Privacy Policy
Effective date: 22/10/2026.
Applies to: https://ralee.me (the “Website”).
This policy explains how we collect, use, share and protect your personal data when you use the Website, in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its executive regulations.
1. Who is responsible for your data
The controller of your personal data is Ralee LLC FZ, trading as Ralee Design House (“Ralee”, “we”, “us” or “our”), licensed in the United Arab Emirates under trade licence no. 2311648.01 issued by Meydan Freezone, with its address at M Floor, Business Center 1, Meydan Nad Al Sheba, Dubai, United Arab Emirates. Privacy contact: [email protected]
2. Personal data we collect
| Category | Examples | Source |
| Identity and contact | Name, email address, phone number, company name | You, when you register, order or contact us |
| Billing | Billing address, country, VAT or tax number, order history | You |
| Payment | Payment status, card brand and last four digits, payment token, transaction ID. Full card numbers and Apple Pay device numbers are handled by Stripe and Apple and are not seen or stored by us | Stripe |
| Account and usage | Login details, download history, wish list, reviews, support messages | You and the Website |
| Technical | IP address, browser and device type, pages viewed, cookie identifiers, fraud and security signals | Your device, cookies, Stripe |
| Marketing | Subscription choices, email engagement | You and the Website |
We do not knowingly collect sensitive personal data and ask you not to send it to us.
3. Why we use your data and our lawful grounds
| Purpose | Lawful ground under the PDPL |
| To process and deliver your order, provide downloads, support and refunds | Performance of the contract with you |
| To issue tax invoices, keep accounting and VAT records and respond to authorities | Compliance with legal obligations |
| To prevent fraud, secure the Website and enforce our terms | Our legitimate interests, where permitted by the PDPL, and protection of rights |
| To send marketing emails or WhatsApp messages, and to use marketing cookies such as Meta Pixel | Your consent, which you can withdraw at any time |
| To understand how the Website is used and improve it | Your consent for non-essential cookies; otherwise, our legitimate interests |
4. Payments
Card and Apple Pay payments are processed by Stripe, which acts as an independent payment provider and, for fraud prevention, may use its own tools such as Stripe Radar. Please read Stripe’s privacy policy at stripe.com/privacy. Apple Pay is provided by Apple under its own terms.
5. Marketing
We send marketing only with your consent. You can unsubscribe at any time using the link in each message or by contacting us. Withdrawing consent does not affect order-related messages that we must send.
6. Who we share data with
- Service providers acting on our behalf: Stripe (payments), website hosting, content delivery and security providers, email and invoicing tools, analytics and advertising providers.
- Professional advisers such as accountants, auditors and lawyers.
- Government and regulatory authorities, courts and law enforcement, where required by UAE law.
- A buyer or successor of our business, if the business is transferred, under the same protections.
We do not sell your personal data.
7. Transfers outside the UAE
Some providers (for example Stripe and advertising and analytics platforms) process data outside the UAE. We transfer personal data abroad only as permitted by the PDPL, to countries or recipients with adequate protection, or under contracts, your consent or another lawful basis, and with appropriate safeguards.
8. How long we keep data
| Data | Retention |
| Orders, invoices and tax records | At least 5 years, as required by UAE tax and commercial law |
| Account details and download history | While your account is active and for [12] months after, unless you ask us to delete it earlier and the law allows |
| Support messages | [2] years after the matter is closed |
| Marketing consent and subscriptions | Until you withdraw consent |
| Security and server logs | [12] months |
9. Security
We use technical and organisational measures appropriate to the risk, including HTTPS encryption, access controls, secure payment processing by Stripe and regular software updates. No online system is completely secure.
10. Data breaches
If a breach of personal data occurs that could prejudice your privacy or confidentiality, we will notify the UAE Data Office and, where required, you, in accordance with the PDPL and its executive regulations.
11. Your rights
Subject to the PDPL, you may ask us to: give you access to and a copy of your data; correct or complete it; erase it; restrict or object to processing; transfer it to you or another controller; and withdraw consent at any time. You may also object to decisions based solely on automated processing. To use a right, email [email protected]. We will respond within the period required by law and may ask you to verify your identity. Some data must be retained by law and cannot be erased.
12. Children
The Website is for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
13. Complaints
Please contact us first at [email protected]. You also have the right to complain to the UAE Data Office.
14. Changes
We may update this policy and will publish the new version on this page with its effective date. Where changes are significant, we will tell you.