1. Introduction
This Privacy Policy explains how Emporia Trading LLC (“Emporia”, “we”, “us”, “our”) collects, uses, and protects personal data when you use emporia-world.com (the “Site”).
We are committed to protecting personal data in accordance with:
- UAE Federal Decree Law No. 45 of 2021 (PDPL)
- The General Data Protection Regulation (GDPR), where it applies to our processing of personal data
2. Data controller
Emporia Trading LLC
United Arab Emirates
Email: office@emporia-world.com
3. Scope
This Policy applies to:
- Website visitors
- Business contacts
- Potential clients (leads)
4. Types of personal data collected
We may collect the following, depending on how you interact with us and the Site:
4.1 Data you provide
- Name and company name
- Job title
- Email address and phone number
- Details of business enquiries and correspondence
4.2 Automatically collected data
- IP address and approximate location (derived from IP, where available)
- Browser type, device, and screen characteristics
- Site usage and analytics data
4.3 Communication data
- Emails you send to us and messages you submit through contact or enquiry forms
5. Legal basis for processing (GDPR alignment)
Where the GDPR applies, we may rely on one or more of the following legal bases, depending on the specific processing activity:
- Legitimate interests: B2B communication, lead management, and business development, balanced against your rights
- Consent: where we place non-essential cookies, send specific marketing, or use data in a way that requires consent
- Contract: where processing is necessary in connection with a contract or pre-contractual steps you request
6. Purpose of processing
We use data to:
- Respond to enquiries and requests
- Evaluate and pursue business opportunities
- Communicate with business partners and prospective clients
- Improve and protect the Site
- Ensure security, record-keeping, and compliance with applicable law
7. Data sharing
We may share data with:
- IT service providers (e.g. hosting, email, analytics) acting on our instructions
- Professional advisers (e.g. legal, tax, compliance) when needed
- Regulators, courts, and other authorities if required or permitted by law
8. International transfers
Your data may be processed in the UAE, the EU/EEA, the United Kingdom, the United States, and other countries where we or our service providers operate, depending on the tools we use and how you contact us.
Where a transfer is subject to PDPL, GDPR, or other rules that require it, we apply appropriate safeguards where required, for example:
- Standard Contractual Clauses (SCCs) or other approved transfer mechanisms, where the GDPR or equivalent UK rules apply
- Assessments and technical and organisational measures consistent with PDPL and UAE practice
9. Data retention
We keep personal data for as long as necessary to fulfil the purposes in this Policy and as required by law (including tax, company, and regulatory retention).
Typical ranges (non-exhaustive):
- Enquiries: generally 12–36 months, unless a longer period is needed for a live relationship, dispute, or legal obligation
- Legal, finance, and compliance: as required by the applicable record-keeping period
10. Data security
We implement appropriate technical and organisational measures, which may include:
- Access controls and authentication, where we operate accounts or systems
- Reputable hosting and service providers vetted for security
- Encryption in transit and at rest, where appropriate for the systems we use
11. Your rights (GDPR and PDPL, where applicable)
Depending on the law that applies to you, you may have the right to access, rectify, or erase personal data, restrict or object to certain processing, and request a copy in a portable format, subject to conditions and exceptions under applicable law (including the PDPL, GDPR, and local implementing rules).
To exercise your rights, contact us at:
office@emporia-world.com
12. Marketing communications
We may contact you in a B2B context, including where we have a reasonable belief that the communication is relevant to your business role, based on legitimate interest or, where the law so requires, your prior opt-in (for example for certain direct marketing in specific jurisdictions or channels).
You can opt out of non-essential or marketing email at any time; commercial emails will, where required, include an unsubscribe link.
14. Third-party services
We may use third-party services such as analytics, email delivery, and infrastructure hosting. Those providers process data on our behalf, under our instructions, and subject to appropriate contracts and, where required, data protection addenda.
15. Data from third parties
We may receive business contact or related information from business partners, referrals, and public business sources, and use it strictly for B2B relationship and compliance purposes, in line with this Policy.
16. Children
The Site is not directed to individuals under 18 (or the age of digital consent in your jurisdiction, if higher). We do not knowingly process children’s data through the Site.
17. Updates
We may update this Policy from time to time. The effective date and version on this page will be revised, and, where the law or our material practices change, we will take any additional steps required. The latest version will be published on the Site.
18. Contact
For any privacy-related matters:
Emporia Trading LLC
Email: office@emporia-world.com