Privacy Policy

We use your data to process and deliver orders, provide support, prevent fraud, and — with your consent — send marketing.

We share data with payment processing, delivery partners, and email/analytics service providers, acting on our instructions. We never sell your data.

We use cookies for three purposes: keeping the site working (essential), understanding how the site is used (analytics), and recognising you across visits for marketing (marketing/tracking). You can control or clear cookies at any time in your browser settings; blocking non-essential cookies will not stop you from browsing or ordering.

• Essential. Cart, checkout, sign-in and region/currency preferences. These can't be switched off, as the site won't function correctly without them.
• Analytics — PostHog. We use PostHog to understand aggregate traffic and product usage (pages visited, features used) so we can improve the site.
• Marketing — Klaviyo. Klaviyo sets a first-party __kla_id cookie to recognise your browser. With Extended ID enabled, this identity cookie can persist indefinitely so we can recognise returning visitors. It is used to track anonymous on-site activity — such as pages and products viewed, and checkouts started — and, once you identify yourself (for example by signing up to our newsletter, checking out, or creating an account), that activity is associated with your profile so we can send relevant emails (such as abandoned-cart or back-in-stock messages).
• Marketing — Meta Pixel & Conversions API. We use Meta's Pixel (browser-side) and Conversions API (server-side) to measure the performance of our advertising and build audiences for future campaigns. This shares limited event data with Meta — such as page views, product views, and purchases — matched to your Meta account where possible.

Below are the third-party tools that process data on our behalf, what each is used for, and where the data goes.

• Klaviyo — email marketing and onsite behavioural tracking described above. Klaviyo is a US-based processor; your data is transferred to, and processed in, the United States.
• Meta (Pixel & Conversions API) — advertising measurement and targeting, described above. Meta is a US-based processor; event data shared with Meta is transferred to, and processed in, the United States.
• PostHog — product analytics used to understand and improve the site.
• Resend — sends transactional email only (order confirmations, shipping updates, account and security notices). Resend does not receive marketing data and is not used for advertising.

Where personal data leaves the UAE — including transfers to Klaviyo and Meta in the United States — we rely on those providers' standard contractual safeguards for international transfers, as permitted under the PDPL.

Consent & opt-out. Transactional email (Resend) is sent regardless, as it's necessary to fulfil your order. Marketing email and onsite tracking (Klaviyo, Meta, PostHog) rely on your consent or our legitimate interest in promoting our products; you can unsubscribe from marketing email at any time using the link in every message, and control cookies in your browser. You can also contact us at any time to access, correct, or delete the data we hold about you.

You have the right to access, correct, delete, and withdraw marketing consent for your personal data — contact us to exercise them.

We keep personal data only as long as needed and protect it with appropriate safeguards.

We handle personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

For privacy requests, contact us at privacy@theeclipsehouse.com.

This policy is written in plain language to describe our actual practices and is provided for information only — it is not legal advice. Before this policy governs live marketing activity, we recommend it be reviewed by a qualified lawyer familiar with the UAE PDPL (and, where relevant, Saudi Arabia's stricter PDPL) to confirm it meets all applicable requirements for your markets.