Privacy policy

Regulatory Compliance

This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you visit our website or request custom quotations, in strict compliance with UAE Federal Decree-Law No. 45 of 2021 regarding the Protection of Personal Data (PDPL).

Personal Data We Collect

We collect personal and corporate information necessary to prepare quotations, process custom orders, and fulfill contractual commitments:

  • Identity & Contact Data: Full name, corporate entity name, physical address, email address, and active UAE contact numbers.

  • Inquiry & Quotation Data: Project briefs, technical specifications, custom quote requests, official Purchase Orders (POs), and formal proposals.

  • Technical Data: IP address, browser type, operating system, device identification, and site activity collected via cookies.

  • Payment Data Notice: Payments are processed securely via direct corporate bank transfer or licensed payment gateways. We do not process or store full debit/credit card numbers on our servers.

Purpose & Legal Basis for Data Collection

We collect and process personal data exclusively for the following lawful purposes under UAE PDPL:

  • Preparing, issuing, and managing customized quotations, proposals, and service contracts.

  • Fulfilling, delivering, and managing custom products, services, or project deliverables.

  • Communicating regarding quote status, project milestones, invoices, and support inquiries.

  • Complying with statutory accounting, VAT invoicing, and financial record-keeping obligations enforced by UAE authorities.

Data Sharing with Third Parties

We do not sell or monetize personal or commercial data. We disclose necessary information strictly to trusted third parties bound by confidentiality agreements, solely to operate our business:

  • Logistics & Freight: Licensed logistics and freight carriers for delivery of customized goods.

  • Financial & Payment Partners: Regulated banking institutions and PCI-DSS compliant payment gateways.

  • IT Infrastructure: Cloud infrastructure, hosting, and CRM platform providers.

  • Legal Obligations: When required by law, court order, or official request from UAE authorities.

Data Storage, Security, & Retention

We implement administrative, technical, and physical security measures to safeguard data against unauthorized access or disclosure. Personal and commercial data is retained only for as long as necessary to fulfill contractual purposes or to satisfy statutory financial record-keeping requirements under UAE tax laws (minimum 5 years for tax records).

Your Rights Under UAE PDPL & Data Deletion Requests

Under UAE Federal Decree-Law No. 45 of 2021, you possess statutory rights regarding your personal data:

  • Right to Access: The right to confirm and request details of personal data held about you.

  • Right to Rectification: The right to request immediate correction of inaccurate or incomplete data.

  • Right to Erasure / Deletion: The right to request the erasure ('Right to be Forgotten') of your data when retention is no longer legally required.

To submit a Data Access, Correction, or Deletion Request, please send written notice to sales@marsagifting.com with the subject line 'PDPL Data Request'. Requests will be addressed within thirty (30) calendar days.