Privacy Policy

Effective Date: October 13, 2025

1. Overview

At TORCH General Trading L.L.C, your privacy is our priority. We are committed to safeguarding your personal data in accordance with UAE Federal Decree Law No. 45 of 2021 (the Personal Data Protection Law or PDPL), along with other applicable UAE data protection regulations.
This Privacy Policy explains how we collect, use, disclose, store, and protect your information when you visit our Website, use our services, or make purchases from us.

2. Information We Collect

We collect only the information necessary to deliver our products and services effectively. This includes:

Personal Identification Data: name, phone number, shipping and billing addresses, and email address.
Payment Information: details processed securely via Tap Payments or Stripe in compliance with PCI DSS standards. We do not store or have direct access to your card information.
Device and Usage Data: IP address, browser type, operating system, device identifiers, access times, and browsing activity collected through cookies and similar tools.
Account Information: login credentials, purchase history, saved preferences, and communications with us.
Marketing & Communication Data: your preferences regarding promotional materials, newsletters, and surveys.

3. Purpose and Legal Basis for Processing

We process personal data only when permitted by law, under the following bases:

Contractual Necessity: to process and deliver orders, manage payments, and provide customer support.
Consent: for marketing emails, cookies requiring consent, and personalized promotions.
Legitimate Interests: to improve our products, analyze customer usage patterns, and ensure service security.
Legal Obligation: to comply with UAE regulations, such as tax, accounting, and anti-fraud requirements.

4. How We Collect Information

Your data is collected in several ways:

Directly from you: when you register an account, place an order, subscribe to our newsletter, or contact us.
Automatically: through cookies, analytics tools, and server logs that track website usage.
From third parties: such as payment gateways, logistics partners, or advertising networks when you engage with our online campaigns.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to improve website performance and user experience. Cookies help us:

Remember your preferences and login sessions.
Analyze traffic, identify popular content, and optimize navigation.
Deliver relevant advertising and promotional content (with your consent).

You can manage or disable cookies in your browser settings. Note that disabling essential cookies may limit certain website functionalities.

6. Data Sharing and Disclosure

We never sell or rent your personal data. Disclosure occurs only when necessary, including to:

Payment Processors: such as Tap Payments, for secure transaction handling.
Delivery and Logistics Partners: for accurate and timely order fulfillment.
IT and Cloud Service Providers: hosting, analytics, and customer support platforms that comply with PDPL and security standards.
Regulatory or Legal Authorities: when required by law, court order, or governmental request.

All third parties are contractually obligated to protect your information and process it only as instructed.

7. Cross-Border Data Transfers

If your data is transferred outside the UAE (e.g., to cloud servers or payment processors), we ensure appropriate safeguards such as:

Standard Contractual Clauses (SCCs) or equivalent agreements;
Transfers only to jurisdictions recognized by UAE authorities as having adequate data protection laws.

8. Data Retention

We retain personal data only as long as necessary to:

Fulfill the purposes outlined in this Policy;
Meet contractual, accounting, or legal obligations.

After the retention period expires, data is securely deleted or anonymized. For example, invoices and tax-related data may be retained for the legally required period.

9. Security Measures

We implement strict technical and organizational safeguards to prevent unauthorized access, disclosure, or misuse of your data. These include:

SSL encryption and secure hosting environments.
Firewalls and intrusion detection systems.
Restricted employee access on a need-to-know basis.
Periodic security audits and staff training on data protection practices.

In the unlikely event of a data breach, we will notify affected individuals and regulatory authorities as required under UAE law.

10. Marketing and Communication Preferences

You may receive promotional messages from us if you have opted in or previously made purchases. You can unsubscribe or opt out at any time using the link in our emails or by contacting us directly at info@torch.ae.

We will honor all opt-out requests in accordance with applicable regulations.

11. Your Rights Under UAE PDPL

Under UAE’s PDPL, you have the right to:

Access personal data we hold about you.
Rectify inaccuracies or update incomplete data.
Request Erasure (“right to be forgotten”) where applicable.
Restrict Processing of your data under specific conditions.
Data Portability – obtain your data in a machine-readable format.
Withdraw Consent at any time, without affecting the lawfulness of prior processing.
Object to Direct Marketing or automated decision-making.

Requests can be submitted to info@torch.ae, and we will respond within the timelines prescribed by UAE law.

12. Children’s Privacy

Our Website and services are not directed to individuals under 18 years of age. We do not knowingly collect or store personal data from minors. If we become aware of such collection, we will delete the information promptly.

13. Policy Updates

We may revise this Privacy Policy periodically to reflect new legal requirements or operational changes. Updated versions will include the new effective date, and material changes will be clearly communicated via our Website or email notifications.