Privacy Policy

1. Introduction

Medglow Wellness ("we," "us," or "our") respects your privacy and is strictly committed to protecting your personal data. This policy outlines our data processing practices in direct compliance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL), and other applicable federal regulations governing e-commerce operations within the UAE.

This document dictates how we collect, process, transfer, and secure the personal information of individuals who interact with our platform, purchase our supplements, or utilize our digital services.

2. Data Collection

We collect data through direct interactions, automated technologies, and verified third-party integrations. The categories of personal data we process include:

• Identity Data: Full name, username, title, and date of birth.
• Contact Data: Billing address, delivery address, email address, and active telephone numbers.
• Financial Data: Partial payment card details and transaction mechanisms. (Note: We do not store full credit card numbers on our servers; these are processed securely via our PCI-DSS compliant payment gateways).
• Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform diagnostics.

3. Purpose of Processing

We process your personal data under the lawful bases of contract performance, legal compliance, and legitimate business interests. Specifically, your data is utilized to:

4. Data Sharing & Transfers

Medglow Wellness does not sell, broker, or indiscriminately lease your personal data. We disclose information strictly on a need-to-know basis with:

• Logistics Partners: Third-party couriers operating within the UAE to ensure timely delivery of your orders.
• Payment Processors: Authorized financial entities required to process and clear your transactions securely.
• Regulatory Authorities: Law enforcement or governmental bodies when mandated by UAE federal law.

If data is transferred outside the UAE for server hosting or analytics, we ensure an equivalent degree of protection is afforded by implementing legally binding data transfer frameworks.

5. Security Measures

We have instituted rigorous technical and organizational measures to prevent your personal data from being accidentally lost, compromised, altered, or disclosed in an unauthorized manner. Access to your personal data is restricted exclusively to employees, agents, and contractors who possess a legitimate business requirement. They process your data subject to strict confidentiality obligations.

6. Your Data Rights

Under the UAE PDPL, you hold definitive rights over your personal data. You are entitled to: