Privacy Policy

1. INTRODUCTION

Welcome to Blu Shower Filters UAE ("we," "us," "our," or "the Company"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://blushowerfilters.com (the "Website"), purchase our products, or interact with us through any communication channels.

By accessing or using our Website, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our Website or provide us with your personal information.

Business Information:

Blu Shower Filters UAE Office 204, Al Qusais Business Center, Dubai, United Arab Emirates Email: support@blushowerfilters.com Phone: +971 50 987 6543 Hours: Daily 9:00 AM — 8:00 PM GST

Business Type: Online Retail Store
Industry: Shower Filters & Water Filtration Products
Description: Blu Shower Filters UAE is an online retailer specializing in premium shower filters, replacement cartridges, and water filtration products designed to improve water quality for healthier skin and hair.
Shipping Region: United Arab Emirates
Currency: AED (United Arab Emirates Dirham)
Established: 2026

2. DEFINITIONS

For the purposes of this Privacy Policy:

Term	Definition
"Personal Information"	Any information relating to an identified or identifiable natural person
"Sensitive Personal Information"	Information about health, biometric data, precise geolocation, or payment credentials
"Processing"	Any operation performed on personal data, including collection, storage, use, transfer, or deletion
"Data Controller"	Blu Shower Filters UAE — the entity that determines the purposes and means of processing
"Data Processor"	Third-party service providers who process data on our behalf
"User" / "You"	Any individual who visits our Website or purchases our products
"Cookies"	Small text files stored on your device that help us enhance your experience

3. INFORMATION WE COLLECT

We collect several types of information from and about users of our Website. We categorize this information as follows:

3.1 Personal Information You Voluntarily Provide

When you interact with our Website, make a purchase, contact customer support, or subscribe to our communications, you may provide us with the following:

Category	Specific Data Points	Legal Basis
Identity Data	Full name, date of birth (optional), gender (optional)	Contract fulfillment, legitimate interest
Contact Data	Email address, phone number, billing address, shipping address	Contract fulfillment, legal obligation
Financial Data	Payment card details (processed by third-party gateways), billing information	Contract fulfillment
Transaction Data	Products purchased, order date, order value, order history, returns	Contract fulfillment, legal obligation
Account Data	Username, password (hashed and encrypted), account preferences, wishlist items	Contract fulfillment, legitimate interest
Communication Data	Customer support inquiries, chat messages, email correspondence, feedback, reviews	Legitimate interest, consent
Marketing Data	Subscription preferences, email open rates, click-through rates, survey responses	Consent, legitimate interest

3.2 Information Automatically Collected (Technical Data)

When you browse our Website, certain information is automatically collected by our servers and third-party analytics tools:

Category	Specific Data Points	Purpose
Device Data	IP address, device type, operating system, browser type and version, screen resolution	Security, analytics, optimization
Usage Data	Pages visited, time spent on each page, clickstream data, navigation paths, search queries	Analytics, UX improvement
Location Data	Approximate geolocation derived from IP address (country/city level)	Fraud prevention, regional compliance
Cookie Data	Session identifiers, preference settings, shopping cart contents	Functionality, personalization

3.3 Information from Third Parties

We may receive information about you from the following sources:

Source	Type of Information	Purpose
Payment Processors (Stripe, PayPal)	Payment confirmation, transaction ID, fraud risk score	Order processing, fraud prevention
Shipping Carriers (Aramex, Fetchr, Emirates Post)	Delivery status, address validation	Order fulfillment
Social Media Platforms (Instagram, Facebook, TikTok)	Public profile information (if you interact with our ads or pages)	Marketing analytics
Review Platforms (Trustpilot, Google Reviews)	Public reviews and ratings	Reputation management

3.4 Information We DO NOT Collect

We do not knowingly collect the following types of information:

Biometric data (fingerprints, facial recognition)
Health or medical records beyond general product benefits
Political opinions, religious beliefs, or trade union membership
Genetic data
Criminal conviction history
Information from children under 13 years of age

