Privacy Policy

Kinzia FZE is the controller of the personal data processed through the Marketplace at kinzia.com. For questions or requests, contact our privacy team at cs@kinzia.com.

• Account data: name, email, phone, password (stored encrypted), preferences.
• Order data: delivery address, items purchased, order history, communications.
• Payment data: processed by our payment provider(s); we receive limited details (for example, card type and last digits) and do not store full card numbers.
• Usage data: device, browser, IP address, pages viewed, and cookie data (see the Cookie Policy).
• Support data: messages, calls, and chats with customer support.
• Marketing data: your opt-in choices and how you engage with our messages.
• Sensitive context: because we sell health, wellness and personal-care products, the Products you buy may reveal information about your interests or needs. We treat this information with extra care and do not use it to make decisions that could unfairly affect you.

We collect data you give us, data created as you use the Marketplace, and limited data from service providers (for example, delivery status from a Delivery Partner).

We process personal data to:

1. Provide the Marketplace and fulfil your Orders — necessary to perform our contract with you.
2. Process payments and prevent fraud — for our legitimate interests and legal obligations.
3. Provide customer support — to perform our contract and for our legitimate interests.
4. Improve and secure the Marketplace — for our legitimate interests, with privacy safeguards.
5. Send marketing — only with your consent, which you can withdraw at any time.
6. Comply with UAE law — including consumer-protection, tax, and record-keeping duties.
7. Use non-essential cookies and analytics — only with your consent via the cookie manager.

Where the PDPL requires your consent, we ask for it clearly and you can withdraw it without affecting the lawfulness of earlier processing.

We share personal data only as needed:

• Vendors — when you buy a Vendor Product, we share the details needed to fulfil your Order (for example, name and delivery address). Vendors must protect your data and use it only to fulfil your Order.
• Delivery Partners — to deliver your Order.
• Payment providers — to process payments securely.
• Service providers — hosting, analytics (with consent), customer-support tools, bound by confidentiality and data-protection obligations.
• Authorities — where required by UAE law or to protect rights, safety, and security.

We do not sell your personal data.

We aim to store and process data within the UAE. Where a service provider processes data outside the UAE, we do so only where the PDPL permits and with appropriate safeguards to keep your data protected.

We keep personal data only as long as needed for the purposes above and to meet legal, tax, and accounting requirements, after which we delete or anonymise it. Order and invoice records are kept for the periods required by UAE law.

We use technical and organisational measures appropriate to the risk — including encryption in transit, access controls, and least-privilege practices. No system is perfectly secure, but we work continuously to protect your data and will notify you and the relevant authority of a personal-data breach where the PDPL requires.

Subject to the conditions in the law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Withdraw consent at any time (for example, marketing or non-essential cookies).
• Data portability where applicable.
• Lodge a complaint with the UAE Data Office.

To exercise any right, contact cs@kinzia.com or use the request form on our Data Protection Policy page. We will respond within the timeframe required by the PDPL and may need to verify your identity first.

The Marketplace is intended for adults. We sell baby and child-care products to adults and do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

We use cookies and similar technologies as described in the Cookie Policy. Non-essential cookies are used only with your consent, which you can manage at any time.

We may update this Policy from time to time. When we do, we will change the "Last updated" date and, for material changes, provide reasonable notice.