Mity Shop Privacy Policy

1. Introduction

Rookie Ninja General Trading LLC, operating the Mity Shop e-commerce platform at www.mityshop.com ("Website"), is committed to protecting and respecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, process, store, and disclose your personal data when you visit our Website or make a purchase. This Policy is issued in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and any other applicable data protection regulations in force in the United Arab Emirates. Please read this Policy carefully before using the Website.

2. Data Controller

The data controller responsible for your personal data is:

• Brand: Mity Shop
• Registered Company: Rookie Ninja General Trading LLC
• Address: Al Nasr Sports Building 02, Oud Metha Road, Dubai - UAE
• Email: support@mityshop.com

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register an account, place an order, submit an RMA request, or contact us, we may collect:

• Full name and title.
• Email address.
• Mobile and/or landline phone number.
• Billing and delivery address.
• Payment information (securely processed by third-party providers; we do not store full card details).
• Order history, transaction records, and invoice details.
• RMA requests, returns correspondence, and warranty claim records.
• Communications with our customer support team.
• Account credentials (username and encrypted password).

3.2 Data Collected Automatically

When you visit our Website, we automatically collect technical and behavioural data, including:

• IP address and approximate geographic location.
• Browser type, version, and operating system.
• Device type and screen resolution.
• Pages visited, time spent on each page, and the sequence of pages viewed (customer journey data).
• Referring source or website from which you arrived.
• Date and time of each visit and session duration.
• Products viewed, added to cart, and purchased.
• Search queries entered on the Website.
• Clicks, scrolls, and other interactions with Website elements.

Customer journey tracking is an integral part of our Website analytics. We monitor how users navigate through our pages to improve functionality, optimise product discovery, and enhance the overall shopping experience. This tracking is conducted using cookies and analytics tools subject to your consent where required.

4. How We Use Your Personal Data

4.1 To Perform Our Contract With You

• Processing, fulfilling, and dispatching your orders.
• Managing your account and providing customer support.
• Communicating with you regarding orders, deliveries, returns, and warranty claims.
• Processing RMA requests and coordinating returns or replacements.

4.2 To Comply With Legal Obligations

• Maintaining transaction and financial records as required under UAE commercial laws (minimum five years).
• Responding to lawful requests from regulatory authorities or law enforcement.

4.3 Based on Legitimate Interests

• Analysing customer journey and browsing behaviour to improve the Website.
• Detecting, preventing, and investigating fraud and security incidents.
• Conducting internal business analytics and reporting.
• Personalising your shopping experience based on your history and preferences.

4.4 Based on Your Consent

• Sending marketing and promotional communications where you have opted in.
• Placing non-essential cookies on your device where consent has been obtained.

5. Customer Journey Tracking

We use advanced tracking technologies to record how visitors interact with our Website. This includes monitoring the sequence of pages visited, product views, cart activity, and conversion behaviour. These insights help us understand customer preferences, improve product recommendations, identify Website issues, and deliver a more personalised experience. Tracking is implemented using tools such as Google Analytics, Meta Pixel, or similar platforms. Where required by applicable law, your consent is obtained before non-essential tracking is activated.

6. Cookies

We use cookies and similar tracking technologies as described in our Cookie Policy, available on the Website. By continuing to use the Website, you consent to our use of cookies in accordance with that Policy.

7. Sharing Your Personal Data

We do not sell your personal data to third parties. We may share your data with:

• Payment processors and financial institutions, for transaction authorisation and fraud prevention.
• Logistics and courier partners, for order fulfilment and delivery.
• Technology and cloud hosting providers, for Website operation and secure data storage.
• Analytics and marketing platforms (subject to consent where required).
• Professional advisors including legal counsel, auditors, and accountants.
• Regulatory bodies and law enforcement authorities, where required or permitted by applicable law.

All third-party processors are contractually required to maintain appropriate data security standards and to process your data only for the specified purposes.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the UAE. Where such transfers occur, we ensure that adequate safeguards are in place in accordance with applicable data protection laws.

9. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods:

• Transaction and order records: minimum five (5) years as required by UAE law.
• Returns, RMA, and warranty records: minimum three (3) years from closure of the relevant case.
• Account data: for the duration of the account relationship and a reasonable period thereafter.
• Marketing data: until consent is withdrawn or you opt out.
• Website analytics and tracking data: up to twenty-four (24) months.

10. Your Rights

Subject to applicable UAE data protection legislation, you have the following rights:

• Right of Access: to request a copy of personal data we hold about you.
• Right to Rectification: to request correction of inaccurate or incomplete data.
• Right to Erasure: to request deletion of your data in certain circumstances.
• Right to Restriction: to request that we limit processing of your data.
• Right to Data Portability: to receive your data in a structured, machine-readable format.
• Right to Object: to object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: where processing relies on consent, to withdraw it at any time.

To exercise any of these rights, contact us at support@mityshop.com. We will respond within thirty (30) calendar days. We may verify your identity before processing your request.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmitted via the Website.
• Access controls, role-based permissions, and multi-factor authentication.
• Regular security reviews and vulnerability assessments.
• Employee training on data protection obligations.

No method of electronic storage or transmission is entirely secure. We cannot guarantee absolute security and encourage you to use strong passwords and protect your account credentials.

12. Children's Privacy

Our Website is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data without verifiable parental consent, we will take prompt steps to delete such data. Please contact us at support@mityshop.com if you have concerns.

13. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on the Website with a revised effective date. Your continued use of the Website after such updates constitutes acceptance of the revised Policy.