Privacy policy

What we collect, why we collect it, who touches it and how to get it back or get it deleted.

Last updated 28 August 2026

The short version

What data do you actually hold?

Your name, contact details, delivery address, what you ordered, and how you use the site.

We never see your full card number. Card details go straight to Shopify Payments and never reach us.

Do you collect health data?

No. Venturi is a food supplement, not a medicine, so we have no reason to know your medical history and we do not ask for it.

If you mention something in a message, we use it to answer you and it never enters a marketing profile.

Who else sees my data?

Shopify, who host the store. Our Dubai warehouse and the courier, so your order can reach you. Klaviyo, who send our email.

Advertising platforms only where you have consented. Nobody buys your data from us, because we do not sell it.

What are my rights, and how do I use them?

Under the UAE PDPL you can ask for a copy of your data, have it corrected, have it deleted, restrict or object to how we use it, or withdraw consent.

WhatsApp +971 52 481 6908, starting your message with Data request, and you get an answer within 30 days.

The full policy

Who we are

Venturi Sciences L.L.C-FZ, of Unit 01, 01, Meydan Grandstand, 6th Floor, Meydan Free Zone, Dubai, United Arab Emirates, is the controller of the personal data described in this Privacy Policy. Trade Licence 2527424.01. Tax Registration Number 104865438600003. In this policy, "Venturi", "we", "us" and "our" mean Venturi Sciences L.L.C-FZ.

This policy explains what personal data we collect when you visit this website, buy from us or contact us, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to meet Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) and its implementing decisions. Where you are in the United Kingdom or the European Economic Area, the additional rights in section 9 also apply to you.

If this policy conflicts with our Terms of Service, this policy governs in relation to personal data.

01The personal data we collect
  • Identity and contact data — your name, email address, telephone or WhatsApp number, billing address and delivery address.
  • Order and transaction data — what you viewed, added to your basket, bought, returned, exchanged or cancelled; order numbers, order value, delivery choices and order history.
  • Payment data — the payment method used, the last four digits of a card, the issuing country and the authorisation result. We do not receive or store your full card number. Card details are captured and processed directly by our payment provider.
  • Account data — where you create an account, your username, saved addresses, preferences and settings. We do not store your password in a form we can read.
  • Communications data — the content of emails, WhatsApp messages, contact form submissions and review or feedback submissions, and any photograph or video you send us in support of a claim.
  • Marketing data — your subscription status, consent records, and how you interact with our emails and messages.
  • Device and usage data — IP address, browser and device type, operating system, time zone, referring page, the pages you view and how you navigate the site, collected through cookies and similar technologies.

We do not ask for, and you should not send us, health data. Venturi products are food supplements, not medicines, and we do not need to know about your medical history in order to sell to you. If you volunteer health information in a message to us, we will use it only to answer you and will not add it to a marketing profile. Questions about whether a product is suitable for you should be put to a qualified healthcare professional, as set out in our Product Disclaimer.

02Where we get it
  • Directly from you, when you order, create an account, subscribe, leave a review or contact us.
  • Automatically from your device when you use the site, through cookies and similar technologies.
  • From our service providers, where they process data on our behalf, for example our payment, logistics and email providers.
  • From advertising and analytics partners, where you have permitted them to share it.
03Why we use it, and our lawful basis
Purpose Lawful basis under the UAE PDPL
Taking, processing, fulfilling and delivering your order, and handling returns and refunds Necessary for the performance of a contract with you
Contacting you about an order, a delivery, or a claim you have raised Performance of a contract
Taking payment and preventing fraudulent or unauthorised transactions Legitimate interests, and compliance with a legal obligation
Keeping tax and accounting records, and meeting VAT obligations Compliance with a legal obligation
Sending marketing emails and messages Your consent, which you may withdraw at any time
Showing you advertising on third-party platforms, and measuring it Your consent
Understanding how the site is used, and improving it Legitimate interests, and consent where non-essential cookies are used
Establishing, exercising or defending legal claims Legitimate interests, and the protection of rights before the courts

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you may object as set out in section 8.

04Marketing, email and SMS

We send marketing only to people who have asked for it. You can withdraw consent at any time by using the unsubscribe link in any email, by replying STOP to a message, or by emailing us. Withdrawing consent does not affect the lawfulness of anything we did before you withdrew it, and does not stop transactional messages about an order you have placed.

05Who we share it with

We do not sell your personal data. We share it only with the following categories of recipient, and only so far as each needs it:

  • Shopify Inc. — our e-commerce platform and host. Shopify's handling of personal data is described in the Shopify Consumer Privacy Policy.
  • Stripe — our payment processor, which captures and processes card details directly.
  • Our logistics partner in Dubai and the delivery carriers it appoints — to pick, pack and deliver your order, and to arrange collections. They receive your name, delivery address and contact number.
  • Klaviyo — to send our marketing and transactional emails and to hold our subscriber list.
  • Google, Meta and other advertising platforms — where you have consented, to measure our advertising and to show you relevant ads.
  • Analytics providers — to understand site usage in aggregate.
  • Professional advisers, auditors and insurers — where necessary and under a duty of confidentiality.
  • Government, regulatory and law enforcement authorities — where we are required to disclose by law, or to establish or defend legal claims.
  • A buyer or successor — if we sell, merge or reorganise the business, in which case your data would remain subject to protections equivalent to this policy.

