Privacy Policy

Privacy Policy

Last updated: 20/02/2026

This Privacy Policy explains how AROOM (“we,” “our,” or “us”) collects, uses, stores, and protects personal data when you access or use our website and online platform (the “Platform”).

We are committed to protecting your privacy in accordance with the UAE Personal Data Protection Law (PDPL) and applicable regulations.

1. Scope of This Policy

This Privacy Policy applies to:

  • Visitors to the AROOM website

  • Registered users and customers

  • Artists, collaborators, and contributors

  • Any individual whose personal data is processed through the Platform

By using the Platform, you consent to the practices described in this Policy.

2. Personal Data We Collect

We may collect the following categories of personal data:

a. Information You Provide Directly

  • Full name

  • Email address

  • Phone number

  • Billing and shipping address

  • Payment-related information (processed securely via third-party providers)

  • Artist profile information (if applicable)

  • Communications sent to us (emails, forms, messages)

b. Information Collected Automatically

  • IP address

  • Device and browser information

  • Usage data (pages visited, interactions)

  • Cookies and similar technologies

3. Purpose of Data Processing

We process personal data for the following purposes:

  • To provide and operate the Platform

  • To process purchases and payments

  • To deliver artworks and manage logistics

  • To communicate order updates and customer support

  • To curate, exhibit, and showcase artworks

  • To improve website functionality and user experience

  • To comply with legal and regulatory obligations under UAE law

4. Legal Basis for Processing (UAE PDPL)

We process personal data based on one or more of the following legal grounds:

  • Your explicit consent

  • Performance of a contract (e.g. processing an order)

  • Compliance with legal obligations

  • Legitimate interests, provided they do not override your rights

5. Sharing & Disclosure of Personal Data

We do not sell your personal data.

We may share data with:

  • Payment service providers

  • Shipping and logistics partners

  • IT and hosting service providers

  • Professional advisers (legal, accounting)

  • Government or regulatory authorities where required by UAE law

All third parties are required to maintain appropriate confidentiality and security measures.

6. International Data Transfers

Where personal data is transferred outside the UAE, AROOM ensures that:

  • Adequate data protection safeguards are in place

  • Transfers comply with UAE PDPL requirements

  • Data is protected through contractual and technical measures

7. Data Retention

We retain personal data only for as long as necessary to:

  • Fulfil the purposes outlined in this Policy

  • Comply with UAE legal, tax, and regulatory obligations

  • Resolve disputes and enforce agreements

When no longer required, data is securely deleted or anonymized.

8. Your Rights Under UAE Law

Subject to applicable laws, you have the right to:

  • Access your personal data

  • Request correction or update of inaccurate data

  • Request deletion of your data

  • Withdraw consent at any time (where processing is based on consent)

  • Object to certain types of processing

Requests can be made by contacting us using the details below.

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against:

  • Unauthorized access

  • Loss, misuse, or alteration

  • Disclosure or destruction

Despite these measures, no online platform can guarantee absolute security.

10. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Enable core website functionality

  • Analyze usage and improve performance

  • Enhance user experience

You may manage cookie preferences through your browser settings. Disabling cookies may affect certain features of the Platform.

11. Children’s Privacy

AROOM does not knowingly collect personal data from individuals under the age of 18.
If such data is identified, it will be deleted promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on the Platform with an updated “Last updated” date.

Continued use of the Platform constitutes acceptance of the revised Policy.

13. Contact Us

For privacy-related inquiries or to exercise your rights, please contact:

Email: hello@collectaroom.com