Privacy Policy and Customer Data Protection

Last updated: July 29, 2026

La Rose Gallery respects the privacy of its clients and partners, and is committed to handling personal data, business information, manufacturing and installation files responsibly and confidentially, in accordance with the legislation in force in the United Arab Emirates.

This policy explains the types of data we collect, the reasons for using it, how we protect it, who we may share the minimum necessary with, and the rights available to data subjects.

This policy applies to transactions made through:

  • larosegallery.ae Website.
  • The store and branches of La Rose Gallery.
  • Email, phone, WhatsApp, and contact forms.
  • Sales, supply, manufacturing, packaging and product development orders.
  • Educational courses, after-sales services, and any other official channels affiliated with us.

Quick Summary

  • We do not sell customer data, nor do we rent or trade it.
  • We do not use customer data or purchase history for advertising or ad targeting.
  • We do not send messages, make calls, or make promotional advertisements to customers.
  • We use customer data only to provide the service, fulfill the order, communicate operationally, and meet legal obligations.
  • We store customer formulation and mix data in a private, restricted-access storage environment.
  • Only the client or their authorized representative and authorized persons within Larose Gallery, as required by the job, have access to the installation files.
  • We do not disclose the names of the customers to whom we supply raw materials, nor the nature, quantities, or prices of their purchases, except with explicit consent or when required by law.

1. The entity responsible for the data

La Rose Gallery is responsible for the data it collects through its website, official channels and services, unless otherwise stated when providing a particular service.

Contact information:

  • Email: info@larosegallery.ae
  • Phone: 97165562611+
  • WhatsApp: 971555535625+
  • Address: Liwara 1 – Ajman – United Arab Emirates

2. Data we may collect

We are committed to collecting only the necessary data, which may include, depending on the nature of the transaction:

A. Identity and contact information

  • Name
  • Phone number
  • Email address
  • Billing or delivery address
  • Company name, job title, and representative details, when dealing with companies
  • Identity or official document data when required for a specific legal, customs, or contractual procedure

B. Account and Order Data

  • Account creation and login data
  • Products, quantities, and services requested
  • Order history, invoices, and price quotes
  • Shipping, delivery, and receipt information
  • Exchange, return, warranty, and customer service requests

C. Payment Data

Electronic payments are usually processed through accredited payment service providers. We may receive limited information from them such as transaction status, amount, reference number, and payment method used.

We do not request or intentionally store the full card number or its security code on our servers when payment is processed through an external payment provider.

D. Communication Data

  • Messages, inquiries, feedback, and complaints
  • Correspondence via email, WhatsApp, or website forms
  • Recordings, documents, or images sent by the customer regarding their request
  • Call recordings, if used, after providing the necessary notice as required by law

E. Technical Data

  • Internet Protocol (IP) address
  • Device type, browser, and operating system
  • Login times, pages used, and technical errors
  • Cookies and data necessary to operate the cart, account, and save site preferences

F. Manufacturing and Formulation Data

Customer manufacturing files may include:

  • Formulas, blends, and ingredient ratios
  • Names of raw materials and their sources or technical alternatives
  • Samples, modifications, and sensory and technical notes
  • Test results, quality specifications, and stability data
  • Packaging, wrapping, and labeling specifications
  • Production quantities, prices, and price quotes
  • Product files, technical, and regulatory documents
  • Any trade secrets or undisclosed information the customer provides to execute their project

We treat this data as confidential technical and business information, whether or not it includes personal data.

3. Sources of Data

We obtain data from:

  • The customer directly or their authorized representative
  • The website or account created by the customer
  • Phone, email, and WhatsApp correspondence
  • Payment and shipping providers, to the extent necessary to confirm the transaction or fulfill the order
  • Official bodies or public sources when necessary for verification or legal compliance
  • A third-party login service, if the customer chooses to use it, and within the limits of the data it permits sharing
  • We use the WP Statistics plugin to analyze traffic on our website. WP Statistics stores its data on our own server and does not transmit it to any third parties. Below, we describe what information we collect through WP Statistics, why we collect it, and how it is handled. If you have questions or concerns about our analytics practices, please contact us or review the WP Statistics Data Privacy guide.We track certain details about logged-in visitors on our site. Specifically:User ID & Page Views: If you are logged in, we associate your account (username/ID) with your page visits. Purpose: This helps us understand how registered members use our site and improve their experience. Local & Secure Storage: These logs are kept securely on our server and are not shared externally. Your Choices: You can choose to browse without logging in if you prefer not to link your visits with your user account. You may also contact us to request removal of any collected data where legally applicable.