Where a recipient processes data on our behalf, they act on our documented instructions under a written agreement and may not use your data for their own purposes.

06Transfers outside the United Arab Emirates

Some of our service providers are located outside the United Arab Emirates, including in the United States, Canada, the European Union and the United Kingdom. Where we transfer personal data outside the UAE we do so in accordance with Articles 22 and 23 of the PDPL, either because the destination country has been recognised as providing an adequate level of protection, or under a contract containing appropriate safeguards, or where the transfer is necessary to perform our contract with you.

Where personal data is transferred out of the United Kingdom or the European Economic Area, we rely on recognised transfer mechanisms including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, unless the destination benefits from an adequacy decision.

07How long we keep it
Data Retention
Order, transaction and invoice records 5 years from the end of the relevant tax period, as required by UAE tax law
Customer account data For as long as the account is open, then 12 months
Marketing subscriber data and consent records Until you unsubscribe, then 24 months as a record of consent and suppression
Customer service correspondence 24 months from the date the matter is closed
Website analytics and advertising identifiers Up to 14 months

We may keep data for longer where necessary to establish, exercise or defend a legal claim, or where the law requires it. When a retention period ends we delete the data or irreversibly anonymise it.

08Your rights

Under the UAE PDPL you have the right to:

  • Be informed about how your personal data is processed, which is the purpose of this policy;
  • Request access to the personal data we hold about you, and to receive a copy;
  • Request correction of data that is inaccurate or incomplete;
  • Request erasure of your personal data, where we no longer have a lawful reason to keep it;
  • Request restriction of processing in certain circumstances;
  • Request portability — to receive data you provided to us in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible;
  • Object to processing carried out on the basis of our legitimate interests, and to object at any time to direct marketing and to automated processing that produces legal effects;
  • Withdraw consent at any time, where processing is based on consent.

We do not use your personal data for automated decision-making that produces a legal effect for you.

To exercise any of these rights, email jackson@venturi-ae.com with "Data request" in the subject line. We will respond within 30 days. We may need to verify your identity before we act, and we may decline or charge for a request that is manifestly unfounded or excessive, in which case we will tell you why. We will not treat you less favourably for exercising your rights.

09If you are in the UK or the EEA

Where the UK GDPR or EU GDPR applies to our processing of your data, you have the rights set out in section 8 under those laws as well, together with the right to lodge a complaint with your national supervisory authority — in the United Kingdom, the Information Commissioner's Office at ico.org.uk.

10Complaints

If you are unhappy with how we have handled your personal data, please contact us first and we will try to resolve it. You also have the right to complain to the UAE Data Office, the national supervisory authority established under the PDPL, or to your local data protection authority where one applies to you.

11Cookies and similar technologies

We use cookies and similar technologies to keep the site working, to remember your basket and preferences, to measure how the site is used, and, where you consent, to support advertising. Strictly necessary cookies are required for the site and checkout to function and cannot be switched off. You can control non-essential cookies through the cookie banner or your browser settings; blocking some cookies may affect how the site works.

Our site does not currently respond to browser "Do Not Track" signals. Where a Global Privacy Control signal is received and applicable law requires us to honour it, we will treat it as an opt-out for the browser sending it.

12Children

This site and our products are not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13Security

We apply organisational and technical measures appropriate to the risk, including encryption of data in transit, access controls, and restricting access to those who need it. Payment card data is handled by PCI-DSS compliant processors and does not reach our systems. No system is perfectly secure, however, and we cannot guarantee the security of information transmitted to us over the internet. Please do not send sensitive information through unsecured channels. Where a personal data breach occurs that is likely to prejudice your privacy or rights, we will notify the UAE Data Office and, where required, you, in accordance with Article 9 of the PDPL.

14Changes to this policy

We may update this policy to reflect changes in our practices or in the law. We will post the revised version here and update the "Last updated" date, and where the change is material we will give notice as required by law.

15Contact

Venturi Sciences L.L.C-FZ
Unit 01, 01, Meydan Grandstand, 6th Floor, Meydan Free Zone, Dubai, United Arab Emirates
Data requests and privacy queries: jackson@venturi-ae.com
WhatsApp: +971 52 481 6908
Trade Licence: 2527424.01
Tax Registration Number: 104865438600003

Want a copy of your data, or want it deleted? Start your message with Data request. We answer inside 30 days, usually sooner.