4. HOW WE USE YOUR INFORMATION

We use your personal information only for legitimate business purposes. Below is a detailed breakdown of each purpose, the categories of data used, and the legal basis:

Purpose	Data Categories Used	Legal Basis	Retention Period
Process and fulfill orders	Identity, Contact, Financial, Transaction	Contract fulfillment	5 years
Manage customer accounts	Identity, Contact, Account	Contract fulfillment	Until account deletion + 30 days
Provide customer support	Identity, Contact, Communication	Legitimate interest, Contract	3 years after last interaction
Send order confirmations and updates	Contact, Transaction	Contract fulfillment	30 days after delivery
Process returns and refunds	Identity, Contact, Transaction, Communication	Contract fulfillment, Legal obligation	2 years
Prevent fraud and unauthorized transactions	Device, Usage, Financial, Location	Legitimate interest, Legal obligation	90 days
Improve our Website and user experience	Usage, Device, Cookie	Legitimate interest	26 months (aggregated)
Send marketing communications (with consent)	Contact, Marketing, Usage	Consent	Until opt-out
Conduct analytics and performance tracking	Usage, Device, Cookie	Legitimate interest	14 months
Comply with legal and regulatory requirements	Identity, Contact, Transaction	Legal obligation	As required by law
Enforce our Terms of Service	Any relevant data	Legitimate interest	7 years after last activity
Conduct surveys and collect feedback	Communication, Marketing	Consent, Legitimate interest	2 years

4.1 Marketing Communications

If you opt in to receive marketing communications, we may send you:

Promotional emails about new products, sales, and special offers (frequency: 2-4 per month)
SMS messages about flash sales and order updates (with separate opt-in)
Push notifications (if enabled on your device)
Personalized recommendations based on your purchase history

You can opt out at any time by:

Clicking the "unsubscribe" link in any marketing email
Replying "STOP" to any marketing SMS
Adjusting your notification preferences in your account settings
Contacting us directly at support@blushowerfilters.com

4.2 Automated Decision-Making

We do not use fully automated decision-making that significantly affects you. However, we use automated systems for:

Fraud detection (transaction scoring)
Email marketing segmentation
Basic customer support chatbots (optional)

You have the right to request human intervention for any automated decision that affects you.

5. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your browsing experience. Below is a complete list of cookies we use:

5.1 Types of Cookies

Cookie Category	Purpose	Examples	Duration	Consent Required
Strictly Necessary	Essential for website functionality	Session ID, shopping cart, CSRF tokens	Session only	No (exempt)
Preference Cookies	Remember your settings	Language preference, currency, region	12 months	Yes
Analytics Cookies	Track usage and performance	Google Analytics, Hotjar, Facebook Pixel	14-26 months	Yes
Marketing Cookies	Deliver relevant ads and track conversions	Meta Pixel, TikTok Pixel, Google Ads	90-180 days	Yes
Functionality Cookies	Enhanced features	Saved cart items, recently viewed products	30 days	Yes

5.2 Third-Party Cookies

We allow the following third parties to place cookies on your device:

Third Party	Service	Privacy Link	Opt-Out Method
Google LLC	Analytics, Ads, reCAPTCHA	Google Privacy	Google Opt-out
Meta Platforms, Inc.	Facebook Pixel, Instagram	Meta Privacy	Ad preferences in Meta
TikTok Ltd.	TikTok Pixel	TikTok Privacy	Ad settings on TikTok
Hotjar Ltd.	Heatmaps and analytics	Hotjar Privacy	Do Not Track
Stripe, Inc.	Payment processing fraud detection	Stripe Privacy	N/A (necessary)

5.3 Cookie Consent Management

When you first visit our Website, a cookie banner will appear asking for your consent for non-essential cookies. You can:

Accept all cookies
Reject all non-essential cookies
Customize your preferences by category

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in our website footer.