4. Reasons for Using Data

We use data for the following legitimate and necessary purposes:

  • Creating and managing the account and verifying the user's identity
  • Preparing price quotes and receiving and fulfilling orders
  • Processing payments and issuing invoices
  • Preparing, shipping, delivering, and tracking products
  • Providing manufacturing, packaging, and product development services
  • Retaining the formulation file for production, quality control, and reordering purposes at the customer's request
  • Communicating about the order, appointment, payment, delivery, shortages, or technical modifications
  • Providing customer service, exchange, return, and warranty services
  • Preventing fraud and misuse and protecting the website and systems
  • Managing accounting, tax, and contractual records
  • Complying with legal and regulatory requirements and requests from competent authorities
  • Handling quality or safety complaints or product recalls when necessary
  • Improving website performance and user experience based on technical or statistical information not intended for advertising

5. No Use of Data for Advertising or Marketing

La Rose Gallery does not use customer data, phone numbers, email addresses, or purchase history for the following purposes:

  • Sending advertisements or promotional offers
  • Making marketing calls
  • Sending marketing messages via email, text messages, or WhatsApp
  • Creating advertising profiles or custom audiences
  • Ad retargeting on search engines or social media platforms
  • Selling, renting, or exchanging data with marketing companies or data brokers

Necessary messages related to an order, price quote, payment, delivery, manufacturing, warranty, safety, or a material service update are not considered promotional messages.

If La Rose Gallery decides in the future to offer an optional marketing subscription service, it will not be activated except after obtaining separate and clear consent from the customer, who may withdraw it easily. This policy will also be updated before that service begins.

6. Confidentiality of Customer Formulations and Blends

Confidentiality of customer formulations is a fundamental commitment at La Rose Gallery, and therefore:

  • Formulation files are stored in a dedicated, protected, and access-restricted storage environment.
  • Access is granted according to job authorization and the need-to-know principle only.
  • Access is limited to the customer or their authorized representative and authorized employees or technicians whose duties require it.
  • No customer's files are made available to any other customer, nor displayed to the public.
  • We do not publish the formulation, project photos, product name, or details as a case study or within our portfolio without explicit written consent.
  • We do not use a private formulation linked to a specific customer to produce a product for another customer without consent or a contractual basis permitting it.
  • We require authorized individuals and technical service providers to maintain confidentiality in a manner appropriate to the nature of their access.
  • We maintain internal records or controls for access to sensitive files whenever available and appropriate for the system used.

If fulfilling an order requires the involvement of a lab, supplier, or technical consultant, we share the minimum necessary technical information, and we seek to use a project number or internal code instead of the customer's name. The customer's identity is not disclosed unless necessary for execution, and after obtaining appropriate consent when required, or if required by law.

The privacy policy alone does not determine ownership of intellectual property rights related to a formulation. Ownership and rights of use, development, and reproduction are determined in the price quote, manufacturing agreement, or a separate agreement. The confidentiality obligations stated here remain in effect regardless of who owns the formulation, in accordance with the contract and the law.

7. Confidentiality of Names of Raw Material Supply Customers

La Rose Gallery does not disclose to third parties:

  • The names of customers or companies that purchase, import, or receive raw materials through it
  • The existence of a business relationship with a particular customer
  • The types of materials, quantities, prices, or supply dates related to them
  • The projects, brands, or products in which the customer uses the materials

Customer names or logos are not used in customer lists, marketing materials, social media, or business proposals without explicit written consent.

Excluded from this is the limited and necessary disclosure to a shipping company, payment provider, professional consultant, or competent official authority to fulfill an order or comply with a legal obligation, applying the principle of data minimization.

8. Legal Basis for Data Processing

Data is processed, depending on the nature of the case, based on one or more of the bases permitted by applicable legislation, including:

  • Performance of a contract or order, or taking steps at the customer's request prior to contracting
  • Compliance with a legal or regulatory obligation
  • Protection of legal rights and claims
  • Legitimate interests related to system security, fraud prevention, and service improvement, when permitted and not overridden by the data subject's rights
  • Consent of the data subject when consent is legally required

Consent may be withdrawn in cases where processing depends on it, without affecting the lawfulness of processing carried out prior to withdrawal or processing necessary for another legal reason.

9. Sharing Data with Service Providers

We may share the minimum necessary data with:

  • Payment service providers and banks
  • Shipping, delivery, and customs clearance companies
  • Website hosting, storage, backup, and technical security providers
  • Store systems, account management, and customer service providers
  • Accountants, auditors, lawyers, and professional consultants
  • Labs or technical and regulatory bodies when needed to perform a service the customer has agreed to
  • Government, judicial, or regulatory authorities when disclosure is legally required

We do not allow service providers to use the data for their own advertising purposes, and we require them to handle it within the specified purpose and with an appropriate level of confidentiality and protection.

La Rose Gallery does not sell, rent, or trade personal data.

10. Links, Login, and External Services

The website may include links or features provided by third parties, such as a payment provider, shipping company, login service, or social media platforms. When choosing to use an external service, that party may process some data in accordance with its own privacy policy.

We recommend reviewing the third party's policy before using its service. La Rose Gallery is not responsible for the practices of websites or services it does not operate, while remaining responsible for selecting its providers and processing data within the limits imposed by law.

11. Cookies

The website uses necessary cookies to enable functions such as:

  • Operating the shopping cart
  • Login and session protection
  • Saving language and preferences
  • Remembering products or lists selected by the user
  • Preventing fraud and improving security and performance

We may use non-advertising performance measurement or statistical analytics tools to understand issues and improve the website experience. We do not use cookies for targeted advertising or ad retargeting.

