Privacy policy

Privacy Policy

Last Updated: 15 August 2026

Nour Premium ("Nour Premium", "we", "us", or "our") operates this website and online store, including all related content, features, products, services and functionality (collectively, the "Services").

Nour Premium is a business established in the United Arab Emirates and operates as a sole establishment. Our Services are primarily directed toward customers in the United Arab Emirates and the Gulf and Arab markets. However, our website may be accessible from other countries and, where we accept an order from a customer located outside the UAE, this Privacy Policy applies to the processing of that customer's personal information.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and disclose it, how we protect it, how long we retain it, and the rights available to you.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy. Where applicable law requires your consent for a particular processing activity, we will obtain that consent separately.

1. Who We Are

The controller responsible for your personal information is:

Nour Premium
Legal form: Sole Establishment
Registered address: Cluster R, Jumeirah Lakes Towers (JLT), Dubai, United Arab Emirates
Phone: +971 58 554 8658
Email: contact@nour-premium.com

For purposes of applicable data protection legislation, Nour Premium acts as the data controller in relation to personal information processed through our Services, except where another party independently determines the purposes and means of processing its own data.

Our Services are hosted and technically supported by Shopify. Shopify may process personal information as an independent controller for certain purposes and as a processor or service provider on our behalf for other purposes, depending on the service involved.

2. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of personal information:

Contact and identification information

  • Full name

  • Email address

  • Telephone number

  • Billing address

  • Shipping or delivery address

  • Country and city

  • Other information you provide when contacting us

Order and transaction information

  • Products viewed, selected, added to cart or purchased

  • Order details

  • Returns, exchanges and cancellations

  • Transaction date and value

  • Delivery and fulfillment information

  • Payment status and transaction information

Payment information

Payments may be processed by third-party payment service providers. We may receive information such as payment confirmation, transaction reference, payment method and related transaction details.

We generally do not receive or store your complete payment-card number or payment-card security code where these are processed directly by our payment service provider.

Account information

If you create an account, we may process:

  • Account credentials

  • Preferences

  • Saved items or wishlist information

  • Other information associated with your account

Communications

We may collect information contained in communications you send to us, including customer-service enquiries, complaints, requests and correspondence.

Technical and device information

When you use our website, certain information may be collected automatically, including:

  • IP address

  • Browser type and version

  • Device type

  • Operating system

  • Network information

  • Approximate location derived from technical information

  • Unique online identifiers

  • Information concerning your interaction with our website

Usage information

We may collect information concerning how you use and navigate our website, including pages viewed, products viewed, interactions with website features and other usage information.

Information obtained from third parties

We may receive personal information from service providers, payment providers, delivery and fulfillment partners, advertising or analytics providers, social-media platforms, and other third parties where permitted by applicable law.

3. How We Collect Personal Information

We may collect personal information:

  • Directly from you when you place an order, create an account, contact us, subscribe to communications or otherwise use our Services;

  • Automatically through our website, cookies and similar technologies;

  • From Shopify and other technology or service providers;

  • From payment providers, delivery and fulfillment providers and other business partners;

  • From social-media or other third-party platforms when you interact with us through those platforms; and

  • From other lawful sources where permitted by applicable law.

4. How We Use Personal Information

We process personal information only for legitimate and lawful purposes and only to the extent reasonably necessary for those purposes.

Depending on your relationship with us, we may use personal information to:

Provide and operate our Services

  • Process and fulfill orders;

  • Process payments;

  • Arrange delivery;

  • Manage returns, exchanges and cancellations;

  • Provide customer support;

  • Create and administer customer accounts;

  • Remember preferences and saved items;

  • Provide requested products and services;

  • Maintain and improve our website and Services.

Communicate with you

We may use your contact information to:

  • Confirm and update orders;

  • Provide delivery or service notifications;

  • Respond to enquiries;

  • Handle complaints and requests;

  • Provide other transactional or service-related communications.

Marketing and advertising

Where permitted by applicable law and, where required, with your consent, we may use your personal information to send marketing communications, including information about products, collections, promotions and other Nour Premium activities.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the relevant communication or by contacting us.

Unsubscribing from marketing communications does not prevent us from sending essential non-marketing communications relating to orders, transactions, accounts, security or other services you have requested.

Where our website uses advertising, analytics, social-media or similar technologies that involve the processing of personal information for marketing or tracking purposes, we will use those technologies in accordance with applicable law and any consent requirements that apply.

