PRIVACY POLICY
Last Updated: August 1, 2025
1. INTRODUCTION
Tania's Teahouse ("we," "us," "our," or "Company") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with UAE Federal Decree-Law No. 45 of 2021 on Protection of Personal Data (PDPL) and other applicable laws.
2. DATA CONTROLLER INFORMATION
Data Controller: Tania's Teahouse
DED Trade License: No 791175
Address: Dubai Hills Estate Business Park 3, GF, Dubai, UAE
Contact for Data Protection Inquiries: info@taniateahouse.com
Phone: +971 4 282 4606
3. PERSONAL DATA WE COLLECT
3.1 Information You May Provide Directly:
Identity Data: Full name, date of birth (for promotional purposes), Contact Details: Email address, phone number, delivery address, Account Information: Username, password, preferences, Payment Information: Credit/debit card details, billing address, Dietary Requirements: Food allergies, special dietary needs, and Communication Records: Emails, phone calls, chat messages with sales and customer service.
3.2 Information We May Collect Automatically:
Technical Data: IP address, device information, browser typeUsage Data: Website navigation patterns, pages visited, time spent, Location Data: General location for delivery services (with consent), Cookies and Similar Technologies: As detailed in our Cookie Policy.
3.3 Information We May Collect From Third Parties:
Social media platforms (when you interact with our pages), Delivery partners and payment processors, and Marketing partners (with appropriate consents).
4. LEGAL BASIS FOR PROCESSING
We process your personal data based on the following legal grounds under UAE PDPL: 4.1 Consent: When you explicitly agree to data processing for specific purposes.
4.2 Contractual Necessity:
To fulfill our obligations in providing restaurant services.
4.3 Legitimate Interests:
For business operations, fraud prevention, and service improvement.
4.4 Legal Obligation:
To comply with UAE regulations including food safety and tax requirements.
5. HOW WE USE YOUR PERSONAL DATA
5.1 Service Provision:
Processing and fulfilling food orders, Managing reservations and table bookings, Providing sales and customer service, and Processing payments and managing accounts.
5.2 Communication:
Sending order confirmations and updates, Responding to inquiries and complaints, Providing important service notifications, and Marketing communications.
5.3 Business Operations:
Improving our services and menu offerings, Analyzing customer preferences and trends, Ensuring food safety and quality standards, and Maintaining business records and compliance.
6. COOKIES AND TRACKING TECHNOLOGIES
6.1 Types of Cookies
We Use: Essential Cookies: Necessary for website functionality, Performance Cookies: Help us understand website usage, Functional Cookies: Remember your preferences and settings, and Marketing Cookies: Used for targeted advertising.
6.2 Managing Cookies:
You can control cookies through your browser settings. However, disabling certain cookies may affect website functionality.
7. DATA SHARING AND DISCLOSURE
7.1 We May Share Your Data With Service Providers:
Payment processors, delivery partners, IT support, Business Partners: With explicit consent for joint promotions, Legal Authorities: When required by UAE law or court orders, and Group Companies: Within our corporate family (if applicable).
7.2 Data Protection Measures:
All third parties must comply with UAE data protection requirements and appropriate contractual safeguards.
8. INTERNATIONAL DATA TRANSFERS
If/When transferring personal data outside the UAE, we ensure: Adequate protection measures are in place, Appropriate safeguards comply with UAE PDPL requirements, Data subjects' rights are preserved, and Necessary approvals are obtained when required.
9. DATA RETENTION
9.1 Retention Periods:
Account Data: Retained while account is active plus 2 years, Transaction Records: 7 years for tax and accounting purposes, Marketing Data: Until consent is withdrawn, and Legal Records: As required by UAE law.
9.2 Secure Deletion:
We securely delete or anonymize personal data when retention is no longer necessary.
10. YOUR RIGHTS UNDER UAE PDPL
You have the following rights regarding your personal data:
10.1 Right of Access:
Request information about personal data we hold.
10.2 Right to Rectification:
Correct inaccurate or incomplete data.
10.3 Right to Erasure:
Request deletion of personal data (subject to legal obligations).
10.4 Right to Restrict Processing:
Limit how we use your data.
10.5 Right to Data Portability:
Receive your data in a structured format.
10.6 Right to Object:
Object to processing based on legitimate interests.
10.7 Right to Withdraw Consent:
Withdraw consent for specific processing activities.
11. DATA SECURITY MEASURES
11.1 Technical Safeguards:
Encryption of sensitive data in transit and at rest, Secure servers and network infrastructure, Regular security audits and vulnerability assessments, and Access controls and authentication systems.
11.2 Organizational Measures:
Staff training on data protection, Incident response procedures, Regular policy updates and compliance reviews, Third-party security assessments.
12. DATA BREACH NOTIFICATION
In the event of a personal data breach that poses risks to your rights and freedoms: We will notify relevant UAE authorities within 72 hours, Affected individuals will be informed without undue delay, and We will take immediate steps to contain and remedy the breach.
13. CHILDREN'S PRIVACY
Our services are not directed to individuals under 18. We do not knowingly collect personal data from children without parental consent. If we become aware of such collection, we will delete the data immediately.
14. MARKETING COMMUNICATIONS
14.1 Consent-Based Marketing:
We only send promotional communications with your explicit consent. You can: Unsubscribe using links in our emails, and Contact us directly to opt-out.
4.2 Compliance with UAE Telemarketing Laws:
All marketing communications comply with UAE consumer protection regulations and telecommunications guidelines.
15. THIRD-PARTY WEBSITES AND SERVICES
Our website may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
16. UPDATES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in: UAE data protection laws and regulations, Our business practices and services, Technology and security measures and Updated versions will be posted on our website with the revision date.
17. CONTACT US
17.1 Data Protection Inquiries:
Email: info@taniateahouse.com
Phone: +971 4 282 4606
Address: Dubai Hills Estate Business Park 3, GF, Dubai, UAE
17.2 Complaints and Concerns:
If you believe we have not handled your personal data appropriately, you may: Contact us directly using the information above, or File a complaint with UAE data protection authorities.
18. GOVERNING LAW
This Privacy Policy is governed by UAE Federal Decree-Law No. 45 of 2021 on Protection of Personal Data and other applicable UAE laws. Any disputes will be subject to the jurisdiction of UAE courts.
