Legal documents

Privacy Policy

Last updated: 2 November 2026

This policy explains how personal data is processed when you use the Vareisse online store.

The controller of personal data relating to the Vareisse store is Aurex Commerce FZ-LLC, with its registered office at CWIP1628, Compass Building – Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Legal form: Free Zone Limited Liability Company (FZ-LLC). Region: Emirate of Ras Al Khaimah. Registration number: 0000004097695 (RAKEZ Registrar of Companies). Licence number: 46002783. Registration authority: Ras Al Khaimah Economic Zone Authority (RAKEZ). For privacy questions, rights requests and general enquiries, use the contact form on this website or email info@vareisse.com.

This policy covers website use, any account creation and management, clothing purchases, after-sales support and communications. Data may include names, contact details, billing and delivery addresses, order contents, size or colour variants, amounts, transaction status, logistics details, customer-care correspondence, complaints and return requests. Browsing may also generate technical data such as IP address, browser, device, operating system, language preferences, pages visited and usage events. Some information comes from cookies or similar technologies depending on your privacy choices.

Payments are handled by external services available at checkout. These operators may process payment, authentication, billing and fraud-prevention data under their own obligations. Where the payment flow is hosted by the provider, Vareisse does not need to store full card numbers or security codes on its servers.

Information comes from data entered by users, customer-care messages, purchases, technical data generated when accessing the site and, where needed, payment providers, carriers, warehouses, logistics partners and fraud-prevention services. Non-essential statistical and advertising technologies are used only within the consent choices required by law.

Information is processed to handle orders, confirmations, payments, shipping preparation, deliveries, returns, refunds and support, generally on the basis of contract performance or pre-contractual steps. Accounting, taxation and other legal requirements rely on legal obligations. Website security, fraud prevention and dispute management may rely on legitimate interests after assessing the affected rights. Promotional emails, personalised advertising and non-essential cookies rely on consent where required; withdrawing consent does not affect the lawfulness of earlier processing.

Vareisse may send communications strictly necessary for a purchase, such as receipts, delivery information and refund updates. Commercial communications are sent only where permitted by law and in accordance with recipient preferences. Promotional emails must provide an easy way to unsubscribe. Opting out of marketing does not stop essential messages about existing orders.

Providing the service may involve hosting and e-commerce infrastructure providers, payment gateways, customer-care services, email services, logistics partners, warehouses, manufacturers, carriers, fraud-prevention services, advisers and competent authorities where required. Shared information must be proportionate to the purpose, for example a name, delivery details and ordered item to deliver a parcel. Providers may act on the controller’s behalf or as independent controllers according to their actual role. Contact requests submitted through the website are stored privately using Lovable Cloud to allow customer care to handle them.

Some products may be prepared and shipped by suppliers or logistics centres outside the European Economic Area, including China. Only information needed to arrange delivery is shared with those involved. Several transport operators may participate in one shipment.

Where personal data is accessed or processed in third countries, the controller must, where necessary, rely on an adequacy decision, approved standard contractual clauses or another recognised transfer mechanism, with supplementary measures when needed. To request information about the safeguards actually used, use the contact form on this website or email info@vareisse.com.

Strictly necessary cookies may support shopping bags, sessions, authentication, security and privacy preferences. Any non-essential analytics, advertising or personalisation cookies are subject to the permissions required by law. Preferences must be manageable and changeable through the site’s consent system. Further details are provided in the Cookie Policy.

Retention depends on the purpose, including purchase management, tax and accounting obligations, customer care, dispute resolution, security and fraud prevention. Contact-form details are used to respond to and manage the request. Data must not be kept longer than necessary for these purposes or prescribed legal periods. After the relevant periods, it is deleted, anonymised or retained only where a valid legal basis remains.

Appropriate organisational and technical measures are adopted according to the risk to reduce unauthorised access, disclosure, loss or misuse. No online service can be considered entirely free of cybersecurity risk.

Where provided by the GDPR and other applicable laws, you may request access, rectification, erasure, restriction and portability, object to certain processing and withdraw consent. You may also complain to the competent supervisory authority. These rights are not absolute: transaction information may need to be retained for legal obligations after an erasure request.

Use the contact form on this website or email info@vareisse.com. Include the information needed to identify your request. Where essential, reasonable identity checks may be requested to prevent unauthorised access or erasure. Requests are handled within the statutory deadlines.

The store is not designed to intentionally collect children’s data contrary to applicable rules. Automated security and fraud-prevention systems may flag transactions for review. Statutory safeguards for solely automated decisions with significant effects remain unaffected.

Personal data may be disclosed where necessary to comply with legal obligations, protect a right or respond to lawful authority requests. Corporate transactions may involve transfers of information subject to the safeguards required by data-protection law.

External services linked from the store may have their own policies. This policy may change following technical, organisational or regulatory developments. The current version is published on the website with its update date.