Get the Star Gallery Mart App
Faster. Smoother. Better.

Privacy Policy

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.

Privacy Policy

This Privacy Policy explains how Star Gallery Mart ("Star Gallery Mart", "we", "us" or "our") collects, uses, discloses, stores and protects personal data when you use stargallery.ae, our mobile application, visit our physical store, make a purchase, contact customer support or otherwise interact with us.

We process personal data in accordance with applicable laws in the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data, where applicable.

This Policy is a privacy notice and does not replace any consent that the law requires us to obtain separately.

1. Who We Are

Star Gallery Mart is the controller of the personal data described in this Policy unless another party is identified as the controller at the point of collection.

2. Scope

This Policy applies to personal data collected through:
  • our website and customer accounts;
  • our mobile application;
  • purchases and enquiries made in our physical store;
  • online, card, instalment and cash transactions;
  • delivery, warranty, repair, return and customer-support services;
  • email, telephone, chat, SMS and social-media communications;
  • promotions, surveys, reviews and marketing campaigns; and
  • cookies, analytics and similar technologies used on our digital services.
It does not apply to employee or job-applicant data governed by a separate notice, or to third-party websites and services operating under their own privacy policies.

3. Personal Data We Collect

Depending on how you interact with us, we may collect:
  • 3.1 Identity and contact data: Name, email address, telephone number, billing and delivery addresses, account identifier and communication preferences.
  • 3.2 Account and authentication data: Login details, encrypted password credentials, saved addresses, wish lists, account settings and purchase history.
  • 3.3 Order and transaction data: Products ordered, quantities, prices, invoices, payment status, delivery information, returns, warranty claims, repairs and customer-service records.
  • 3.4 Payment data:
    • Card payments: card details are processed by the relevant payment gateway or financial institution. We generally receive transaction references, payment status and limited card information, such as card type or the last digits, rather than the full card number or security code.
    • Tabby and Tamara: if you select an instalment or buy-now-pay-later service, the selected provider collects and processes information under its own privacy policy and may conduct identity, eligibility, credit or fraud checks. We receive information needed to confirm and manage the order and payment status.
    • Cash payments: we record the amount, payment status, receipt and related order information. Cash payment does not require us to collect card details.
  • 3.5 Store and support data: Information you provide in-store or to customer support, including enquiries, complaints, call or chat records, proof of purchase and product-service history. Where CCTV is installed, images may be collected for safety, security and loss prevention, subject to appropriate notices.
  • 3.6 Device, application and usage data: IP address, device and browser type, operating system, app version, device identifiers, notification token, login and access times, pages or products viewed, search activity, clicks, diagnostic logs, crash reports and security events. We collect precise location, contacts, camera, photos or similar device data only if the relevant app feature requires it and you grant the requested device permission.
  • 3.7 Marketing and preference data: Marketing choices, campaign interactions, survey responses, reviews, product interests and communication preferences.
We do not intentionally collect sensitive personal data unless it is necessary for a specific lawful purpose and appropriate safeguards are applied.

4. How We Collect Personal Data

We collect personal data:
  • directly from you when you register, purchase, visit our store, submit a form or contact us;
  • automatically through the website, app, cookies, logs and similar technologies;
  • from payment processors, Tabby, Tamara, delivery partners and other providers involved in your transaction;
  • from social-media platforms when you interact with our official accounts, subject to your settings and the platform's policies; and
  • from lawful public or fraud-prevention sources where reasonably necessary.

5. Why We Use Personal Data

We use personal data only where we have an appropriate legal basis under applicable law, including consent, performance of a contract, compliance with a legal obligation, protection of rights and security, or another basis permitted by law. We may use personal data to:
  • create and manage customer accounts;
  • process payments, confirm orders and issue receipts or invoices;
  • arrange delivery, collection, returns, repairs and warranty service;
  • provide customer support and respond to enquiries or complaints;
  • authenticate users and protect accounts, transactions and our services;
  • prevent and investigate fraud, misuse, theft and security incidents;
  • operate, maintain, troubleshoot and improve our website, app and store services;
  • measure service performance and understand customer use;
  • personalize content or product recommendations where permitted;
  • send marketing communications where consent or another lawful basis applies;
  • maintain business, tax, accounting and legal records;
  • establish, exercise or defend legal claims; and
  • comply with lawful requests and applicable legal obligations.
If we intend to use personal data for a materially different purpose, we will provide appropriate information and obtain consent where required.

