Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account & order information: Name, email address, phone number, shipping and billing addresses, and order history when you place an order or create an account.
• Payment information: Credit/debit card details and billing information. Card payments are processed securely by Stripe — we do not store your full card number on our servers.
• Communications: Any information you provide when you contact us via email, the enquiry form, or other communication channels.
• Identity verification: For high-value transactions or where required by UAE anti-money laundering (AML) regulations, we may request government-issued identification documents.

1.2 Information Collected Automatically

• Device & browser data: IP address, browser type and version, operating system, device type, and screen resolution.
• Usage data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths through our Site.
• Cookies & similar technologies: We use essential cookies to maintain your session and shopping cart, and analytics cookies to understand how our Site is used. See Section 7 for details.

2. How We Use Your Information

We use the information we collect to:

• Process, fulfil, and manage your orders, including payment processing, shipping, and delivery notifications.
• Communicate with you about your orders, respond to enquiries, and provide customer support.
• Send transactional emails such as order confirmations, shipping updates, and receipts.
• Detect and prevent fraud, unauthorised transactions, and other illegal activities.
• Comply with legal obligations, including UAE anti-money laundering (AML) and know-your-customer (KYC) requirements for precious metals transactions.
• Improve our Site, products, and services through aggregated analytics and usage patterns.
• Send promotional communications about new products, special offers, or collections — only if you have opted in. You can unsubscribe at any time.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract performance: Processing necessary to fulfil your order and provide our services.
• Legal obligation: Processing required to comply with applicable laws, including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and AML regulations.
• Legitimate interest: Processing for fraud prevention, site security, and service improvement, where our interests do not override your rights.
• Consent: Processing based on your explicit consent, such as marketing communications. You may withdraw consent at any time.

4. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information. We may share your data with the following categories of recipients:

• Payment processors: Stripe processes card payments on our behalf under their own privacy policy and PCI-DSS compliance. Cryptocurrency payments are processed by our supported crypto gateway.
• Shipping & logistics partners: Courier services receive your name, address, and phone number to deliver your order.
• Email service providers: We use third-party email services to send transactional and, where opted in, marketing communications.
• Analytics providers: Aggregated, anonymised data may be shared with analytics tools to help us understand site usage.
• Legal & regulatory authorities: We may disclose personal information where required by law, court order, or government regulation, including AML/KYC obligations.
• Professional advisors: Lawyers, accountants, and auditors in connection with the operation of our business.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

• TLS/SSL encryption for all data transmitted between your browser and our servers.
• PCI-DSS compliant payment processing — we never store full card numbers on our systems.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Encrypted database storage for sensitive personal information.
• Regular security reviews and monitoring for unauthorised access.

While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes outlined in this policy, including:

• Order records: Retained for a minimum of 5 years after the transaction date, as required by UAE commercial and tax law.
• AML/KYC records: Retained for the period required by the UAE Central Bank and relevant regulatory authorities.
• Account information: Retained for as long as your account is active. You may request account deletion at any time, subject to legal retention requirements.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.

7. Cookies & Tracking Technologies

Our Site uses the following types of cookies:

• Essential cookies: Required for the Site to function — managing your shopping cart, maintaining your session, and processing checkout. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our Site through aggregated, anonymised data (e.g., pages visited, time on site). These can be declined.

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings. Disabling essential cookies may affect site functionality.

8. Your Rights

Under UAE data protection law and, where applicable, international privacy regulations, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, subject to legal retention obligations.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Data portability: Request your data in a structured, commonly used, machine-readable format.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
• Object: Object to processing based on legitimate interests, including direct marketing.

To exercise any of these rights, contact us at info@donaldcoins.com. We will respond within 30 days.

9. International Data Transfers

Your personal data may be processed by service providers located outside the UAE (e.g., payment processors, hosting providers). In such cases, we ensure that appropriate safeguards are in place, including contractual protections that meet the requirements of UAE data protection law.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a person under 18, we will take steps to delete that information promptly.

11. Third-Party Links

Our Site may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those external sites. We encourage you to review the privacy policies of any third-party site you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of the Site after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Donald Coins
Email: info@donaldcoins.com