Legal documents
Privacy Policy
Last updated: 2 November 2026
This policy explains how personal data is processed when you use the Vareisse online store.
01Data controller
The controller of personal data relating to the Vareisse store is Aurex Commerce FZ-LLC, with its registered office at CWIP1628, Compass Building – Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Legal form: Free Zone Limited Liability Company (FZ-LLC). Region: Emirate of Ras Al Khaimah. Registration number: 0000004097695 (RAKEZ Registrar of Companies). Licence number: 46002783. Registration authority: Ras Al Khaimah Economic Zone Authority (RAKEZ). For privacy questions, rights requests and general enquiries, use the contact form on this website or email info@vareisse.com.
02Scope and categories of information
This policy covers website use, any account creation and management, clothing purchases, after-sales support and communications. Data may include names, contact details, billing and delivery addresses, order contents, size or colour variants, amounts, transaction status, logistics details, customer-care correspondence, complaints and return requests. Browsing may also generate technical data such as IP address, browser, device, operating system, language preferences, pages visited and usage events. Some information comes from cookies or similar technologies depending on your privacy choices.
03Payment data
Payments are handled by external services available at checkout. These operators may process payment, authentication, billing and fraud-prevention data under their own obligations. Where the payment flow is hosted by the provider, Vareisse does not need to store full card numbers or security codes on its servers.
04How information is collected
Information comes from data entered by users, customer-care messages, purchases, technical data generated when accessing the site and, where needed, payment providers, carriers, warehouses, logistics partners and fraud-prevention services. Non-essential statistical and advertising technologies are used only within the consent choices required by law.
05Purposes and legal bases
Information is processed to handle orders, confirmations, payments, shipping preparation, deliveries, returns, refunds and support, generally on the basis of contract performance or pre-contractual steps. Accounting, taxation and other legal requirements rely on legal obligations. Website security, fraud prevention and dispute management may rely on legitimate interests after assessing the affected rights. Promotional emails, personalised advertising and non-essential cookies rely on consent where required; withdrawing consent does not affect the lawfulness of earlier processing.
06Service communications and marketing
Vareisse may send communications strictly necessary for a purchase, such as receipts, delivery information and refund updates. Commercial communications are sent only where permitted by law and in accordance with recipient preferences. Promotional emails must provide an easy way to unsubscribe. Opting out of marketing does not stop essential messages about existing orders.
07Recipients and external providers
Providing the service may involve hosting and e-commerce infrastructure providers, payment gateways, customer-care services, email services, logistics partners, warehouses, manufacturers, carriers, fraud-prevention services, advisers and competent authorities where required. Shared information must be proportionate to the purpose, for example a name, delivery details and ordered item to deliver a parcel. Providers may act on the controller’s behalf or as independent controllers according to their actual role. Contact requests submitted through the website are stored privately using Lovable Cloud to allow customer care to handle them.
08International order fulfilment
Some products may be prepared and shipped by suppliers or logistics centres outside the European Economic Area, including China. Only information needed to arrange delivery is shared with those involved. Several transport operators may participate in one shipment.
09Transfers outside the EEA
Where personal data is accessed or processed in third countries, the controller must, where necessary, rely on an adequacy decision, approved standard contractual clauses or another recognised transfer mechanism, with supplementary measures when needed. To request information about the safeguards actually used, use the contact form on this website or email info@vareisse.com.
10Cookies and measurement tools
Strictly necessary cookies may support shopping bags, sessions, authentication, security and privacy preferences. Any non-essential analytics, advertising or personalisation cookies are subject to the permissions required by law. Preferences must be manageable and changeable through the site’s consent system. Further details are provided in the Cookie Policy.
11Retention
Retention depends on the purpose, including purchase management, tax and accounting obligations, customer care, dispute resolution, security and fraud prevention. Contact-form details are used to respond to and manage the request. Data must not be kept longer than necessary for these purposes or prescribed legal periods. After the relevant periods, it is deleted, anonymised or retained only where a valid legal basis remains.
12Security
Appropriate organisational and technical measures are adopted according to the risk to reduce unauthorised access, disclosure, loss or misuse. No online service can be considered entirely free of cybersecurity risk.
13Your rights
Where provided by the GDPR and other applicable laws, you may request access, rectification, erasure, restriction and portability, object to certain processing and withdraw consent. You may also complain to the competent supervisory authority. These rights are not absolute: transaction information may need to be retained for legal obligations after an erasure request.
14Making a request
Use the contact form on this website or email info@vareisse.com. Include the information needed to identify your request. Where essential, reasonable identity checks may be requested to prevent unauthorised access or erasure. Requests are handled within the statutory deadlines.
15Children, fraud prevention and automated decisions
The store is not designed to intentionally collect children’s data contrary to applicable rules. Automated security and fraud-prevention systems may flag transactions for review. Statutory safeguards for solely automated decisions with significant effects remain unaffected.
16Mandatory disclosures and corporate transactions
Personal data may be disclosed where necessary to comply with legal obligations, protect a right or respond to lawful authority requests. Corporate transactions may involve transfers of information subject to the safeguards required by data-protection law.
17External links and changes
External services linked from the store may have their own policies. This policy may change following technical, organisational or regulatory developments. The current version is published on the website with its update date.