We, Noon E-Commerce, are a subsidiary of Noon AD Holdings One Person Company, a limited liability company incorporated and existing under the laws of Dubai, United Arab Emirates (“UAE”), with business license number 764928 and registered address at Office P.O. Box 126251 701, Emaar Properties, Dubai.
This Privacy Policy (“Privacy Policy”) outlines the basis for our collection and use of any of your personal data, whether collected directly from you or from other sources in connection with your access, and from your use of the platform or our services, including newsletters and any social media features on the platform (collectively, the “Services”). We understand the importance you place on your personal data and are committed to protecting and respecting your privacy. Please read the following Privacy Policy carefully to understand how we process your personal data. By using the platform and services, you consent to the collection and processing of your personal data in accordance with this Privacy Policy. For the purposes of this Privacy Policy, “personal data” means and includes the data categories listed in Section 2 of this Privacy Policy.
The references to “user,” “you,” or “your” (or similar) refer to you as an individual or legal entity.
The platform may contain links to third-party websites, plugins, and applications. Clicking these links or enabling these connections allows third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements/claims. When you leave our platform, we encourage you to read the privacy statement for each website you visit.
1. We do not collect children's data
This platform is not for users who are not yet minors under applicable laws. However, we cannot prevent certain users, including children, from falsely claiming their age to gain access to the platform. If you are a parent or guardian and believe we have collected information about your child, please contact us immediately as per Section 12 of this Privacy Policy.
2. What personal data do we collect from you or about you?
We collect your personal data to provide and continuously improve the platform and services. Personal data refers to any information that can identify you based on an identifier. It does not include anonymized data, i.e., datasets where personal data has been removed. We collect, use, store, and transmit various personal data about you, categorized as follows:
Identifying information includes your name, maiden name, surname, username or similar identifier, gender, title, nationality, and date of birth/birth;
Contact information includes your address, email address, and phone number;
Transaction data includes your payments and related payment information, including but not limited to your payment methods and details of the products and services you purchase from us;
Technical data includes your IP address, login data, browser type and version, operating system, mobile application version, time zone setting and location, device type, IDFA (for iOS users), and information about your general internet usage (e.g., through the use of technologies that store or access information on your device, such as cookies). We track pixels, web beacons, and other technologies used to access our website; Personal data includes usernames and passwords, interests, preferences, feedback, preferred languages, and survey responses; Purchase data includes all past orders and purchases, redemption information, fulfillment information, and page view information from service providers supporting brand building, fulfillment, and other platform operations under the same user account; Browser data pertains to how you interact with our websites, products, and services; Marketing and communication data covers your preferences for receiving marketing materials from us and third parties, as well as your communication preferences.
In addition, we collect, use, and share statistical or demographic information (“aggregated data”). Aggregated data refers to your personal data that has been modified to remove personal identification and does not directly or indirectly reveal your identity. For example, we may aggregate personal data collected from browsers to determine the proportion of users accessing specific website features.
3. How do we collect personal data about you? We access your personal data in the following ways:
Directly: We collect personal data directly from you through the platform while you are:
registering on the platform and other shared registrations (such as social media logins), subscribing to any of our services, or posting content on the platform;
making payments, requesting refunds, and specifying payment methods;
participating in contests, promotions, or choosing to participate in special programs;
submitting comments, recommendations, or feedback;
when requesting refunds, fraudulent transactions, or replacements from the platform, submitting support requests/complaint tickets;
if you contact us by phone, email, or other means, please provide your communication records; and
browsing and engaging in other activities on the platform.
Indirectly: When they shop on your behalf or on your behalf, we also obtain personal information about you from your friends/relatives. These suppliers/third-party service providers enable you to seamlessly access our services. Our suppliers include:
Logistics and fulfillment service providers and/or partners;
Marketing service providers;
Your interactions with us on other platforms such as Facebook and Google;
Payment service providers; and
If you share personal data of third parties (such as friends, relatives, or colleagues, any individual) with us while using our services, you warrant that you have obtained the consent of the relevant individual to share their personal data with us in accordance with this Privacy Policy.
Automatic: When you use our services, we automatically collect certain personal information about you through log files, cookies, and other unique identifiers. We use log files to collect certain personal information about you. Log information refers to data about your use of the services, such as IP (Internet Protocol) address, browser type, referencing/exiting pages, operating system, date/time stamps, and related data, all of which are stored in log files.
We also use a limited number of cookies. A cookie is a small data file that is transferred to your computer (or other device) when you access our services. Cookies are used for a variety of purposes, including enabling certain features of our services and remembering your preferences, devices, browsing behavior and patterns, better understanding how you interact with our services, providing you with advertising on our services, and monitoring visitor usage and online traffic routing. Within the limits permitted by your preferred browser, you can instruct it to stop accepting cookies by changing its options, or to be prompted before accepting cookies for the online services you wish to use. We use cookies to enrich your experience, remember your online behavior while using the platform, and improve the effectiveness of advertising and services. If you do not agree to our use of cookies, please stop using the platform immediately.
For more information about cookies and how they are used, please read our Cookies Notice.
You can choose not to provide certain personal data, but this may affect your ability to use many of our services.
