This Privacy Policy explains how Sky Pergola collects, uses, shares and protects the personal data of customers in the United Arab Emirates (UAE) when you place an order through skypergola.ae, contact us by phone, WhatsApp or email, visit our showroom, or take part in a personal consultation. We process personal data in accordance with the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021 (the PDPL), and its implementing regulations, under the oversight of the UAE Data Office.
1. Who is responsible for your data (the controller)
The entity responsible for deciding how and why your personal data is processed (the data controller) is:
- Spa Solutions GmbH
- Althau 1, 5303 Würenlingen, Switzerland
- Commercial register (Switzerland): CHE-228.056.190
- Managing owner: Dylan Ayer
Sky Pergola is operated for the UAE market by the above company, which is the current contracting party and the entity legally responsible for your order. A local UAE establishment is in formation; once our UAE registration is complete, the UAE entity name and trade-licence number will be shown here and will assume the controller role. For all data-protection matters you can reach us using the UAE customer contact details in Section 12.
2. What personal data we collect
We collect only the personal data we need to deal with you and to perform your order. Depending on how you interact with us, this may include:
- Identity and contact details: your name, delivery and billing address, email address and phone number.
- Order and project details: the products you have configured, ordered or enquired about, site details relevant to delivery and installation, and your correspondence with us.
- Payment-related data: the amount, status and reference of your payment. Card details are handled directly by our payment provider; we do not store full card numbers.
- Technical and usage data: information collected automatically when you browse skypergola.ae, such as device, browser and basic analytics data, used to operate and improve the store.
We do not deliberately collect special categories of personal data, and you should not send us such data unless it is necessary for your order.
3. Why we process your data and our lawful basis
Under the PDPL we may only process your personal data where we have a valid lawful basis. We rely on the following:
- Performance of a contract: to process and confirm your order, take payment, arrange delivery and installation, provide after-sales support, and meet warranty and service obligations. This is necessary to perform the contract you enter into with us.
- Compliance with legal obligations: to issue tax invoices and credit notes, keep accounting and tax records, and comply with applicable UAE law.
- Your consent: for marketing communications and any non-essential analytics. Consent is given separately, is optional, and can be withdrawn at any time (see Sections 6 and 8).
- Our legitimate business interests: to secure our website, prevent fraud and misuse, and improve our products and service, where this does not override your rights.
4. Who we share your data with (processors)
We share your personal data only with service providers who process it on our behalf and on our instructions, and only to the extent necessary. These processors are bound by contract to keep your data confidential and secure and to use it solely for the agreed purpose. They include:
- E-commerce platform: Shopify, which hosts and operates our online store.
- Payment providers: who securely process your payment and any refunds.
- Shipping and freight forwarders: who deliver your order; we share only the name, address and contact details needed for delivery.
- Installation partners: who carry out on-site assembly where installation has been agreed.
- Analytics and communication tools: used to operate the website and, where you have consented, to understand usage and contact you.
We do not sell your personal data. We may also disclose data where required by law or a competent UAE authority.
5. International transfer of your data
Because our controlling company and parts of our infrastructure are located outside the UAE, your personal data is transferred to and stored in Switzerland and the European Union, and is processed by Shopify and other providers that may store data outside the UAE. We disclose this openly. These cross-border transfers are made in reliance on the conditions in Articles 22 and 23 of the PDPL, namely that the transfer is necessary to perform the contract with you, that you have given your express consent where required, and that we put in place appropriate contractual safeguards (such as data-processing agreements and standard contractual clauses) to protect your data to a level consistent with the PDPL. We do not claim that any destination country appears on a UAE adequacy list, as no such list has been published. If you would like more detail about the safeguards we use, please contact us using the details in Section 12.
6. Marketing communications
We will only send you newsletters and information about our own products and offers by email and/or post if you have given your separate, specific opt-in consent. This marketing consent is voluntary and is not a condition of buying from us. You can withdraw it at any time, with effect for the future, by using the unsubscribe link in any email or by contacting us using the details in Section 12. Withdrawing consent does not affect the lawfulness of any marketing carried out before your withdrawal, and we may still send you service messages relating to your order.
7. Your rights under the PDPL
As a data subject under the PDPL you have the following rights, which you can exercise free of charge:
- To be informed and to access: to be told how we process your data and to obtain a copy of the personal data we hold about you.
- To rectification: to have inaccurate or incomplete data corrected.
- To erasure: to have your data deleted where it is no longer needed or where processing was based on consent you have withdrawn, subject to our legal retention obligations.
- To restriction: to ask us to limit the processing of your data in certain circumstances.
- To object: to object to processing, including direct marketing.
- To data portability: to receive certain data in a structured, commonly used, machine-readable format and, where feasible, have it transmitted to another controller.
- In relation to automated decisions: to object to decisions based solely on automated processing that produce legal or similarly significant effects on you. We do not currently make such automated decisions about UAE customers.
To exercise any of these rights, please contact us using the details in Section 12. We will respond within the period required by the PDPL and may need to verify your identity first. If you are not satisfied with how we handle your request, you have the right to lodge a complaint with the UAE Data Office.
8. Withdrawing your consent
Wherever we rely on your consent (for example for marketing or non-essential analytics), you can withdraw that consent at any time, as easily as you gave it, by contacting us or using the relevant opt-out controls. Once you withdraw consent we will stop the related processing, unless we have another lawful basis to continue. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
9. Data security
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss or misuse. These measures include encryption of data in transit, access controls and authentication, and limiting access to staff and processors who need the data to do their work. Our processors are likewise contractually required to maintain appropriate security.
10. Personal data breaches
If a personal data breach occurs that is likely to affect your privacy or the confidentiality, integrity or security of your data, we will notify the UAE Data Office, and we will inform you directly, in the manner and within the timeframes required by the PDPL and its regulations.
11. How long we keep your data
We keep your personal data only for as long as it is needed for the purposes set out in this policy, including completing your order, providing installation and after-sales service, honouring the warranty periods on your product (up to 10 years on the aluminium construction, 4 years on moving parts and 2 years on electrical components), and meeting accounting, tax and other legal record-keeping requirements under UAE law. When data is no longer needed, we securely delete or anonymise it.
12. How to contact us and exercise your rights
For any questions about this Privacy Policy, to exercise your rights, or to raise a data-protection concern, please contact us:
- Phone / WhatsApp: +41 77 281 64 06
- Email: info@skypergola.ae
Controller details: Spa Solutions GmbH, Althau 1, 5303 Würenlingen, Switzerland (Swiss commercial register CHE-228.056.190), managing owner Dylan Ayer. Once our UAE registration is complete, the UAE entity name, trade-licence number and Tax Registration Number (TRN) will be added here. An Arabic version of this notice is available on request. If your concern is not resolved, you may contact the UAE Data Office, and for consumer matters the UAE Ministry of Economy (consumer hotline 600-522-225, consumerrights.gov.ae) or the Dubai Department of Economy and Tourism (DET).