5.4 Do Not Track Signals

Our Website responds to browser "Do Not Track" (DNT) signals. If you enable DNT in your browser, we will disable all non-essential tracking technologies.

6. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information to third parties. However, we may share your information in the following circumstances:

6.1 Service Providers (Data Processors)

We share your information with trusted third-party service providers who perform services on our behalf. These providers are contractually obligated to protect your data and use it only for specified purposes:

Service Provider	Service Provided	Data Shared	Location
Stripe / PayPal	Payment processing	Name, email, billing address, payment amount	USA / Ireland
Aramex / Fetchr / Emirates Post	Shipping and delivery	Name, shipping address, phone number	UAE / KSA
Shopify / Ecwid	E-commerce platform	All order-related data	Global (cloud)
Google Cloud Platform	Cloud hosting and data storage	Website usage data	Various regions
Klaviyo / Mailchimp	Email marketing	Email address, name, purchase history	USA
Zendesk	Customer support platform	Communication data, name, email	USA
Trustpilot	Review collection	Name, email (for review invitations)	Global
Hotjar	User analytics	Anonymous usage data	Ireland
Meta / TikTok / Google	Advertising and analytics	Hashed email, purchase events (no PII)	USA / Global

6.2 Legal Compliance and Protection

We may disclose your information if required by law or in good faith belief that such action is necessary to:

Comply with legal obligations or court orders
Protect and defend our rights or property
Investigate or prevent fraud or security breaches
Protect the personal safety of users or the public
Respond to government requests (including from the UAE and EU authorities)

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, reorganization, dissolution, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Website of any change in ownership or use of your personal information.

6.4 With Your Consent

We may share your information for any other purpose disclosed to you and with your explicit consent.

7. DATA SECURITY

We implement robust technical, administrative, and physical security measures to protect your personal information. Below is a summary of our security practices:

7.1 Technical Security Measures

Measure	Description
SSL/TLS Encryption	All data transmitted between your browser and our servers is encrypted using 256-bit SSL certificates
PCI DSS Compliance	Our payment processing follows Payment Card Industry Data Security Standards
Firewall Protection	Advanced firewall systems block unauthorized access attempts
Regular Security Scanning	Daily vulnerability scans and weekly penetration testing
Data Encryption at Rest	Stored data is encrypted using AES-256 standard
Two-Factor Authentication	Required for all administrative access to our systems
Intrusion Detection System	Real-time monitoring for suspicious activities
Secure Backups	Daily encrypted backups stored in geographically separate locations

7.2 Administrative Security Measures

All employees undergo annual privacy and security training
Access to personal information is restricted on a need-to-know basis
Strict vendor security assessments before data sharing
Incident response plan established and tested quarterly
Data protection impact assessments for new processing activities

7.3 Physical Security Measures

Our servers are hosted in SOC 2 certified data centers
Biometric access controls at data center facilities
24/7 video surveillance and security personnel
Secure destruction of physical documents containing personal information

7.4 Limitations

While we implement state-of-the-art security measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach, we will notify affected users and relevant authorities within 72 hours as required by applicable laws.

8. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

8.1 Retention Schedule

Data Category	Standard Retention Period	After Account Deletion
Order history	5 years from last order	5 years (legal requirement)
Customer account	Active until deletion + 30 days	Deleted within 30 days
Payment information	90 days (processed by gateways)	N/A (not stored by us)
Email marketing data	Until unsubscribe + 60 days	Deleted immediately
Customer support tickets	3 years from last interaction	Deleted
Analytics data (aggregated)	26 months	Anonymized
Fraud prevention data	180 days	180 days
Legal/compliance records	7 years	7 years (required by law)

8.2 Data Deletion Process

When you request deletion of your data or when retention periods expire:

Your data is flagged for deletion
Data is moved to a restricted "deletion queue" for 30 days
After 30 days, data is permanently deleted from active systems
Backups containing your data are deleted within 90 days
You will receive confirmation of deletion via email

9. YOUR RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal information. We respect these rights regardless of your location.

