Privacy Policy

PRIVACY POLICY – TREND EXPRESS

UAE PDPL-Compliant | IFZA-Registered E-Commerce Platform | Powered by Shopify

Last Updated: 31 August 2026 
Effective Date: 1 September 2026                                                      
Website: www. trendexpress.ae
Legal Entity: TREND EXPRESS FZCO
IFZA Trade License No.: 86186
Registered Address: IFZA Business Park, DDP. PO Box 342001, Dubai UAE

Data Protection Contact: support@trendexpress.ae

1. INTRODUCTION & SCOPE 

Trend Express ("we", "us", or "our") is committed to protecting your personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and its implementing regulations. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you visit our website, create an account, place orders, or interact with our services.

By using our website, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, we kindly ask that you refrain from using our services.

2. INFORMATION WE COLLECT & TECHNICAL DATA FLOWS (SHOPIFY ARCHITECTURE)

 As a Shopify-powered store, your data flows through a secure, encrypted e-commerce infrastructure designed for compliance with global privacy standards and UAE PDPL.

 2.1 Data Collection Points

When you sign up for an account, complete  a purchase, or contact us, your information is securely processed by Shopify.

Payment details are handled exclusively by PCI-DSS compliant gateways to ensure your security.

•  Identity and Contract – Account signup, checkout, contact forms – to Shopify secure cloud
• Order and Payment – Checkout flow, saved payment methods (tokenized) –to Shopify + PCI-DSS compliant payment gateways.
• Device & Browsing – Browser, IP, referral, clickstream, cart activity –to Shopify analytics + third-party pixels (if consented)
• Customer Support – Email, live chat, return requests, warranty claims –to Shopify admin + helpdesk integrations

 2.2  Technical Data Flow

Your privacy is important to us. All information you provide is encrypted and processed securely through Shopify’s trusted infrastructure.

1. Frontend Interaction: You visit trendexpress.ae over HTTPS. Your browser loads Shopify’s storefront, cart, and checkout scripts.

2. Data Submission: Form data (shipping, billing, account info) is encrypted in transit and processed via Shopify’s secure APIs.

3. Payment Processing: Card details are never stored on our servers. They are tokenized by Shopify Payments or your selected gateway (e.g., Telr, PayTabs, Stripe) and processed under PCI-DSS Level 1 standards.

"We specify that debit/credit card details are not passed, sold, shared, rented, or leased to any unauthorized third parties."

4. Order Routing: Confirmed orders trigger automated workflows to inventory, fulfillment apps, shipping carriers, and tax calculators via Shopify’s integration layer.

5. Analytics & Marketing: Tracking pixels, server-side events, and email syncs activate only after your explicit consent via our cookie banner.

6. Data Retention & Deletion: Controlled via Shopify admin settings, merchant workflows, and automated retention rules aligned with UAE commercial law.

 3. HOW WE USE YOUR DATA & LAWFUL BASES

Under UAE PDPL, we process personal data for the following purposes, always ensuring your rights are respected:

You may withdraw consent at any time where processing relies on it, without affecting the lawfulness of prior processing.

4. DATA SHARING & SHOPIFY ECOSYSTEM PROCESSORS

We act as the Data Controller for the information you shared. Shopify Inc. and its affiliated entities act as our Data Processor under a legally binding Data Processing Agreement (DPA) that complies with UAE PDPL Article 10.

• E-Commerce Platform –Shopify Inc.
•  Payment Processors
•  Fulfillment & Logistics
•  Marketing & CRM
•  Analytics & Performance
• Customer Support

We do not sell, rent, or trade personal data. All third-party apps are vetted for PDPL compliance and configured with data minimization principles.

"The merchant is not responsible for the privacy policies of websites to which it links. If you provide any information to such third parties, different rules regarding the collection and use of your personal information may apply. You should contact these entities directly if you have any questions."

