Part A — Privacy Policy
Introduction
Devrimone Services - FZCO (“Devrimone”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the personal data of visitors to and users of www.devrimone.com and any related mobile applications, products, or services (collectively, the “Platform”).
This Privacy Policy explains what personal data we collect, why we collect it, how we use, share, store, and protect it, and the rights available to you under the laws of the United Arab Emirates (“UAE”), principally Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its implementing regulations, as may be issued and amended from time to time.
By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Privacy Policy, please discontinue use of the Platform.
Who We Are — Data Controller
Company: Devrimone Services - FZCO
Registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Contact and data protection email: support@devrimone.com
Devrimone acts as the “Data Controller” for the personal data collected through the Platform, unless expressly stated otherwise.
Scope
This Privacy Policy applies to personal data we collect through:
- The Platform, including any websites, sub-domains, and mobile applications operated by Devrimone;
- Communications with us, including via email, phone, live chat, or social media; and
- Offline interactions that are linked to your use of the Platform, such as customer support or events.
This Policy does not apply to third-party websites, applications, or services that may be linked from the Platform. We encourage you to review the privacy policies of any third-party sites you visit.
Personal Data We Collect
We may collect the following categories of personal data, depending on how you interact with the Platform:
- Identity and Contact Data: full name, email address, phone number, mailing or billing address, date of birth, and government-issued identification where required for verification or legal compliance.
- Account Data: username, encrypted password, account preferences, and purchase or order history.
- Financial Data: payment card details, bank account information, and billing details, processed through Payment Card Industry Data Security Standard (PCI-DSS) compliant, UAE Central Bank-licensed payment service providers.
- Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and location data derived from IP address.
- Usage Data: pages visited, time spent on the Platform, click-stream data, referral source, and interaction with content or advertisements.
- Marketing and Communications Data: your preferences in receiving marketing from us and your communication preferences.
- Cookie and Tracking Data: as described in the Cookie Policy in Part B.
- Special Categories of Data: we do not intentionally collect sensitive personal data, such as health, religion, or biometric data, unless you voluntarily provide it or it is strictly necessary for a specific service. In that case, we will seek your explicit consent as required under the PDPL.
How We Collect Your Data
- Directly from you, when you register an account, place an order, subscribe to a newsletter, contact customer support, or otherwise submit information through the Platform;
- Automatically, through cookies, pixels, and similar tracking technologies as you navigate the Platform (see Part B — Cookie Policy);
- From third parties, such as payment processors, identity verification providers, marketing partners, analytics providers, and publicly available sources, where permitted by law.
Purposes and Legal Basis for Processing
Under the PDPL, we process your personal data only where we have a valid legal basis, which may include your consent, the necessity of processing to perform a contract with you, compliance with a legal obligation, or our legitimate interest balanced against your rights and freedoms.
| Purpose | Legal basis | Data categories used |
|---|---|---|
| Create and manage your account | Performance of a contract | Identity and Contact Data; Account Data |
| Process orders, payments, and deliveries | Performance of a contract; legal obligation | Identity, Financial, and Contact Data |
| Provide customer support | Performance of a contract; legitimate interest | Identity, Contact, and Account Data |
| Send transactional communications | Performance of a contract | Contact and Account Data |
| Send marketing communications | Consent | Contact Data; Marketing Preferences |
| Personalize content and improve the Platform | Consent for cookies; legitimate interest | Usage, Technical, and Cookie Data |
| Detect, prevent, and investigate fraud or security incidents | Legal obligation; legitimate interest | Technical, Financial, and Identity Data |
| Comply with UAE legal, regulatory, and tax obligations | Legal obligation | Identity and Financial Data |
| Respond to lawful requests from UAE authorities | Legal obligation | As required by the specific request |
International Transfers of Personal Data
Where we transfer personal data outside the UAE, for example to cloud service providers or affiliates located abroad, we will ensure the destination country provides an adequate level of protection as recognised by the UAE Data Office, or rely on appropriate safeguards such as standard contractual clauses, binding corporate rules, explicit consent, or another mechanism recognised under the PDPL. Contact us at support@devrimone.com for information on safeguards applied to a specific transfer.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including to satisfy legal, accounting, or reporting requirements under UAE law. For example, financial records are generally retained for a minimum period of five years as required by UAE commercial and tax legislation. Where personal data is no longer required, we will securely delete, anonymize, or aggregate it.
Data Security
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including encryption of sensitive data in transit and at rest, access controls, staff confidentiality obligations, and regular security assessments. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the UAE Data Office and affected individuals without undue delay, within 48 hours of becoming aware of the breach, and in accordance with any timelines prescribed once the PDPL executive regulations are formally issued.
Your Rights Under the PDPL
Subject to applicable exceptions under UAE law, you have the following rights in respect of your personal data:
- Right to be informed: receive clear information about how your data is processed;
- Right of access: request confirmation of, and access to, the personal data we hold about you;
- Right to rectification: request correction of inaccurate or incomplete personal data;
- Right to erasure: request deletion of your personal data in certain circumstances;
- Right to restrict processing: request that we limit how we use your personal data in certain circumstances;
- Right to data portability: receive certain personal data in a structured, commonly used, machine-readable format;
- Right to object: object to processing based on legitimate interests or for direct marketing purposes;
- Right to withdraw consent: withdraw consent at any time without affecting prior lawful processing;
- Right to non-discrimination: not be discriminated against for exercising data protection rights;
- Right to lodge a complaint: with the UAE Data Office or relevant free zone data protection authority.
To exercise any of these rights, contact us at support@devrimone.com. We will respond within the timeframe prescribed by applicable law and may request proof of identity to protect your data from unauthorized access.
Marketing Communications
Where you have provided consent, we may send you marketing communications about products, services, offers, and promotions relevant to you. You may withdraw your consent and opt out at any time by using the “unsubscribe” link in a marketing email, adjusting your account preferences, or contacting us at support@devrimone.com.
Children’s Privacy
The Platform is not directed at children under 18, and we do not knowingly collect personal data from children without appropriate parental or guardian consent. Where the Platform offers features intended for use by minors, we implement age-verification and parental consent mechanisms consistent with Federal Decree-Law No. 26 of 2025 on Child Digital Safety and refrain from behavioural advertising directed at children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete it promptly.
Third-Party Links
The Platform may contain links to third-party websites or services that are not owned or controlled by Devrimone. We are not responsible for the privacy practices of such third parties, and we encourage you to review their privacy policies before providing personal data.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The updated version will be indicated by a revised “Last Updated” date and will take effect as soon as it is published on the Platform. We encourage you to review this Policy periodically. Where required by law, we will notify you of material changes and, where applicable, seek renewed consent.
Governing Law and Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of the United Arab Emirates, including the PDPL, without regard to its conflict-of-laws principles. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of Dubai, UAE.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please contact:
Data protection contact: Devrimone Services - FZCO
Email: support@devrimone.com
Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Part B — Cookie Policy
Do Not Track Signals
Some browsers offer a “Do Not Track” (“DNT”) feature. As there is currently no uniform standard for recognising DNT signals, the Platform may not respond to DNT signals. You can instead manage your cookie preferences using the tools described above.
