Privacy Policy

This Privacy Policy explains how Luxury Club (“we”, “us”, or “our”), operating from the United Arab Emirates, collects, uses, discloses, and protects personal data when you visit our website, create an account, place an order, or otherwise interact with us, including via WhatsApp or email. It applies alongside our Terms of Use. By using our Site or services, you acknowledge the practices described here.

We collect the following categories of information:

• Account and contact data: name, email address, phone number, and password (stored in hashed, not plain-text, form) when you register an account.
• Order and shipping data: billing and shipping addresses, order history, and items you enquire about, reserve, or purchase.
• Payment data: when you check out, payment details (such as card information) are collected and processed directly by our payment provider. We do not receive or store your full card number.
• Communications: messages you send us via WhatsApp, email, or the Site's contact channels, including in relation to advisor-led enquiries, reservations, or after-sales support.
• Newsletter and marketing preferences: your email address if you subscribe to updates, and your marketing preferences.
• Technical and usage data: IP address, browser type, device information, pages viewed, and similar data collected automatically via cookies and similar technologies (see Section 6).

We use personal data to:

• Create and manage your account;
• Process and fulfil orders, including payment, shipping, customs documentation where relevant, and order-related communications;
• Respond to enquiries and provide advisor-led guidance on specific pieces, including via WhatsApp;
• Send order confirmations, shipping updates, and password-reset or account-security messages;
• Send marketing communications where you have opted in, and let you opt out at any time;
• Detect, investigate, and prevent fraud, abuse, or security incidents (including automated rate-limiting on login and account-recovery attempts);
• Comply with legal, tax, and regulatory obligations; and
• Improve the Site's functionality, content, and performance.

We process personal data on the basis of: performing a contract with you (for example, fulfilling an order or managing your account); our legitimate interests (for example, fraud prevention, Site security, and improving our services), balanced against your rights; your consent (for example, marketing communications and non-essential cookies, which you may withdraw at any time); and compliance with our legal obligations (for example, tax and accounting records).

We do not sell your personal data. We share personal data only with the following categories of recipients, and only as needed for them to perform their function:

• Payment processors (such as Stripe), to process your payment securely;
• Email and notification providers (such as SendGrid), to deliver order confirmations, password-reset emails, and, where you have opted in, marketing communications;
• Shipping and logistics partners, to deliver your order and, for international shipments, complete customs documentation;
• Hosting and infrastructure providers, who store and process data on our behalf under appropriate confidentiality and security commitments; and
• Authorities, where required to comply with a legal obligation, court order, or to protect our rights, safety, or property, or that of others.

We use cookies and similar technologies to:

• Keep you signed in and remember your cart, region, and language preferences (strictly necessary — the Site cannot function correctly without these);
• Understand how the Site is used, so we can improve it (analytics — used only in aggregate, not to identify you individually); and
• Where you consent, support marketing and remarketing (not currently active by default).

You can control or disable non-essential cookies through your browser settings. Disabling strictly necessary cookies may prevent parts of the Site, such as checkout, from working correctly.

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, including any legal, tax, or accounting requirements. Order and transaction records are typically retained for the period required by UAE tax and commercial record-keeping law. If you delete your account, we will delete or anonymise your personal data except where we are required or permitted to retain it (for example, completed order records for tax purposes, or data needed to resolve a dispute).

Depending on your location, you may have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to or restrict certain processing; withdraw consent where processing is based on consent (for example, marketing emails, which you can unsubscribe from at any time); and request a copy of your data in a portable format.

To exercise any of these rights, contact us using the details in Section 12. We will respond within the timeframe required by applicable law. If you are located in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection authority. If you are located in the United Arab Emirates, you may contact the UAE Data Office regarding your rights under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

We apply technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse, including encrypted connections (HTTPS), hashed account credentials, rate-limiting on authentication endpoints, and access controls on our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your data using industry-standard practices and to improve them over time.

We are based in the United Arab Emirates. Some of our service providers (for example, payment processing or email delivery) may process data outside the UAE, including in jurisdictions with different data protection laws. Where this occurs, we take steps to ensure the provider offers an appropriate level of protection for your data, such as relying on providers with recognised security and compliance certifications.

The Site is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

For any question about this Privacy Policy or to exercise your data-protection rights, contact us at privacy@luxuryclub.ae, by phone at +971 52 461 6496, or via WhatsApp using the contact link in the site footer.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.