Security and fraud prevention

We may process personal information to:

  • Authenticate users;

  • Detect and prevent fraud;

  • Protect our website and systems;

  • Investigate suspicious, unlawful or malicious activity;

  • Protect customers, our business and third parties.

Legal and regulatory purposes

We may process personal information where necessary to:

  • Comply with applicable laws and regulations;

  • Respond to lawful requests from government authorities or courts;

  • Establish, exercise or defend legal claims;

  • Enforce our Terms of Service and other policies;

  • Protect our legal rights and legitimate business interests.

5. Legal Bases for Processing

Depending on the applicable law and the circumstances, our lawful basis for processing personal information may include:

  • Performance of a contract: where processing is necessary to process and fulfill your order or provide a service you requested;

  • Legal obligation: where processing is necessary to comply with applicable legal, tax, accounting, consumer-protection or other legal requirements;

  • Consent: where applicable law requires or permits us to rely on your consent, including for certain marketing or non-essential cookies and similar technologies;

  • Legitimate interests: where permitted by applicable law and where our legitimate interests are not overridden by your rights and interests;

  • Protection of rights and security: where processing is necessary to protect our Services, customers, business or legal rights.

Under UAE law, personal data processing is subject to applicable lawful-processing requirements and protections under Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data ("UAE Personal Data Protection Law"). The UAE framework provides individuals with rights concerning their personal information and regulates matters including security and international transfers.

Where the GDPR applies to our processing, we will process personal data on an appropriate legal basis under Article 6 GDPR and, where applicable, Article 9 GDPR.

6. Cookies and Similar Technologies

Our website may use cookies, pixels, tags, local storage and similar technologies.

These technologies may be used for purposes including:

  • Essential website functionality;

  • Shopping-cart and checkout functionality;

  • Security;

  • Remembering preferences;

  • Analytics and website performance;

  • Understanding how visitors use our Services;

  • Marketing and advertising, where applicable.

Some cookies are necessary for the operation of the website and cannot be disabled through our cookie settings.

Where applicable law requires consent for non-essential cookies or similar technologies, we will request consent before activating those technologies.

You can also manage cookies through your browser settings and, where available, through our website's cookie-consent mechanism.

7. Disclosure of Personal Information

We may disclose personal information where reasonably necessary for the purposes described in this Privacy Policy.

Recipients may include:

  • Shopify, which provides our e-commerce platform and related technology;

  • Payment processors and payment service providers;

  • Delivery, courier and fulfillment providers;

  • Website hosting, IT and security providers;

  • Analytics providers;

  • Marketing and advertising service providers, where applicable;

  • Customer-support providers;

  • Professional advisers, including legal, accounting and financial advisers;

  • Government authorities, courts, regulators and law-enforcement bodies where legally required or permitted;

  • Other third parties where you have requested or authorized the disclosure; and

  • A purchaser, successor or other relevant party in connection with a business transfer, restructuring, merger, sale or similar transaction.

We require service providers processing personal information on our behalf to maintain appropriate safeguards and to process personal information only as permitted by applicable law and the relevant contractual arrangements.

8. Shopify

Our online store is powered by Shopify.

Shopify provides the technology through which we operate our online store and may process personal information relating to your use of our Services.

Certain processing performed by Shopify may be subject to Shopify's own privacy practices and policies. Shopify may also use information in connection with services that it provides to merchants and users.

For information concerning Shopify's own processing of personal information, please consult Shopify's current privacy documentation.

Shopify Privacy Policy

9. International Transfers

Because we use international technology, payment, delivery, analytics and other service providers, your personal information may be transferred to, stored in or processed in countries outside the United Arab Emirates and, where applicable, outside the European Economic Area or the United Kingdom.

Where applicable law regulates international transfers, we will use the safeguards required by that law.

For individuals protected by the GDPR, where personal data is transferred outside the EEA or UK to a country that does not benefit from an applicable adequacy decision, we will rely on an appropriate transfer mechanism or safeguard recognized by applicable law, such as Standard Contractual Clauses, where appropriate.

Under the UAE Personal Data Protection Law, cross-border transfers and sharing of personal information are subject to applicable legal requirements and safeguards.

10. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, loss, misuse or destruction.

These measures may include access controls, authentication, secure service providers, encryption or other security measures appropriate to the nature of the information and the risks involved.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

You should also take reasonable steps to protect your account credentials and should not share passwords or other authentication information with third parties.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Provide our Services;

  • Complete and document transactions;

  • Maintain appropriate business and accounting records;

  • Comply with legal and regulatory obligations;

  • Resolve disputes;

  • Establish, exercise or defend legal claims;

  • Prevent fraud and misuse; and

  • Enforce our agreements and policies.

