Privacy Policy

01About this Policy

This Privacy Policy explains how Carnies Online Seller (“Carnies”, “we”, “us”) collects, uses, discloses, and protects personal data when you visit carnies.dev (the “Site”), join our launch list, or purchase a digital product from us.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and, where applicable to buyers located in the EU/EEA, the EU General Data Protection Regulation (the “GDPR”).

02Data Controller

The data controller is Carnies Online Seller, a Sole Establishment registered in Dubai with the Department of Economy and Tourism under E-Trader Licence No. 1626932. Privacy enquiries: hello@carnies.dev.

03Information We Collect

We collect three categories of personal data:

• Information you provide: your name, email address, billing address, country of residence, and any free-form text included in support requests or launch-list signups.
• Information collected automatically: IP address, browser type and version, device type, operating system, referring URL, pages viewed, time on page, and similar standard server-log and analytics data.
• Payment information: when payments are active, this will be collected directly by our engaged payment service provider (the specific provider will be named here once selected). We will not receive or store full card numbers; we will receive only a transaction token and a redacted card identifier (such as the last four digits and card brand) for support and reconciliation purposes. carnies.dev is currently in a pre-launch phase and is not yet processing live payments.

04How We Use Your Information

We use personal data to: (a) deliver the products you purchase, including download links, licence keys, and SaaS access; (b) issue invoices and maintain tax records as required by UAE law; (c) provide customer support and respond to your enquiries; (d) send transactional emails such as purchase confirmations and version-update notices; (e) send optional marketing emails about new product releases — only if you have explicitly opted in; and (f) detect and prevent fraud, abuse, and security incidents.

05Legal Bases for Processing

We rely on the following lawful bases for processing your personal data:

• Performance of a contract — to deliver the products you purchase and provide customer support.
• Compliance with a legal obligation — to meet UAE tax, accounting, and consumer-protection record-keeping requirements.
• Legitimate interests — to maintain Site security, prevent fraud, and improve our products.
• Consent — for optional marketing communications and any non-essential cookies; you may withdraw consent at any time.

06Cookies and Similar Technologies

We use a small number of essential cookies needed to operate the Site (for example, to maintain a session or remember an explicit cookie-preference choice). We may add a privacy-respecting analytics provider later; if and when we do, non-essential analytics cookies will be disabled by default and an opt-in banner will be presented.

07Third-Party Processors We Use

We use the following third-party processors. Each is bound by its own data-processing agreement, which we have reviewed prior to onboarding:

• A regulated payment service provider — payment processing, fraud screening, and invoice generation. The specific provider will be named here once our merchant account is active. While the Site is in pre-launch, no live payments are processed.
• A cloud application-hosting and edge content-delivery provider, with infrastructure in the United States and global edge locations. Hosting is incidental to the Site's operation; we may change hosting providers from time to time and will update this Policy if doing so changes the category of recipient or the country of processing.
• An email service provider — transactional and (where opted in) marketing email delivery. The specific provider will be named here once selected; until then, launch-list signups are routed manually via hello@carnies.dev.
• An analytics provider — none is active during pre-launch. When we add one, we will name it here, describe the data collected, and offer an opt-out.

08International Data Transfers

Because our processors operate globally, your personal data may be transferred to and stored in countries outside the UAE, including in the European Union and the United States. Such transfers occur under appropriate safeguards — typically the standard contractual clauses or equivalent mechanisms incorporated in each processor's data-processing agreement.

09Data Retention

We retain personal data only for as long as needed for the purposes set out in this Policy. Account and purchase records are retained for as long as your account is active, plus seven (7) years from the date of the last transaction to meet UAE accounting and tax record-keeping practice. Launch-list email addresses are retained until you unsubscribe.

10Your Rights

Subject to the limits of applicable law, you have the right to:

• Access the personal data we hold about you and receive a copy.
• Request that inaccurate personal data be corrected.
• Request that your personal data be erased, where there is no overriding legal basis to retain it.
• Object to processing, or request that we restrict processing, in defined circumstances.
• Receive a portable copy of personal data you have provided to us.
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Lodge a complaint with the UAE Data Office or the data-protection authority of your country of residence.

11Security

We use industry-standard safeguards to protect personal data, including TLS 1.2 (or higher) encryption in transit, tokenised vault-stored payment data held by our payment service provider, restricted role-based access to personal information, and routine review of our infrastructure.

No internet service is perfectly secure. We will notify affected users and, where required, the relevant authority of any personal-data breach in line with our obligations under the PDPL.

12Children

Our Site and products are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

13Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be notified by email to active customers where we have your address.

14Contact Us

For privacy enquiries, data-subject requests, or to exercise any of the rights set out in this Policy: Carnies Online Seller — Sole Establishment, Dubai, UAE — DET E-Trader Licence No. 1626932. Email: hello@carnies.dev.