6. Cookies and Similar Technologies

Our website and app may use:
  • strictly necessary technologies for security, login, shopping-cart and checkout functions;
  • preference technologies to remember language and account settings;
  • analytics technologies to understand performance and usage; and
  • advertising technologies to measure campaigns and show relevant promotions.
Where required, non-essential cookies or similar technologies will be used only after you make a choice through our consent tool. You can change your choices through the cookie settings link, app settings or browser controls. Blocking necessary technologies may affect essential functions.

7. Marketing Communications

We may send marketing by email, SMS, push notification or another channel when you have consented or where otherwise permitted by law. You can opt out at any time by using the unsubscribe option, changing your account or app preferences, or contacting us. Opting out of marketing does not stop operational messages about orders, payments, deliveries, security or customer service.

8. When We Share Personal Data

We may share only the personal data reasonably necessary with:
  • card payment processors, banks and financial institutions;
  • Tabby and Tamara when you select their services;
  • delivery, courier, installation, repair and warranty partners;
  • website, app, cloud-hosting, communications, analytics and cybersecurity providers;
  • professional advisers, auditors, insurers and fraud-prevention providers;
  • government, regulatory, judicial or law-enforcement bodies where required or permitted by law; and
  • a buyer, investor or successor in connection with a genuine corporate transaction, subject to appropriate safeguards.
These recipients may act as our processors or as independent controllers under their own privacy notices. We do not sell personal data for monetary consideration.

9. International Transfers

Some service providers may process personal data outside the UAE. Where this occurs, we use safeguards required by applicable law, which may include transfers to jurisdictions recognized as providing adequate protection, contractual protections, consent where appropriate, or another lawful transfer mechanism.

10. Retention

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, accounting, tax, warranty, dispute-resolution and security requirements. Retention periods vary according to the type of record, the relationship with you, applicable limitation periods and legal obligations. When data is no longer required, we delete it, anonymize it or securely restrict its use. Backup copies may remain for a limited period until overwritten or securely deleted.

11. Security

We apply reasonable technical and organizational measures appropriate to the nature of the data and the risks involved. These may include access controls, authentication, encryption in transit where appropriate, logging, backups, staff confidentiality requirements and provider due diligence.

No system is completely secure. You should use a strong, unique password, protect your account credentials and notify us promptly if you suspect unauthorized account activity.

If a personal-data breach occurs, we will assess it and notify the relevant authority and affected individuals when required by applicable law.

12. Your Rights and Choices

Subject to applicable law and any lawful limitations, you may have the right to:
  • obtain information about our processing and request access to your personal data;
  • request correction or completion of inaccurate data;
  • request deletion where the legal conditions are met;
  • request restriction or cessation of certain processing;
  • withdraw consent at any time, without affecting processing already carried out lawfully;
  • object to direct marketing;
  • receive certain data in a structured, commonly used and machine-readable format and request transfer where technically feasible;
  • object to certain decisions based solely on automated processing and request human review where applicable; and
  • submit a complaint to the competent UAE data-protection authority.
To submit a request, contact us using the details in Section 17. We may need to verify your identity. We will respond within the period required by applicable law and may retain records needed to document and lawfully handle the request.

13. Automated Processing

We may use limited automated tools for fraud detection, payment screening, product recommendations and service personalization. Tabby, Tamara and payment providers may independently use automated checks under their own policies. Where a decision made solely by automated processing has legal or similarly significant effects, applicable rights and safeguards will be provided.

14. Children's Privacy

Our services are intended for adults and are not directed to children. We do not knowingly collect personal data from a child without the authorization required by applicable law. A parent or legal guardian who believes a child has provided personal data should contact us.

15. Third-Party Services and Links

Our services may link to or integrate with third-party websites, applications and services. Those parties control their own processing and privacy practices. You should review their privacy notices before providing information to them.

16. Changes to This Policy

We may update this Policy to reflect changes in our practices, services or legal obligations. The revised version will be posted on our website. Where a change materially affects your rights or how we use personal data, we will provide additional notice where appropriate.

17. Contact Us

For privacy questions, requests or complaints, contact: Our Data Protection Officer (DPO) handles privacy, data-protection and data-rights enquiries through the contact details above.
Fast Shipping
Shipping Methods
Secure Transaction
24/7 Support
Logo
Follow us for exclusive deals
Shopping Anytime, Anywhere!