Privacy Policy

1. Who we are

Bare & Brown ("we", "us") is a private luxury gifting house based in Dubai, serving Dubai and Abu Dhabi. This policy explains how we handle your personal data, in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. Information we collect

We do not collect payment-card details through the Site.

• Information you give us when you submit an enquiry or contact us: your name, email address, phone or WhatsApp number, the type of gifting and occasion, and any message you include.
• Technical information collected automatically by our hosting and (if enabled) analytics providers, such as IP address, browser type, and pages visited, used to keep the Site secure and improve it.

3. How we use your information

We do not sell your personal data, and we do not send marketing emails without your consent.

• To respond to your enquiry and discuss a possible commission.
• To provide and manage our gifting services and communicate with you about them.
• To maintain the security and performance of the Site, and to meet legal obligations.

4. Who we share it with

We share data only with trusted service providers who help us operate, including our website host (Vercel), DNS and security provider (Cloudflare), and email providers (Resend and Titan) used to receive and send enquiry correspondence. Some of these providers may process data on servers outside the UAE; where they do, we rely on appropriate safeguards. We may also disclose data where required by law.

5. Cookies and analytics

The Site uses only the minimal cookies necessary for it to function, together with privacy-friendly, cookieless analytics (via Vercel) that measure aggregate usage without identifying you. If we enable additional analytics that set cookies (such as Google Analytics), we will seek consent where required and update this policy accordingly.

6. How long we keep it

We keep enquiry information for as long as needed to respond to you and manage our relationship, and thereafter only as required for legitimate business or legal purposes.

7. Your rights

Under the PDPL you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing. To exercise any right, contact us at concierge@bareandbrown.ae and we will respond within a reasonable period.

8. Security

We take reasonable technical and organisational measures to protect your data. No method of transmission over the internet is completely secure, but we work to safeguard the information you share with us.

9. Children

The Site is intended for adults and is not directed at anyone under 18.

10. Changes and contact

We may update this policy from time to time; the latest version will always appear here. For any privacy question or request, contact concierge@bareandbrown.ae.