9.1 Rights Available to All Users

Right	Description	How to Exercise
Right to Access	Request a copy of all personal information we hold about you	Email support@blushowerfilters.com
Right to Rectification	Correct inaccurate or incomplete information	Account settings or email request
Right to Deletion	Request deletion of your personal information	Email request with subject "Delete My Data"
Right to Object	Object to processing based on legitimate interests	Email request with specific grounds
Right to Restrict Processing	Limit how we use your data while a complaint is pending	Email request
Right to Data Portability	Receive your data in a structured, machine-readable format	Email request
Right to Withdraw Consent	Withdraw previously given consent at any time	Unsubscribe links or email request

9.2 Additional Rights for UAE Residents

Under UAE data protection laws (Federal Decree-Law No. 45 of 2021), you also have:

The right to file a complaint with the UAE Data Office
The right to compensation for damages caused by non-compliance
The right to know if automated decision-making is used

9.3 Additional Rights for EU/UK Residents (GDPR)

Right to lodge a complaint with a supervisory authority
Right to restrict international data transfers
Right to know about the existence of automated decision-making

9.4 Additional Rights for California Residents (CCPA/CPRA)

Right to opt out of "sales" or "sharing" of personal information (we do not sell)
Right to limit use of sensitive personal information
Right to non-discrimination for exercising your rights
Right to know about data collection over the past 12 months

9.5 How to Exercise Your Rights

Step 1:

Send an email to support@blushowerfilters.com with:

Your full name
Email address associated with your account
Specific right you wish to exercise
Any relevant order numbers or details

Step 2: We will verify your identity by:

Sending a confirmation link to your registered email
Asking for two pieces of information (e.g., last order date and shipping address)

Step 3: We will respond within:

30 days for standard requests (free)
90 days for complex requests (with notice)

There is no fee for exercising your rights. However, we may charge a reasonable fee for excessive or repetitive requests.

10. INTERNATIONAL DATA TRANSFERS

Our Website operates from the United Arab Emirates. However, we use service providers located in various countries. Your personal information may be transferred to, stored, and processed in:

Country	Legal Basis for Transfer
United Arab Emirates	Primary location (headquarters)
United States	Standard Contractual Clauses (SCCs)
Ireland (EU)	Adequacy decision / SCCs
Singapore	Adequacy decision
United Kingdom	UK adequacy regulations

We ensure appropriate safeguards are in place for all international data transfers, including:

Standard Contractual Clauses approved by the European Commission
Binding Corporate Rules (where applicable)
Data processing agreements with all third parties
Privacy Shield certification (for US-based processors, where applicable)

11. CHILDREN'S PRIVACY

Our Website is not intended for children under 13 years of age. No one under 13 may provide any personal information to us. We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at support@blushowerfilters.com. We will take steps to delete such information within 72 hours.

For users between 13 and 18 years of age, we require parental or guardian consent before making purchases or creating accounts.

12. THIRD-PARTY LINKS

Our Website may contain links to third-party websites, plugins, or applications. Clicking those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy practices.

We encourage you to read the privacy policy of every website you visit. This Privacy Policy applies only to information collected by Blu Shower Filters UAE.

13. SMS AND TELEPHONE COMMUNICATIONS

If you provide your phone number and opt in to SMS communications:

We may send order updates, shipping notifications, and promotional offers
Message frequency varies (typically 2-6 per month)
Standard message and data rates may apply
You can opt out at any time by replying "STOP"
For help, reply "HELP" or contact support@blushowerfilters.com

We do not share your phone number with third parties for marketing purposes.

14. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons.

