Privacy Policy

NoorLuna FZ-LLC (“NoorLuna”, “we”, “us”) is registered in Dubai, United Arab Emirates, and operates the noorluna.ae storefront and mobile apps. We are the data controller for personal data processed in connection with your shopping account and orders.

• Account data — name, email, mobile number, password hash, language and currency preferences.
• Order data — items purchased, prices, shipping address, billing address, delivery instructions.
• Payment data — card brand and last four digits only; full card details are processed by our PCI-compliant payment providers and never stored on our servers.
• Usage data — pages viewed, search terms, device and browser, IP address, approximate location.
• Communications — messages with customer care, reviews you publish, questions you post on product pages.

• To process orders, payments, shipping and returns.
• To run your account: login, wishlists, saved searches, loyalty.
• To personalise the storefront — recommendations, recently viewed, what to show on the home page.
• To send transactional messages (order updates, password resets) and, with your consent, marketing emails and push notifications.
• To prevent fraud, abuse and to comply with UAE consumer protection and tax law.

We share personal data only where necessary, with categories of recipients including: vendors (for orders they fulfil), payment processors (Stripe, Checkout.com, Tamara), logistics providers, cloud infrastructure (AWS in UAE / EU regions), analytics and crash reporting tools, and authorities where required by law.

We do not sell your personal data. Vendors receive only the data needed to fulfil and support your order from them.

Personal data is processed in the UAE and the European Union. Transfers outside the UAE rely on adequacy decisions or standard contractual clauses as recognised under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Account data is kept while your account is open and for 24 months after closure, except where longer retention is required by tax, accounting or fraud-prevention law (up to seven years for invoices). Marketing data is kept until you withdraw consent.

You have the right to access, correct, delete, restrict or port your personal data, and to withdraw consent at any time. Email privacy@noorluna.ae with your request — we respond within 30 days.

You also have the right to complain to the UAE Data Office if you believe your rights have been breached.

We use strictly-necessary cookies to keep you signed in and your cart safe. Analytics and marketing cookies are loaded only after you accept them in the consent banner. You can change your choice any time in account settings.

NoorLuna is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a minor has created an account, email privacy@noorluna.ae and we will remove it.

When we update this policy, we change the date at the top and, for material changes, notify you by email. Continuing to use NoorLuna after the effective date means you accept the updated policy.