When non-essential cookies require consent, they will not be activated before the user's choice. Users can manage cookies through browser settings or the consent tool available on the website, noting that disabling necessary cookies may affect the functioning of some features.

12. Data Protection and Information Security

We adopt appropriate technical and organizational measures based on the sensitivity of the data and the nature of the service, which may include:

  • Restricting access based on authorization
  • Protecting accounts, passwords, and access methods
  • Encrypting communication with the website and systems where appropriate
  • Secure backup and recovery controls
  • Monitoring systems and logging sensitive activities when possible
  • Updating systems and addressing vulnerabilities
  • Confidentiality obligations and awareness training for authorized individuals
  • Separating sensitive manufacturing files from public access channels

Despite taking appropriate measures, no electronic means can be guaranteed absolutely secure. In the event of a security incident affecting data, we take the necessary steps to contain, investigate, and address it, and notify the competent authority and data subjects when required by law.

13. Data Retention

We retain data for the period necessary to achieve the purpose for which it was collected, taking into account:

  • The legal periods required for commercial, accounting, and tax records and invoices
  • The duration of order fulfillment, warranty, exchange, and return
  • The need to prove rights or address disputes
  • Quality, safety, and production batch tracking requirements
  • The continuation of the business relationship or customer account

We may retain formulation files for the duration of the manufacturing service and business relationship, and for the period necessary to reproduce or fulfill subsequent orders, unless the customer requests their deletion and deletion is legally and contractually possible.

If a customer requests deletion of their formulation file, we explain to them before proceeding that deletion may prevent us from reproducing that same formulation in the future. We may retain a limited, restricted copy if necessary to comply with a legal obligation, a safety requirement, an ongoing dispute, or a legitimate contractual right.

After the legitimate need has ended, we delete the data, anonymize it, or securely isolate it as appropriate.

14. Data Transfer Outside the UAE

Some hosting, payment, technical support, or shipping services may require limited data processing outside the United Arab Emirates. In this case, we comply with the legal controls related to data transfer and use appropriate procedures and safeguards to protect it.

Private formulation files are not transferred outside the approved storage environment except when there is a legitimate technical or contractual need, and to the minimum extent necessary, with appropriate confidentiality and protection controls applied.

15. Data Subject Rights

In accordance with the law and applicable cases and exceptions, a data subject may request to:

  • Know the data we process, the purpose of processing it, and the parties with whom we have shared it
  • Obtain a copy of their data
  • Correct inaccurate data or complete incomplete data
  • Delete data when retaining it is no longer necessary or lawful
  • Restrict or stop processing in cases determined by law
  • Transfer data to another party when technically possible
  • Withdraw consent when processing is based on it
  • Object to a decision that produces a legal effect and is based solely on automated processing, if any

We do not currently use purely automated decisions to determine a customer's eligibility to purchase, manufacture, or receive a service.

Requests may be submitted via info@larosegallery.ae. We may request appropriate information to verify identity and authorization before fulfilling the request, to protect data from disclosure to someone other than its owner. The request will be handled within the legally prescribed period.

Deletion of some data may not be possible if retention is required by law, necessary for the performance of an existing contract, or necessary to protect a legal claim or right, and we will explain the reason when applicable.

16. Children's Privacy

Our commercial and manufacturing services are not intentionally directed at individuals who lack the legal capacity to contract. We do not knowingly collect a child's data without parental consent or supervision when required.

If we discover that a child's data has been collected inappropriately, we take reasonable steps to delete it or resolve its status in accordance with the law.

17. Surveillance Cameras on Premises

Our branches or facilities may use surveillance cameras for security, safety, and the protection of people and property, and to investigate incidents. Recordings are not used for advertising or purposes unrelated to security, access to them is restricted, and they are retained for the necessary or legally prescribed period.

18. Legally Required Disclosure

We may disclose specific data if we receive a valid legal request from a competent governmental, judicial, or regulatory authority, or if disclosure is necessary to protect rights, safety, or prevent fraud.

In these cases, we limit disclosure to the minimum required and seek to protect the confidentiality of business information and formulations to the extent permitted by law.

19. Updating the Privacy Policy

This policy may be updated as our services, systems, or legal requirements change. The date of the last update is displayed at the top of the page.

If the amendment is material and significantly affects how data is used, we will provide appropriate notice before the amendment takes effect, when required.

The version in effect at the time data is collected or the service is provided applies, subject to any subsequently applicable legal requirements.

20. Contact and Complaints

To inquire about privacy or exercise data-related rights, you may contact us via:

  • Email: info@larosegallery.ae
  • Phone: 97165562611+
  • WhatsApp: 971555535625+
  • Address: Liwara 1 – Ajman – United Arab Emirates

We will review the request or complaint and handle it seriously and confidentially. If the data subject is not satisfied with the handling, they may contact the competent data protection or consumer protection authority in the United Arab Emirates in accordance with applicable procedures.