Privacy policy
Privacy Policy
Last updated: 1 October 2026
U A U FOOD SUPPLEMENTS TRADING L.L.C ("Zelthy", "we", "us") respects your privacy. This policy explains what personal data we collect through zelthynutrition.ae, why we collect it, who we share it with, how long we keep it, and the rights you have.
We process personal data in accordance with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and its implementing regulations. If you live in another GCC country, you may also have rights under the data protection law of your country; nothing in this policy limits them.
1. Who is responsible for your data
The data controller is:
U A U FOOD SUPPLEMENTS TRADING L.L.C
Office C-060, Khaled Mohammad Abdulla Alzahed Building, Hor Al Anz, Dubai, United Arab Emirates
Trade licence: 1516416
Email for privacy matters: wecare@zelthynutrition.ae
We have not appointed a dedicated Data Protection Officer. Privacy enquiries are handled by our customer service team at the address above.
2. What we collect
You give us directly:
- Identity and contact data: name, email address, telephone number, delivery and billing address.
- Order data: products ordered, order value, currency, order history, and any notes you add to an order.
- Account data: username, password (stored in hashed form), saved preferences and addresses.
- Communications: messages you send us by email, contact form or social media, including complaints and return requests.
- Marketing preferences: whether you have consented to receive email or SMS marketing.
- Reviews and content you choose to publish on the Site.
Collected automatically:
- Device and technical data: IP address, browser type and version, device type, operating system, language and time zone settings.
- Usage data: pages visited, products viewed, time on page, referring site, and interactions with the Site.
- Cookie and similar identifiers, and your cookie consent choices, as described in our Cookie Policy.
From third parties:
- Payment confirmation and fraud-screening results from our payment providers (we do not receive your full card number).
- Delivery and customs clearance status from our carrier.
- Aggregated advertising and analytics data from the platforms listed in section 5.
For deliveries outside the UAE, the carrier or the customs authority of the destination country may ask you directly for additional information needed for import clearance, such as a national ID or residence permit number. Where you provide it to them, it is processed by them under their own rules; we do not ask for or keep it unless you send it to us to resolve a delivery issue.
We do not ask for and do not wish to receive special-category data, such as information about your health. Please do not include health information in messages to our customer service team unless it is strictly necessary to resolve a product issue. If you do send it, we use it only to respond to you and delete it once the matter is closed.
We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact wecare@zelthynutrition.ae and we will delete it.
3. Why we use your data and on what basis
| Purpose | Data used | Lawful basis under the PDPL |
|---|---|---|
| Processing and delivering your order, including payment, invoicing, delivery and customs clearance | Identity, contact, order, payment confirmation | Necessary for performance of the contract with you |
| Managing your account | Account, identity, contact | Necessary for performance of the contract |
| Customer service, complaints, returns and refunds | Identity, contact, order, communications | Necessary for performance of the contract; compliance with consumer protection obligations |
| Fraud prevention, security and protecting the Site | Technical, usage, order | Compliance with legal obligations; protection of our legitimate interests in a secure service |
| Tax, accounting and regulatory record-keeping | Identity, order, payment | Compliance with UAE legal obligations |
| Recording your cookie consent choices | Consent record, technical data | Compliance with legal obligations |
| Sending marketing emails or SMS | Contact, marketing preferences, order history | Your consent |
| Analytics to understand and improve the Site | Technical, usage, cookie data | Your consent (non-essential cookies) |
| Advertising and measuring advertising performance | Technical, usage, cookie data, hashed email | Your consent |
| Publishing your reviews | Review content, first name or display name | Your consent |
4. Marketing
We send marketing messages only where you have consented. Every marketing email contains an unsubscribe link, and you can opt out at any time by emailing wecare@zelthynutrition.ae or using the preference centre in your account. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
We will continue to send transactional messages — order confirmations, dispatch notices, delivery updates, refund confirmations — as these are necessary to perform your contract and are not marketing.
5. Who we share your data with
We share personal data only with the following categories of recipient, and only to the extent necessary:
- E-commerce platform: Shopify, which hosts the Site and processes orders.
- Payment providers: Shopify Payments, which processes your payment and carries out fraud screening.
- Invoicing and business management: Odoo, the system we use to issue invoices and keep our accounting records.
