Privacy policy

Who is responsible

The data controller is RED WOOD GENERAL TRADING L.L.C, trading as Redwood Technologies and Redwood Store, part of the Redwood Tech Group. Commercial Licence No. 653807. Address: Office 110, Al Asmawi Building, Dubai Investments Park 1, PO Box 440346, Dubai, UAE. Email info@redwood-tech.com. Phone +971 4 882 9779.

What we collect

• Contact form: your name, email, phone if you give it, topic, and message.
• Checkout: Stripe collects your name, email, phone, a delivery address in the UAE, and your card details on Stripe’s own page. We receive the contact details, the address, the items, the amount in AED, and whether the payment succeeded. We do not receive or store your full card number.
• Cart cookie (redwood-cart): the SKU, name, price, and quantity of items in your cart, kept on your device for up to 30 days so the cart is still there if you leave the site. It is not an advertising cookie.
• Technical logs from the host, such as IP address and browser type, used to keep the site secure.

There is no customer account on this site. We do not set analytics or advertising cookies. If that changes, we will update this page first.

Why we use it

• To answer your enquiry.
• To take payment, deliver the order, and handle a return.
• To keep the cart working.
• To meet UAE tax and consumer-law duties, including invoices that show VAT TRN 100363326800003.
• To protect the site from misuse.

Under the PDPL we rely on the contract (or steps you ask us to take before a contract) when you enquire or buy, on a legal obligation for tax and consumer records, and on our legitimate interest in securing the website. We do not use your data for marketing unless you ask us to.

Who we share it with

• Stripe, which processes the payment. Their privacy notice is at stripe.com/privacy.
• Netlify, which hosts this website and receives contact-form submissions.
• Redwood staff who pick and deliver the order.
• A local courier, if we later use one for a UAE delivery. Today, Redwood’s own team delivers. A courier would receive the name, phone, and delivery address needed to complete that delivery.
• Authorities, if UAE law requires it.

We do not sell personal data.

Transfers outside the UAE

Stripe and Netlify may process data on servers outside the UAE. Where the PDPL restricts a transfer, we rely on the safeguards those providers put in place, and on the transfer being needed to perform the contract you asked for: taking payment and running the site.

How long we keep it

We propose to keep tax invoices, payment records, and order records for 5 years after the end of the tax period they relate to, and to keep the related commercial books for the same period. Enquiry messages would follow that period as well. 5 years after the end of the tax period is the UAE minimum for ordinary tax records, and it is the usual minimum for commercial books. Records that the law keeps for longer, including capital-asset records, are kept for that longer period. [TO CONFIRM: the record-retention period — the proposed default is 5 years]. We do not keep personal data for longer than we need for those records. The cart cookie expires after 30 days, or sooner if you clear the cart.

Your rights

Under the PDPL you can ask us to:

• tell you whether we process your data, and for a copy of it
• correct data that is wrong
• delete data, or limit how we use it, where the law allows
• object to processing that is based on legitimate interests
• withdraw consent, where we are relying on consent
• receive your data in a portable form, where that right applies

Email info@redwood-tech.com. We may need to check it is you before we act. You can also complain to the UAE Data Office. Please contact us first so we can try to put it right. The contact page has the same details.

Children

This store is for adults buying equipment for homes and businesses. We do not knowingly collect data from children.