1. Who we are
This policy explains how RKD Bio Trading LLC, trading as Equine8 ("Equine8", "we", "us"), a company licensed in Dubai, United Arab Emirates, under licence number [LICENCE NUMBER], collects and uses personal data when you visit equine8.com, buy EQ8 products, contact us or report a product concern. Equine8 is the controller of that personal data. You can contact us about privacy at [PRIVACY EMAIL].
2. The personal data we collect
- Contact and account data: name, email address, telephone number, company name and role.
- Order data: delivery and billing address, products ordered, order history, invoices. Card payments are processed by our payment provider; we do not store full card numbers.
- Communications: messages, enquiries, call notes and feedback.
- Product safety reports: details you give us when reporting a product problem, skin reaction, eye contact or other incident, which may include information about your health or the health of another person.
- Technical data: IP address, device and browser type, pages viewed and how you use the website, collected through cookies as described in our Cookie Policy.
- Marketing preferences: whether you have agreed to receive marketing.
We collect this data directly from you, through your use of the website, and occasionally from distributors or stockists who pass on an order, complaint or safety report.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering orders, invoicing, handling returns | Performance of our contract with you |
| Answering enquiries and providing customer service | Performance of a contract, or our legitimate interest in responding |
| Recording and investigating product complaints and safety reports, and notifying regulators where required | Legal obligation and protection of vital interests; for health information, your explicit consent or as required by law |
| Product recalls and safety notices | Legal obligation and protection of vital interests |
| Sending marketing emails and messages | Your consent, which you can withdraw at any time |
| Website analytics and improvement | Your consent through the cookie banner |
| Keeping business and tax records, and preventing fraud | Legal obligation and legitimate interests |
4. Sharing your data
We share personal data only as needed with: our website host, email, analytics and payment providers; couriers; our filling and packing partner, manufacturer and distributors where needed to investigate a product concern or recall; professional advisers; and regulators, courts or authorities where the law requires. Our service providers act on our instructions under written agreements and must keep your data secure. We do not sell your personal data.
5. International transfers
Some providers may process data outside the UAE, including in the United Kingdom and other countries. We transfer data only where the destination provides an adequate level of protection, or with appropriate safeguards such as contractual protections, or where otherwise permitted by law.
6. How long we keep it
| Data | Retention |
|---|---|
| Orders, invoices and business records | As required by law, generally five years after the transaction |
| Product complaints and safety reports | At least the shelf life of the batch concerned plus five years, or longer if a claim is pending |
| Enquiries without an order | Two years from the last contact |
| Marketing preferences | Until you withdraw consent, plus a record of the withdrawal |
| Analytics data | As set out in the Cookie Policy |
7. Your rights
Subject to applicable law, you may ask us to give you access to your personal data; correct it; delete it; restrict or object to its processing; receive it in a portable format; and withdraw consent at any time without affecting earlier processing. To exercise a right, contact [PRIVACY EMAIL]. We will respond within the period required by law and may need to verify your identity. If you are not satisfied, you may complain to the UAE Data Office or the data protection authority where you live.
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and staff confidentiality obligations. If a breach is likely to affect your rights, we will notify you and the authorities as the law requires.
9. Children
Our website and online shop are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, please contact us and we will delete it.
10. Customers outside the UAE
If you are in Saudi Arabia or another GCC state, Japan or Hong Kong, local data protection laws also apply and give you the rights they provide. Additional country information is available on request and will be added to this policy: [LOCAL ADDENDA TO BE ADDED BY COUNSEL].
11. Changes
We may update this policy. The current version and its effective date will always be on our website, and we will notify you of significant changes.