- Delivery and logistics: Aramex, which receives your name, address, telephone number and the contents and value of your parcel to complete delivery and, for deliveries outside the UAE, customs clearance.
- Customs authorities: for deliveries outside the UAE, the customs authority of the destination country receives the shipment information required by law.
- Email and messaging platform: Klaviyo, for transactional and, where you have consented, marketing messages.
- Consent management: Pandectes, which provides our cookie banner and keeps a record of your cookie choices.
- Analytics and advertising platforms: Shopify Analytics, Google Analytics 4, Meta (Facebook and Instagram), Google Ads and TikTok, only where you have consented to the relevant cookies.
- Professional advisers: accountants, auditors and lawyers, bound by confidentiality.
- Authorities: regulators, courts or law enforcement, where we are legally required to disclose.
We do not sell your personal data.
6. International transfers
Some of the providers above process data outside the United Arab Emirates, including in the United States, Canada, the European Union and other countries in which those providers operate. For deliveries outside the UAE, your delivery data is also transferred to the destination country.
Where we transfer personal data outside the UAE, we do so only where the receiving jurisdiction provides an adequate level of protection, where we have put in place appropriate contractual safeguards with the recipient requiring protection equivalent to that required by the PDPL, where the transfer is necessary to perform the contract with you (such as delivering your order to another country), or where another lawful basis for transfer under the PDPL applies.
You may request further information about the safeguards applied by contacting wecare@zelthynutrition.ae.
7. How long we keep your data
- Order and transaction records: 5 years from the date of the order, to meet UAE tax, accounting and consumer protection record-keeping requirements.
- Account data: for as long as your account is active, and 24 months after you close it or after a period of inactivity.
- Customer service correspondence: 24 months from closure of the matter.
- Marketing consent records: for as long as you remain subscribed, and a record of your opt-out indefinitely so that we do not contact you again.
- Cookie consent records and cookie data: as set out in our Cookie Policy.
When a retention period ends we delete the data or irreversibly anonymise it.
8. Your rights
Under the PDPL you have the right to:
- Be informed about how we process your data — this policy is part of how we meet that obligation.
- Access the personal data we hold about you and receive information on the types of data processed, the purposes, the recipients, the retention period, and any automated decision-making.
- Correct inaccurate or incomplete data.
- Request deletion of your data where it is no longer needed for the purpose it was collected, where you withdraw consent and no other basis applies, or where processing is unlawful.
- Restrict processing in specific circumstances, including while a correction request is being assessed.
- Data portability — receive the data you provided to us in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible, where processing is based on consent or on a contract.
- Object to processing for direct marketing, to automated decision-making, and to processing for statistical purposes.
- Withdraw consent at any time, where processing is based on consent.
- Complain to us and, if unsatisfied, to the UAE Data Office.
To exercise any of these rights, contact wecare@zelthynutrition.ae. We will respond within one calendar month. Where a request is complex or where we receive several requests from you, we may extend this by up to two further months and will tell you if we do. There is no charge for making a request.
We may need to verify your identity before acting on a request.
9. Automated decision-making
We do not make decisions producing legal effects concerning you based solely on automated processing. Our payment providers may apply automated fraud-screening rules to a transaction; if a payment is declined on that basis you can contact us and we will review it manually.
10. Security
We apply technical and organisational measures appropriate to the risk, including encryption of data in transit (TLS), access controls and role-based permissions, restricted administrator access, and contractual security obligations on our processors.
No system is completely secure. If a personal data breach occurs that is likely to affect your privacy, security or rights, we will notify the UAE Data Office immediately upon becoming aware of it, and will notify you without undue delay where the breach is likely to cause you harm.
11. Cookies
The Site uses cookies and similar technologies. See our Cookie Policy for the categories we use and for how to manage your preferences.
12. Changes to this policy
We may update this policy. The date at the top shows when it was last revised. Where a change is material, we will notify you by email or by a prominent notice on the Site before it takes effect.
13. Language
This policy is published in English and in Arabic. In the event of any inconsistency, the Arabic version prevails.
14. Contact and complaints
For any question about this policy or about how we handle your data:
U A U FOOD SUPPLEMENTS TRADING L.L.C
Office C-060, Khaled Mohammad Abdulla Alzahed Building, Hor Al Anz, Dubai, United Arab Emirates
Email: wecare@zelthynutrition.ae
Telephone: +971 56 456 0365
If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office.
