1.1 Information You Provide Directly

• Full name and title
• Email address and telephone number (including WhatsApp)
• Delivery address and billing address
• Payment information (processed securely via third-party payment gateways — we do not store card details on our servers)
• Prescription or therapy-related information where voluntarily provided (e.g. CPAP pressure settings prescribed by your physician)
• Communications you send us via email, contact forms, live chat, or support tickets
• Feedback, reviews, or survey responses

1.2 Information Collected Automatically

• IP address and device identifiers
• Browser type, operating system, and language preferences
• Pages visited, time spent on pages, links clicked, and referring URLs
• Shopping cart activity and purchase history
• Cookie data and similar tracking technologies (see Section 5)

1.3 Information from Third Parties

• Data from payment processors confirming transaction status
• Analytics data from providers such as Google Analytics
• Information from advertising platforms where you have interacted with our advertisements

2.1 Contractual Necessity

Processing is necessary to fulfil your order, arrange delivery, process payment, and provide after-sales support.

2.2 Legitimate Interests

We process certain data for our legitimate business interests, including improving our Website, preventing fraud, and communicating relevant product updates, provided such interests are not overridden by your rights.

2.3 Consent

Where we rely on your consent (e.g. for marketing emails or non-essential cookies), you have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

2.4 Legal Obligation

We may process or retain data where required by UAE law, including tax, accounting, or regulatory obligations.

3.1 Order Processing

To receive, confirm, process, and fulfil your orders and arrange delivery of Equipment to your nominated address.

3.2 Customer Support

To respond to your enquiries, troubleshoot issues, process warranty and returns requests, and provide after-sales assistance.

3.3 Account Management

To create and maintain your customer account on our Website, where applicable.

3.4 Marketing Communications

To send you promotional emails, product updates, offers, or newsletters where you have provided consent or where permitted under applicable law. You may opt out at any time (see Section 9).

3.5 Website Improvement

To analyse how visitors use our Website, identify technical issues, and improve functionality, design, and user experience.

3.6 Fraud Prevention & Security

To detect, investigate, and prevent fraudulent transactions, unauthorised access, and other illegal activity.

3.7 Legal Compliance

To comply with applicable UAE laws and regulations, respond to lawful requests from competent authorities, and enforce our Terms and Conditions.

3.8 Reviews & Feedback

To invite you to leave a product review or complete a customer satisfaction survey. Participation is always voluntary.

4.1 Retention Periods

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable UAE law. Typically, transaction and order records are retained for a minimum of five (5) years in compliance with UAE commercial and tax regulations.

4.2 Marketing Data

Where you have provided consent for marketing communications, we will retain your contact details until you withdraw consent or unsubscribe.

4.3 Deletion & Anonymisation

Upon expiry of the relevant retention period, your personal data will be securely deleted or anonymised in accordance with our internal data retention procedures.

5.1 Use of Cookies

Our Website uses cookies and similar technologies (including web beacons and pixel tags) to enhance your browsing experience, remember your preferences, and collect analytics data.

5.2 Types of Cookies We Use

• Essential Cookies — Required for the Website to function correctly, including shopping cart functionality and secure login sessions
• Analytical / Performance Cookies — Used to collect anonymised data about how visitors interact with our Website (e.g. Google Analytics)
• Functional Cookies — Used to remember your preferences such as language, currency, and region settings
• Marketing / Targeting Cookies — Used to deliver relevant advertisements based on your browsing behaviour, including via Google Ads and social media platforms

5.3 Managing Cookies

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Website, including the ability to complete purchases.

5.4 Do Not Track

We honour Do Not Track (DNT) signals transmitted by your browser. When DNT is enabled, we will not plant non-essential tracking cookies during your session.

6.1 No Sale of Data

We do not sell, trade, or rent your personal information to any third party.

6.2 Trusted Service Providers

We may share your personal data with trusted third-party service providers who assist us in operating our Website, processing orders, and delivering services. These parties are contractually obligated to keep your data confidential and to use it only for the specific purpose for which it was shared. Such third parties may include:

• Payment gateway providers (for secure transaction processing)
• Delivery and courier partners (for order fulfilment)
• IT service providers and hosting partners (for Website operations and data storage)
• Email and marketing communication platforms
• Analytics providers (e.g. Google Analytics)

6.3 Legal Disclosure

We may disclose your personal data to regulatory or governmental authorities where required to do so by applicable UAE law, court order, or lawful request from a competent authority.

6.4 Business Transfers

In the event of a business merger, acquisition, or sale of assets, your personal data may be transferred to the relevant successor entity, subject to equivalent data protection obligations.

6.5 Anonymised Data

Aggregated, anonymised data that cannot be used to identify you may be used for marketing, research, or reporting purposes.

7.1 Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL (Secure Socket Layer) encryption for all data transmitted via our Website
• Secure, access-controlled hosting environments
• Payment processing through PCI-DSS compliant third-party gateways — card details are never stored on our servers
• Regular security assessments and staff awareness procedures

7.2 Limitations

While we take reasonable precautions to safeguard your data, no method of transmission over the internet is entirely secure. We cannot guarantee absolute security and encourage you to use strong passwords and keep your account credentials confidential.

7.3 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant UAE supervisory authority in accordance with the timelines and requirements prescribed under the PDPL and applicable regulations.

9.1 Marketing Emails

Where you have provided consent or have an existing customer relationship with us, we may send you email communications about our products, promotions, new arrivals, or service updates.

9.2 How to Opt Out

You may opt out of receiving marketing emails at any time by:

• Clicking the "Unsubscribe" link included in the footer of any marketing email
• Contacting us directly at info@cpapmedtrade.com with your request to be removed from our mailing list

9.3 Transactional Emails

Please allow up to ten (10) business days for your opt-out request to be processed. Note that even after opting out of marketing communications, you may still receive transactional emails relating to your orders or account (e.g. order confirmations, delivery notifications).

10.1 Google Analytics

We use Google Analytics to analyse Website traffic and user behaviour in an anonymised form. Google Analytics uses cookies to collect data such as pages visited, session duration, and device type. This data is aggregated and does not identify you personally. For more information, visit: policies.google.com/privacy

10.2 Remarketing

We may use Google Ads and similar advertising platforms to display targeted advertisements to users who have previously visited our Website. These platforms use cookies to serve ads based on prior browsing activity.

10.3 Opt Out of Personalised Ads

You can manage your Google advertising preferences or opt out of personalised ads by visiting: adssettings.google.com

10.4 Third-Party Control

We do not have access to or control over the cookies or tracking technologies used by third-party advertisers. We recommend reviewing the privacy policies of any third-party platforms you interact with.

11.1 Under 18s

Our Website and services are not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected information from a person under 18, please contact us immediately and we will take prompt steps to delete such data.

12.1 Right to Update

We reserve the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. The revised Policy will be published on the Website with an updated effective date.

12.2 Acceptance of Changes

We encourage you to review this Policy periodically. Your continued use of the Website following the posting of any changes constitutes your acceptance of the updated Policy.