Privacy Policy

Privacy Policy


Effective Date: July 10, 2025
Last Updated: July 10, 2025


Welcome to Moya. We respect your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, store, and share your information when you visit our website, make a purchase, or interact with us.


This policy complies with the UK Data Protection Act 2018, the UK General Data Protection Regulation (UK GDPR), and applicable United Arab Emirates data protection laws, including those under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).


By using our website, you agree to the practices described in this policy.

1. Information We Collect

a. Information You Provide to Us
We collect personal information you voluntarily provide when you:
 • Place an order
 • Subscribe to our newsletter
 • Fill out a contact form
 • Participate in surveys or promotions

This may include:
 • Full name
 • Email address
 • Shipping and billing addresses
 • Telephone number
 • Payment information (processed through secure third-party providers)
 • Any additional information you provide via forms or email


b. Information Collected Automatically
When you access our website, we may automatically collect:
 • IP address
 • Browser type and version
 • Operating system
 • Pages visited, time and date of visit
 • Referring URL
 • Device identifiers
 • Cookie and usage data

2. How We Use Your Information
We use your information for the following purposes:
 • To process and fulfill orders
 • To provide customer support
 • To send transactional and marketing communications (with consent)
 • To personalise user experience
 • To improve our website and services
 • To comply with legal and regulatory obligations


3. Marketing Communications
With your consent, we may send you promotional emails or newsletters. You may opt out at any time by clicking “unsubscribe” in any email or by contacting us at hello@lovemoya.com.


We will never send unsolicited marketing to users based in the UK or UAE without the appropriate legal basis for doing so.


4. Use of Cookies
We use cookies and similar tracking technologies to:
 • Improve site functionality
 • Analyse website usage
 • Remember user preferences
 • Facilitate shopping cart and checkout

You may disable cookies in your browser settings. Some parts of the website may not function properly without cookies.


5. Lawful Basis for Processing (UK and UAE Compliance)
Under UK GDPR and UAE PDPL, we rely on the following lawful bases to process your personal data:
 • Your consent
 • The performance of a contract with you
 • Compliance with a legal obligation
 • Legitimate interests (for analytics, fraud prevention, and business improvement)

6. Sharing of Information


We do not sell your personal data. We may share your data with:
 • Payment processors and logistics providers
 • IT service providers (e.g. email platforms, cloud hosting)
 • Marketing and analytics partners
 • Legal or regulatory authorities when required


All third parties are contractually obligated to protect your data and use it only for the agreed purposes.

7. Data Transfers Outside the UK or UAE


If we transfer personal data outside the UK or UAE, we ensure appropriate safeguards are in place, such as:
 • Standard Contractual Clauses (SCCs) approved by the UK ICO
 • Adequacy decisions or recognised transfer mechanisms under UAE PDPL


8. Your Rights


For Users in the UK
You have the right to:
 • Access your personal data
 • Rectify incorrect or incomplete data
 • Erase your data (“right to be forgotten”)
 • Restrict or object to processing
 • Data portability
 • Withdraw consent at any time


For Users in the UAE
You may:
 • Request access, correction, or deletion of your data
 • Object to or restrict processing in certain circumstances
 • File a complaint with the UAE Data Office if you believe your rights are violated


To exercise these rights, contact us at hello@lovemoya.com.

9. Data Security and Retention
We take appropriate security measures to protect your data, including:
 • SSL encryption
 • Secure server infrastructure
 • Access control and authentication protocols


We retain personal data only as long as necessary for the purposes set out in this policy, unless a longer retention period is required by law.


10. Children’s Privacy

Our website is not intended for children under 13. We do not knowingly collect data from children. If we become aware of such data, we will delete it immediately.


11. Changes to This Policy
We may update this Privacy Policy to reflect legal or operational changes. Any changes will be posted on this page with a revised “Effective Date.” We encourage you to review this policy regularly.

12. Contact Us

If you have any questions, requests, or concerns about this Privacy Policy or your personal data, please contact us:


Moya
Email: hello@lovemoya.com
Website: www.lovemoya.com