The specific retention period depends on the nature of the information and the purpose for which it was collected.

Where a specific retention period is not required by law, we determine the appropriate retention period by considering the nature, amount and sensitivity of the information, the purposes for which it is processed, the potential risks of continued retention and applicable legal requirements.

When personal information is no longer required, we will delete, anonymize or securely dispose of it in accordance with applicable law.

12. Your Privacy Rights

Depending on where you live and which law applies to your personal information, you may have rights including:

  • The right to know whether we process your personal information;

  • The right to request access to personal information we hold about you;

  • The right to request correction of inaccurate or incomplete information;

  • The right to request deletion or erasure where applicable;

  • The right to request restriction or cessation of certain processing;

  • The right to object to certain processing;

  • The right to withdraw consent where processing is based on consent;

  • The right to data portability where applicable;

  • The right to object to certain direct marketing activities;

  • The right to request information concerning certain automated processing or decisions, where applicable; and

  • The right to lodge a complaint with the competent data-protection authority where applicable.

These rights are subject to the conditions, limitations and exceptions provided by applicable law.

The UAE Personal Data Protection Law provides individuals with rights including correction and deletion-related rights and rights concerning restriction or cessation of certain processing.

If the GDPR applies to you, you may also have the rights provided by the GDPR, including the rights of access, rectification, erasure, restriction, objection and portability in the circumstances established by the GDPR.

13. How to Exercise Your Rights

To exercise an applicable privacy right or to ask a question about our processing of your personal information, contact us:

Email: contact@nour-premium.com
Phone: +971 58 554 8658
Address: Cluster R, Jumeirah Lakes Towers (JLT), Dubai, United Arab Emirates

We may need to verify your identity before responding to certain requests in order to protect your personal information and prevent unauthorized access.

We will respond within the period required by applicable law.

If we cannot fulfill your request, we will explain the applicable reason where required by law.

14. European Economic Area and United Kingdom

Our business is established in the United Arab Emirates and our Services are primarily directed toward customers in the UAE and Gulf and Arab markets.

However, the GDPR may apply to particular processing activities where its territorial requirements are met, including where a business established outside the EU offers goods or services to individuals in the EU or monitors their behaviour in the EU.

Where the GDPR applies, we will respect the rights and obligations applicable to that processing.

If you are located in the EEA or UK and believe that your data-protection rights have not been respected, you may contact us first using the details above. You may also have the right to lodge a complaint with the competent data-protection supervisory authority in your country.

Because Nour Premium is not established in the European Union, an EU representative is required under Article 27 GDPR only where the conditions for that requirement are met and the applicable exemption does not apply. We will comply with any such requirement if and when it becomes applicable to our activities.

15. Children's Personal Information

Our Services are intended for adults and are not directed toward children.

We do not knowingly seek to collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information in circumstances where such collection was not permitted, please contact us at contact@nour-premium.com so that we can review the matter and take appropriate action.

UAE law includes specific protections concerning children's personal information, including restrictions concerning the collection or use of personal information of children under 13, subject to the conditions established by applicable law.

16. Third-Party Websites and Services

Our Services may contain links to websites, applications, social-media platforms or other services operated by third parties.

If you follow a link to a third-party service, that service's own privacy policy and terms will apply to its processing of your personal information.

Nour Premium is not responsible for the privacy, security or content practices of third-party services that we do not control.

17. Data Breaches and Security Incidents

If we become aware of a personal-data breach affecting your personal information, we will assess the incident and take the measures required by applicable law, including notification to competent authorities and/or affected individuals where legally required.

18. Complaints

If you have concerns about the way we process your personal information, please contact us first at:

contact@nour-premium.com

We will review and respond to your complaint in accordance with applicable law.

Where applicable law gives you the right to lodge a complaint with a competent data-protection authority, you may exercise that right independently of contacting us.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • Our Services;

  • Our business operations;

  • Technology and service providers;

  • Applicable laws and regulations; or

  • Our data-processing practices.

When we make changes, we will update the "Last Updated" date at the beginning of this Privacy Policy and provide additional notice where required by applicable law.

We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact:

Nour Premium
Cluster R, Jumeirah Lakes Towers (JLT)
Dubai, United Arab Emirates
Email: contact@nour-premium.com
Phone: +971 58 554 8658

For purposes of applicable data-protection legislation, Nour Premium is the controller of personal information processed through its Services, except where another party is independently responsible for its own processing.