Change Type	Notification Method	Effective Date
Minor updates (clarifications, typos)	Updated "Last Updated" date on this page	Immediately
Material changes (new data uses, sharing partners)	Email notice + website banner + this page update	30 days after notice
Significant changes (new data categories, sale of business)	Direct email + prominent website notice	45 days after notice

The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of our Website after any changes indicates your acceptance of the updated policy.

15. COMPLAINTS AND DISPUTE RESOLUTION
15.1 Internal Complaint Process

If you have a complaint about how we handle your personal information:

Contact us at support@blushowerfilters.com with "Privacy Complaint" in the subject line
Include your name, contact information, and detailed description of the issue
We will acknowledge receipt within 3 business days
We will investigate and respond within 30 days with a resolution or status update
If unresolved, we will provide information about escalation options

15.2 External Complaint Options

If you are not satisfied with our response, you may file a complaint with:

For UAE Residents:UAE Data OfficeWebsite: https://u.ae/en/data-officeEmail: info@dataoffice.ae

For EU Residents:

Your local Data Protection Authority (DPA) Contact details: https://edpb.europa.eu/about-edpb/about-edpb/membe...

For UK Residents:

Information Commissioner's Office (ICO) Website: https://ico.org.uk Phone: +44 303 123 1113

16. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA SUPPLEMENT)

If you are a California resident, you have the following additional rights:

Right	Description
Right to Know	Request disclosure of categories and specific pieces of personal information collected, sources, business purposes, and third parties with whom it is shared
Right to Delete	Request deletion of personal information, subject to exceptions
Right to Correct	Request correction of inaccurate personal information
Right to Opt Out	Opt out of "sharing" for cross-context behavioral advertising (we do not sell)
Right to Limit	Limit use of sensitive personal information
Right to Non-Discrimination	No denial of services or price discrimination for exercising rights

Verifiable Consumer Request: You may authorize an agent to submit requests on your behalf. We may require written proof of authorization.

Shine the Light Law (Cal. Civ. Code § 1798.83): California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. We do not disclose personal information for such purposes.

Contact for California requests: support@blushowerfilters.com with "California Privacy Request" in the subject line.

17. GDPR SUPPLEMENT (FOR EU/EEA/UK RESIDENTS)

If you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom, the following additional terms apply:

17.1 Legal Basis for Processing

Processing Activity	Legal Basis	Legitimate Interest (if applicable)
Order fulfillment	Contract (Article 6(1)(b))	N/A
Marketing (with consent)	Consent (Article 6(1)(a))	N/A
Analytics and improvement	Legitimate interest (Article 6(1)(f))	Improving user experience and website performance
Fraud prevention	Legal obligation / Legitimate interest (Article 6(1)(c), (f))	Protecting business and customers from financial harm
Customer support	Contract / Legitimate interest (Article 6(1)(b), (f))	Ensuring customer satisfaction and resolving issues

17.2 Data Protection Officer (DPO)

We have appointed a Data Protection Officer who can be contacted at:

Email: privacy@blushowerfilters.comAddress: Attention: DPO, Office 204, Al Qusais Business Center, Dubai, UAE

Our DPO is responsible for monitoring compliance with GDPR and responding to data protection inquiries.

17.3 Supervisory AuthorityYou have the right to lodge a complaint with your local supervisory authority. Contact details for all EU DPAs are available at: https://edpb.europa.eu/about-edpb/about-edpb/membe...

18. CONTACT INFORMATION

For any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices:

Method	Details
Email (General)	support@blushowerfilters.com
Email (Privacy/DPO)	privacy@blushowerfilters.com
Phone	+971 50 987 6543
Mail	Blu Shower Filters UAE, Office 204, Al Qusais Business Center, Dubai, UAE
Business Hours	Daily 9:00 AM — 8:00 PM GST
Response Time	Within 3 business days for acknowledgment; within 30 days for substantive response

19. ACKNOWLEDGMENT

By using our Website, making a purchase, or providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

Blu Shower Filters UAE — Protecting your privacy is our priority.