Data ProtectionNotice
Pushouse L.L.C-FZ | Dubai, UAE | Personal Data Protection
1. DATA CONTROLLER
Company Information
Name: Pushouse L.L.C-FZ
Licence No: 2540189.01
Tax Registration No: 105300073100001
Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Contact Information
2. PURPOSES OF DATA PROCESSING
Personal data collected from our customers' e-commerce websites is processed for the following purposes:
Digital Marketing
Campaign notifications and customer communications
Customer Analysis
Service improvement and satisfaction analysis
Legal Obligations
Compliance with GDPR Art.6 and UAE PDPL requirements
Service Quality
Performance measurement and reporting
3. CATEGORIES OF PROCESSED DATA
| Data Type | Examples | Processing Purpose |
|---|---|---|
| Identity Data | First name, last name | Personalized communication |
| Contact Data | Phone number, email | Marketing notifications |
| Transaction Data | Purchase history, preferences | Personalized campaigns |
| Technical Data | IP address, device info, cookies | Platform optimization |
4. DATA COLLECTION METHOD AND LEGAL BASIS
4.1. Collection Method
• Automatic integration from our e-commerce partners' websites
• Technical data flow through Pushouse API
• Website interactions and cookies
4.2. Legal Basis
| Data Type | Legal Basis |
|---|---|
| Contact Data | Explicit Consent (Double Opt-in) |
| Transaction Data | Legitimate Interest (GDPR Art.6(1)(f)) |
| Technical Data | Website operational necessity |
5. DATA TRANSFER
5.1. Domestic Transfer Recipients
• Local cloud infrastructure providers (servers located in UAE/region)
5.2. International Transfer Recipients
| Recipient | Country | Transfer Purpose | Safeguard |
|---|---|---|---|
| Amazon Web Services | USA | Data storage | Standard Contractual Clauses |
| Meta Platforms Inc. | USA | Marketing integration | GDPR Article 46 Compliant Agreement |
*Data Processing Agreement signed pursuant to GDPR Art.46 and UAE PDPL
6. DATA SECURITY
Technical Measures
Encryption
TLS 1.3 for data transmission, AES-256 bit encryption for storage
Access Control
Role-Based Access Control (RBAC) and multi-factor authentication
Security Testing
Annual penetration testing and vulnerability assessments
Administrative Measures
Staff Training
15 hours annual GDPR/data protection training for all personnel
Breach Protocol
72-hour notification to relevant data protection authorities (GDPR, UAE PDPL)
ISO 27001
Information security management system certification
7. DATA RETENTION PERIODS
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Contact Data | 2 years after last interaction | Legitimate Interest (GDPR Art.6(1)(f)) |
| Transaction Data | Duration of activity + 1 year | Commercial Law requirements |
| Technical Data | 6 months (anonymization) | Electronic Communications regulations |
8. DATA SUBJECT RIGHTS
Under GDPR and UAE PDPL, you have the following rights:
Right to Information
- • Know whether your personal data is being processed
- • Know the purpose of processing and whether it's being used accordingly
- • Know third parties to whom data is transferred domestically or internationally
Right to Rectification
- • Request correction of incomplete/inaccurate data
- • Request notification of corrections to third parties
Right to Erasure and Objection
- • Request deletion/destruction of data
- • Object to automated decision-making and profiling
Right to Compensation
- • Compensation for damages caused by unlawful processing
How to Submit a Request
Identity Verification
Valid ID and registered contact information
Contact Address
Response Time
Within 30 days, free of charge
9. CHANGES AND UPDATES
Changes to this notice will be announced on our website (www.pushouse.com/data-protection) at least 30 days before the effective date.
Significant changes will be communicated via email.
CONTACT INFORMATION
Pushouse L.L.C-FZ
Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
Email: [email protected]
Licence No: 2540189.01
Tax Registration No: 105300073100001
"At Pushouse, we protect your personal data not just with technological innovations, but with our ethical responsibility mindset."
Dubai, United Arab Emirates
Additional Documents: Data Processing Inventory | Data Processor Agreement Template | ISO 27001 Certificate
(This notice has been prepared in accordance with European Union GDPR Articles 13-14 and UAE Personal Data Protection Law (UAE PDPL).)