Privacy policy

Last updated: 23 August 2026

This Privacy Policy explains how AEA Mideast collects, uses, discloses and protects personal data when you visit www.aeamideast.com, communicate with us or purchase from us.

AEA Mideast is operated by AL QALAA INTERNATIONAL FOR DEVELOPMENT AND INVESTMENT L.L.C., a limited liability company established in Abu Dhabi, United Arab Emirates, under Commercial Licence No. CN-2436013 ("AEA Mideast", "we", "us" or "our"). For the personal data described in this Policy, we generally act as the controller unless stated otherwise.

1. Personal data we collect

Depending on how you interact with us, we may collect:

  • Identity and contact data: name, email address, telephone number, billing address, shipping address and account details.
  • Order and transaction data: products viewed or ordered, cart activity, order history, transaction records, delivery details, returns and support history.
  • Payment-related data: payment method, payment status and limited transaction details. Full payment credentials are generally processed by our payment providers rather than stored directly by us.
  • Eligibility and compliance data: age or identity confirmation, licence or permit information, delivery eligibility and records needed for fraud prevention, restricted-product checks or legal compliance.
  • Device and usage data: IP address, browser, device identifiers, operating system, pages viewed, referring links, session activity, cookie identifiers and approximate location derived from IP address.
  • Communications: emails, forms, reviews, survey responses, customer support messages and other information you send to us.
  • Marketing preferences: subscriptions, consent records and choices about promotional communications and cookies.

2. How we collect personal data

We collect personal data:

  • directly from you when you browse, create an account, place an order, subscribe or contact us;
  • automatically through cookies, pixels, logs and similar technologies;
  • from Shopify and service providers supporting payments, shipping, fraud prevention, analytics, advertising and customer service; and
  • from lawful public or regulatory sources where needed for compliance or verification.

3. How we use personal data

We may use personal data to:

  • provide, operate and improve the Site;
  • create and manage accounts;
  • process payments, orders, deliveries, returns and refunds;
  • confirm product eligibility and comply with import, export, safety or restricted-product requirements;
  • communicate about orders, accounts, support requests and policy updates;
  • detect, investigate and prevent fraud, abuse, security incidents and unlawful activity;
  • maintain business, tax, accounting, warranty and compliance records;
  • understand Site performance and customer preferences;
  • personalise content and advertising where permitted;
  • send marketing communications where you have consented or where otherwise permitted by law; and
  • establish, exercise or defend legal claims and comply with lawful requests from authorities.

We process personal data with your consent where required and, where permitted by law, when processing is necessary to perform a contract, comply with a legal obligation, protect public or individual interests, establish or defend legal rights, or pursue a legitimate business purpose that does not override your rights.

4. Shopify and other service providers

Our store is hosted on Shopify. Shopify processes information about visitors and customers to provide hosting, checkout, account, security and commerce services. Shopify may process data in countries outside the United Arab Emirates.

We may also share relevant personal data with service providers that help us operate, including:

  • payment processors and banks;
  • delivery, logistics, customs and fulfilment providers;
  • cloud hosting, security and fraud-prevention providers;
  • analytics, advertising and marketing providers;
  • customer support, email and communication providers;
  • accountants, auditors, insurers and professional advisers; and
  • government, customs, law-enforcement or regulatory authorities where required or permitted by law.

Providers are authorised to use personal data only as necessary for their services or as otherwise permitted by law. Their own privacy notices may also apply when they act independently.

We may disclose data in connection with a merger, financing, reorganisation, sale or transfer of all or part of our business, subject to appropriate confidentiality and legal safeguards.

We do not sell personal data for money. Some advertising or analytics activities may be treated as data sharing under laws applicable in certain jurisdictions; where required, we provide consent or opt-out choices.

5. Cookies and similar technologies

We and our providers use cookies and similar technologies to:

  • keep the Site and checkout functioning;
  • remember settings, cart contents and account sessions;
  • protect the Site and prevent fraud;
  • measure traffic and performance; and
  • support advertising and marketing, subject to applicable consent requirements.

You can manage cookies through the Site's consent tools, where available, and through your browser settings. Blocking necessary cookies may prevent parts of the Site from working correctly.

6. Marketing communications

We may send promotional emails or messages where you have consented or where permitted by law. You can unsubscribe using the link in a marketing email or by contacting us.

We may still send non-promotional communications relating to orders, security, accounts, legal notices or customer service.

7. International data transfers

Our providers, including Shopify, may process personal data outside the United Arab Emirates. Where personal data is transferred internationally, we take reasonable steps to use lawful transfer mechanisms and safeguards appropriate to the destination, service and sensitivity of the data.

8. Data retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including to complete transactions, provide support, maintain security, meet tax, accounting and regulatory requirements, resolve disputes and enforce agreements.

Retention periods vary according to the type of record, our relationship with you and applicable law. When data is no longer required, we delete, anonymise or securely isolate it, subject to lawful backup and recordkeeping requirements.

9. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. No internet transmission or storage system is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your account credentials and should contact us promptly if you believe your account or personal data has been compromised.

10. Your privacy rights

Subject to applicable law and relevant exceptions, you may have the right to:

  • obtain information about our processing of your personal data;
  • request access to or a copy of your personal data;
  • request transfer of your personal data where technically feasible;
  • correct inaccurate or incomplete personal data;
  • request deletion of personal data;
  • request restriction or cessation of certain processing;
  • object to certain automated processing or decisions;
  • withdraw consent at any time where processing is based on consent; and
  • complain to the competent data protection or consumer protection authority.

To exercise a right, email support@aeamideast.com. We may need to verify your identity and clarify your request. We will respond within the period required by applicable law. Rights may be limited where retaining or processing data is necessary for legal compliance, public interest, fraud prevention, legal claims or the rights of others.

11. Children's privacy

The Site is not directed to children, and regulated products must not be purchased by persons who do not meet the applicable legal age. We do not knowingly collect personal data from children except where lawfully provided by a parent or legal guardian for a permitted purpose.

If you believe a child has provided personal data unlawfully, contact us so we can investigate and take appropriate action.

12. Third-party links

The Site may link to websites or services that we do not control. Their privacy practices are governed by their own notices, and we encourage you to review them.

13. Changes to this Policy

We may update this Privacy Policy to reflect changes in law, technology, services or data practices. The updated version will be posted on the Site with a revised "Last updated" date. Where required, we will provide additional notice or request consent.

14. Contact us

For privacy questions, requests or complaints, contact:

AEA Mideast
Operated by AL QALAA INTERNATIONAL FOR DEVELOPMENT AND INVESTMENT L.L.C.
Commercial Licence No. CN-2436013
Abu Dhabi, United Arab Emirates
Email: support@aeamideast.com
Website: https://www.aeamideast.com