5. CROSS-BORDER DATA TRANSFERS

• Your data may be transferred to or accessed from jurisdictions outside the UAE when necessary for:
• Cloud hosting, payment processing, analytics, or customer support
•  International shipping & customs clearance
•  Group corporate or affiliate operations (if applicable)

6. DATA SECURITY

 We implement technical and organizational measures aligned with UAE PDPL Article 13 and international best practices:

• End-to-end encryption (TLS 1.2+ for data in transit, AES-256 for data at rest)
•  Role-based access controls & multi-factor authentication for staff
•  Regular security audits, vulnerability scanning, and patch management
•  PCI-DSS compliant payment processing (no raw card data stored on our servers)
•  Incident response & breach notification procedures per UAE Data Office guidelines

"The merchant takes appropriate steps to ensure data privacy and security including through various hardware and software methodologies. However, the merchant cannot guarantee the absolute security of any information that is disclosed online."

7. DATA RETENTION 

We retain personal data only as long as necessary to fulfill the purposes collected, or as required by UAE law:

• Order & transaction records: 5 years minimum (UAE VAT & Commercial Law compliance)
• Customer accounts & preferences: Until deletion request or 24 months of inactivity
•  Marketing consent records: Until withdrawal or 3 years after last interaction
•  Security & audit logs: 12–24 months for fraud prevention & system integrity
•  Legal/tax/dispute records: Until resolution or statutory expiry

Data is securely deleted or anonymized upon retention expiry, unless a legal hold applies.

8. COOKIES & TRACKING TECHNOLOGIES 

We use cookies and similar technologies to:

• Ensure Website functionality & security (essential)
•  Remember preferences & cart contents (functional)
•  Analyze traffic & improve performance (analytics)
•  Deliver consent-based marketing & measure campaign effectiveness (advertising)

You may manage or disable non-essential cookies via our Cookie Consent Banner or browser settings. Disabling essential cookies may impair Website functionality.

9. YOUR DATA SUBJECT RIGHTS (PDPL COMPLIANT)

 Under UAE PDPL, you have the right to:

• Access – Request a copy of your personal data & processing details
• Rectify – Correct inaccurate or incomplete information
•  Delete/Erase – Request removal where data is no longer necessary or consent is withdrawn (subject to legal retention obligations)
•  Restrict – Limit processing during dispute resolution or accuracy verification
•  Object – Opt out of processing based on legitimate interest or direct marketing
•  Data Portability – Receive your data in a structured, machine-readable format
•  Withdraw Consent – Revoke marketing or optional processing consent at any time
• Automated Decision-Making Opt-Out – Request human review for solely automated decisions with legal/significant effects

 How to Exercise Rights:
Email: support@trendexpress.ae with your full name, registered email, and specific request. We will respond within 30 days (extendable by 30 days for complex requests, with prior notice). We may verify your identity to prevent unauthorized access.

 Note: Certain rights may be limited where processing is required for legal compliance, public interest, contract performance, or fraud prevention, as permitted under PDPL.

10. CHILDREN'S PRIVACY

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent. If we become aware of unauthorized minor data collection, we will promptly and respectfully remove such information.  Parents/guardians may contact us to review or remove a child's data.

11. DATA BREACH NOTIFICATION

In the event of a personal data breach likely to result in high risk to your rights, we wil

• Notify the UAE Data Office within 72 hours of awareness, as required by PDPL
• Inform affected individuals without undue delay if the breach poses significant risk
•  Implement containment, investigation, and remediation measures

12. CHANGES TO THIS POLICY

We may update this Privacy Policy to reflect legal, operational, or technological changes. Material updates will be posted on the Website with a revised "Last Updated" date. Continued use after changes constitutes acceptance. We encourage periodic review.

13. CONTACT & COMPLAINTS 

For privacy inquiries, data requests, or policy clarification:

Email: support@trendexpress.ae
Address: IFZA Business Park, DDP. PO Box 342001, Dubai UAE
Website: www.trendexpress.ae
Phone: +971 52 9298723

14. GOVERNING LAW & LANGUAGE

• This Privacy Policy is governed by UAE Federal Decree-Law No. 45 of 2021 (PDPL) and applicable federal/emirate regulations.
• Provided in English for convenience. In case of discrepancy, the Arabic version shall prevail before UAE authorities and courts, as required by UAE commercial and regulatory practice.