4. What is the purpose of us collecting your personal data?
We collect and use your personal data for the following purposes:
To solicit information, products, or services from you, or that we believe you may be interested in, provided you consent to being contacted;
To provide you with location-based services, such as advertising, search results, and other personalized content;
To fulfill obligations arising from contracts you have with other entities using the platform or with us;
To improve our services and provide you with better, more personalized services, including communicating with you through various channels (such as phone, messages, email, and instant messaging applications);
To ensure that platform content is presented to you and the device you use to access the platform in the most efficient way;
To offer you discounts and offers on special occasions such as your birthday and anniversary;
To notify you of service changes;
For any other reason that we believe is necessary to improve your experience on the platform;
To manage and administer our incentive programs, fulfill your incentive requests, and/or allow you to participate in sweepstakes and notify you if you have won;
To provide functionality, analyze performance, fix bugs, and improve the usability and effectiveness of our services;
To comply with local laws (such as identity documents required for nationality and/or cross-border shipping, seller information about their place of business, and bank account information used for identity verification and other purposes); and
To prevent and detect fraud and abuse to protect the safety of our customers, us, and others. 5. How We Use Your Personal Data?
We only use your personal data in the following situations:
Contract Performance
We need your personal data to perform a contract or take preliminary steps before entering into a contract. This includes accepting applicable terms and conditions, or specific terms related to our services. If you do not provide personal data for these purposes, we may be unable to provide services or enter into a contract with you, which could result in the cancellation of services. We will notify you if this happens.
Legal or Regulatory Obligations
We may collect your personal data to comply with any applicable laws and/or regulations.
Legal Interests
We may process your personal data based on legitimate business and customer interests when we improve our services, detect and prevent fraud and abuse to protect the safety of customers, ourselves, or others, and when providing interest-based advertising.
Marketing and Communication Data
We may also use your personal data to provide you with information about goods and services that may be of interest to you and to enhance your platform experience through service information, new features, enhancements, special offers, and related activities. We may contact you through various channels, including but not limited to email, push notifications, web notifications, posts, phone calls, in-app messages, WhatsApp messages, and newsletter cards. We provide you with the option to receive these interest-based advertisements. You can contact us through the details mentioned in Clause 12 of this Privacy Policy, or choose not to receive these advertisements by clicking the “Unsubscribe” button in emails or any marketing communications we send.
6. With whom do we share your personal data?
Your personal data is very important to us as we provide services to you, and we do not engage in the business of selling your personal data to others. We only share your personal data with the third parties described below and with businesses that take at least the same safeguards as described in this Privacy Policy:
Other businesses. To provide services to you, we may work with other affiliated and/or unaffiliated service providers (such as logistics companies for product delivery, marketing companies, payment processors for online transactions, data analytics, etc.) and share your personal data with these businesses. We may involve other businesses in your transactions, and these businesses may store your personal data in digital wallets so that you can use our services more efficiently.
You understand that it is important for these businesses to have access to the relevant personal data to fulfill their responsibilities. We will ensure that these businesses do not use your personal data for other purposes. We may also receive personal information from these businesses (such as updated shipping and address information), and we may use this data (such as to correct records and deliver your next purchase). These businesses must respect the confidentiality of your personal data in their contracts and may not use it for any other purpose.
Third Parties. We may share your personal data with third parties for the purposes set forth in Section 5 above. However, we ensure that all businesses follow at least the same level of protection as described in this Privacy Policy. We do not allow third-party service providers to use your personal data for their own purposes, but only allow them to process your personal data in accordance with our instructions. You can request that we or third parties stop sending you marketing messages by selecting your marketing preferences on the platform, clicking the opt-out link in any marketing messages sent to you, or by contacting us at any time.
Use of Google reCAPTCHA
We use Google reCAPTCHA on our website to help prevent spam and abuse and to ensure the security of the service. reCAPTCHA works by collecting hardware and software information, such as device and app data, and sending it to Google for analysis. The use of reCAPTCHA is governed by Google's Privacy Policy and Terms of Service. Your use of the service is subject to these policies through your interaction with reCAPTCHA.
In addition, you may need to provide additional personal data to participate in some of our market research activities, including contests and promotions. (For example, providing further personal information to prove your eligibility to win prizes). This personal data may be collected by us or our co-sponsors or suppliers for promotional activities. If you choose not to provide certain personal data, you may not be able to take advantage of contests and promotions. If you decide to participate, please note that you should review the privacy policies of these third parties to understand how they use the personal data collected.
Business Transfer. As our business grows, we may be involved in the sale or purchase of other businesses or services. In these transactions, customer personal data is usually included in the transferred assets, but will remain protected under the existing privacy policy unless the customer consents. If we are acquired or acquire a majority of the assets, customer personal data will be included as part of the transferred assets.
Protecting the Platform and Other Facilities. We may disclose users' personal data when we believe it is appropriate to comply with the law, law enforcement investigations, and to protect the rights, property, or safety of ourselves, users, or others. This includes exchanging personal data with other companies and organizations for various purposes, such as preventing fraud and reducing credit risk.
7. How do we store your personal data, and for how long?
The personal data we collect from you may be transferred, stored, and processed by our or our service providers' employees. These employees may be responsible for fulfilling your orders, processing your payment details, and providing support services. We will store your personal data until the purposes set forth in this Privacy Policy or as required by law are achieved. To determine the appropriate retention period for your personal data, we will consider the quantity, nature, and sensitivity of the personal data, the risks of unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether those purposes can be achieved by other means, and applicable legal, regulatory, tax, accounting, or other requirements. In some cases, we may anonymize your personal data (making it no longer associated with you) for research or statistical purposes. In such cases, we may use this information indefinitely without further notice to you.
8. What security measures do we take?
We have your security and privacy considered when designing our systems. We maintain commercially reasonable technical, administrative, and physical safeguards to ensure the secure processing of your personal data, in accordance with this Privacy Policy and applicable laws, and to prevent unauthorized access, alteration, disclosure, or destruction of your personal data. For example, we may use encryption technology to protect personal data transmitted to the platform, while using external firewalls and host firewalls to prevent network-level attacks.
