Privacy Policy

1. Who controls your data

PICKOVIA FZ-LLC ("Pickovia", "we", "us") is the controller of the personal data described in this policy.

PICKOVIA FZ-LLC is a Free Zone Limited Liability Company (FZ-LLC) licensed by the Ras Al Khaimah Economic Zone Authority (RAKEZ), United Arab Emirates, under E-Commerce Licence No. 45038582 (business activity: E-Commerce Through Websites). Registered address: VUNE2879, Compass Building - Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Full company details are published on the Company Information page at /legal/company.

To contact us about your personal data, open a request through the Help Centre at /help/contact using the “Account” category, or use the Data Request page.

2. What we collect

• Account data — name, email address, phone number, password hash, country and currency preference.
• Order data — what you bought, what you paid, and a snapshot of the delivery address used.
• Address book — delivery addresses you choose to save.
• Content — reviews, questions, answers and support messages you write.
• Usage data — products viewed, searches run, and items saved to your wishlist.
• Technical data — session records including device type, approximate IP address and last-seen time.
• Cookie data — as described in the Cookie Policy, split into strictly necessary and optional categories.

3. Why we use it

• To take, fulfil and support your orders — this is necessary to perform our contract with you.
• To keep your account and our platform secure, and to detect fraud and abuse — our legitimate interest.
• To respond to support requests and handle returns, refunds and disputes.
• To improve the service, using aggregated analytics — only where you have allowed analytics cookies.
• To send marketing, where you have consented, and which you can withdraw at any time.
• To meet legal obligations such as retaining transaction and tax records.

4. Who we share it with

We do not sell your personal data.

• Sellers — the delivery details needed to fulfil your order, and nothing more.
• Carriers — the delivery address and contact details needed to deliver the parcel.
• Payment providers — the data needed to take payment. We never receive or store your full card number.
• Service providers — hosting, email and support tooling, bound by contract to process data only on our instructions.
• Authorities — where we are legally required to disclose.

5. International transfers

Pickovia operates across several markets, so your data may be processed outside your country.

6. How long we keep it

• Account data — for as long as your account is open, then deleted when you delete the account.
• Order and payment records — retained after account deletion where tax and accounting law requires it, detached from your account.
• Support conversations — retained while relevant to an open matter, then archived.
• Session records — expire automatically 30 days after sign-in.

7. Your rights

Start a request at /legal/data-request. We respond within 30 days.

• Access — request a copy of the personal data we hold about you.
• Rectification — correct anything inaccurate, mostly self-service under Account settings.
• Erasure — delete your account and the data attached to it, subject to records we must keep.
• Restriction and objection — ask us to limit or stop certain processing.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — change your cookie preferences or unsubscribe from marketing at any time.
• Complain — to your local data protection authority.

8. Security

Passwords are stored as salted hashes and never in plain text. Sessions use opaque random tokens, stored only as hashes, sent in httpOnly cookies.

No system is perfectly secure. If a breach affects your data and creates a risk to you, we will notify you and the relevant authority as the law requires.

9. Children

Pickovia is not intended for children. We do not knowingly collect data from anyone below the age of digital consent in their country. If you believe a child has given us data, contact us and we will delete it.