecting suspicious payment attempts, preventing abusive chargebacks, and ensuring platform integrity.

Under UAE Federal Law No. 15 on Tobacco Control, we must ensure all recipients are 21 years of age or older. We maintain a strict privacy-first verification protocol:

We prioritize the protection of your financial information with bank-grade security protocols:

• No Card Data Stored: When paying online or via delivery POS terminals, your complete credit/debit card numbers, CVV security codes, and PINs are encrypted and routed directly to our acquiring bank. Yalla Vape UAE never stores or accesses your full card details.
• Wireless POS Security: Couriers carry certified wireless terminals that adhere to EMV chip, contactless NFC (Apple Pay, Google Pay), and end-to-end encryption standards.
• Cash on Delivery Confidentiality: Cash payments are documented strictly through your digital invoice; no financial profiling is linked to your account.

We implement the principle of data minimization across our logistics operations. Delivery couriers are provided with only the specific data points essential to hand over your parcel:

• Couriers receive your first name, phone number, and drop-off address.
• Couriers do not have access to your historical order archives, stored account passwords, or personal payment card records.
• All delivery riders sign binding confidentiality and data protection agreements under UAE labor and commercial guidelines.

Our website uses cookies and similar technologies to enhance your shopping experience:

• Essential Cookies: Required to preserve your shopping cart items, remember your 21+ age confirmation, and maintain active sessions.
• Performance & Analytics: Aggregated, anonymized statistics via Google Analytics to evaluate page load speeds, popular product categories, and checkout usability.
• Cookie Control: You can adjust your browser settings to decline non-essential cookies at any time without restricting core website checkout functionality.

As a consumer in the United Arab Emirates, you enjoy full statutory data rights under Federal Decree-Law No. 45 of 2021:

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Retained while your account remains active to provide seamless express repeat re-ordering across Dubai.
• Tax & Commercial Records: Invoices and transaction records are retained for a minimum of five (5) years in compliance with UAE Federal Tax Authority (FTA) audit mandates.
• Inactive Marketing Data: Deleted or anonymized after 18 months of customer inactivity.

We employ strict technical, physical, and administrative measures to protect your personal data against unauthorized disclosure, alteration, or destruction:

• Encrypted database storage with AES-256 standards and restricted dual-factor administrative access.
• Continuous cloud monitoring, Web Application Firewalls (WAF), and automated intrusion prevention systems.
• In the improbable event of a data security incident, we adhere to mandatory UAE TDRA and PDPL notification procedures to inform affected users and authorities promptly.

If you have any questions, requests to exercise your statutory privacy rights, or feedback regarding our privacy practices, our dedicated Data Privacy Team is available to assist you:

• Privacy Email: support@yallavapeuae.com (Subject: Data Privacy Request)
• Customer Concierge: +971 50 123 4567 (Daily 9:00 AM – 12:00 Midnight)
• Business Location: Dubai, United Arab Emirates