Last updated: August 2026
At 3D Avenue UAE, your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with UAE data protection law (Decree-Law No. 45/2021).
Lawful Basis for Processing
We process your personal data on the following lawful bases under UAE PDPL:
- Contract performance: To process and deliver your orders, coordinate delivery with couriers, and provide order-related communications (tracking updates, delivery coordination, and support). This does not require your consent — it is necessary to fulfill our contract with you.
- Legal obligation: To maintain records for tax and commercial compliance. This is required by UAE law.
- Customer communication: To communicate with you regarding your order (updates, delivery coordination, and issue resolution via WhatsApp). We use the contact information you provide during registration solely for order-related purposes.
Data We Hold
The data we hold is what you provide during registration or checkout. We use your contact information and delivery address solely for order fulfillment, delivery coordination, and issue resolution via WhatsApp. We do not use your information for marketing or promotional purposes.
Information We Collect
When you register or place an order, we collect the information you provide:
- Name
- Email address (used for order confirmation)
- Phone number / WhatsApp number (used for delivery coordination and issue resolution)
- Delivery address (used for delivery only)
- Order history and purchase details
- Custom design files (STL/OBJ/STEP) submitted for custom orders
We do not collect or store payment card details. All payments are processed securely through our licensed payment gateway provider.
How We Use Your Information
- To process and fulfill your orders
- To communicate with you regarding your order (updates, delivery coordination)
- To produce custom prints from submitted design files
- To provide customer support
- We process personal data only for the specific purposes stated in this policy and do not use data for any purpose beyond what was communicated to you at collection.
Confidentiality of Client Design Files
- Custom design files (STL/OBJ/STEP) are treated as confidential client intellectual property.
- Design files are used solely for fulfilling your order and are never shared with any third party (including courier companies).
- Design files are stored securely and deleted 30 days after order fulfillment or upon your written request, whichever comes first.
- We may modify customer-supplied files as necessary for printability (e.g., adding supports, adjusting orientation). Such modifications do not constitute a warranty of the original design’s fitness for purpose. Significant modifications will be communicated before production.
- By submitting a design file, you represent that you hold all necessary rights or licenses for the content.
Cookies & Analytics
- We do not use analytics or advertising trackers, such as Google Analytics or Meta Pixel.
- We use only strictly necessary cookies required for the site to function — for example, keeping items in your cart and keeping you logged in. These are not used for tracking or marketing.
Information Sharing
We only share the minimum necessary information with:
- Courier companies — for delivery purposes (name, phone number, address). Design files are never shared with couriers.
- Payment gateway — for payment processing
We do not sell, trade, or share your personal data with any other third parties for marketing or commercial purposes.
Cross-Border Data Transfers
Some of our service providers may process your data outside the UAE. We ensure that these providers are bound by appropriate data protection obligations, including data processing agreements that include PDPL-compliant data protection clauses.
Data Retention
We retain customer order data for 5 years in compliance with UAE Federal Decree-Law No. 8/2017 on Value Added Tax (where applicable) and Federal Law No. 18/1993 (Commercial Transactions Law) Article 8 on commercial record-keeping requirements. Custom design files (STL/OBJ/STEP) are stored securely and deleted 30 days after order fulfillment or upon your written request, whichever comes first. After the retention period, data is securely deleted from our systems.
Your Rights
Under UAE data protection law (PDPL), you have the right to:
- Request access to your personal data
- Request correction of inaccurate data
- Request deletion of your data (subject to legal retention requirements)
- Request deletion of your custom design files at any time
We will respond to data subject requests within 30 days as required by UAE PDPL. To exercise any of these rights, contact us at info@3davenueuae.com. We may request identity verification before processing data subject requests.
Data Breach Notification
In the event of a personal data breach that may affect your rights, we will notify affected individuals and the relevant UAE authorities within 72 hours of becoming aware of the breach, in accordance with UAE PDPL requirements.
Supervisory Authority
The UAE Data Office is the regulatory authority responsible for overseeing PDPL compliance. You have the right to lodge a complaint with the UAE Data Office if you believe your data protection rights have been violated.
Data Protection
We use encrypted connections (SSL/TLS), secure servers, access controls, and regular security reviews to protect your personal information. Our payment processing is handled by our payment gateway provider, which is PCI DSS-compliant. All third-party processors are bound by data processing agreements that ensure compliance with UAE PDPL requirements.