Privacy and Data Protection Policy – United Arab Emirates (Dubai)

In accordance with Federal Decree Law No. 45 of 2021 on the Protection of Personal Data – PDPL

1. Data Controller

La Maison NiCi's, a sole proprietorship based in Abidjan (Côte d'Ivoire), operates through the Greenchic Africa – Dubai platform. La Maison NiCi's acts as the data controller for all personal data collected and processed within the United Arab Emirates.

2. Legal Basis for Processing

Data is processed in accordance with the Federal Decree Law No. 45 of 2021 (PDPL). The processing is based on the following lawful grounds:

• The explicit consent of the data subject
• The performance of a contract or pre-contractual measures
• Compliance with legal obligations
• The legitimate interests of the controller

3. Purpose of Processing

Personal data is processed for the following purposes:

• Management of orders, deliveries, and billing
• Management of customer relationships and loyalty programs
• Commercial and promotional communications (with prior consent)
• Service improvement and user experience enhancement
• Compliance with legal, financial, and accounting obligations

4. Categories of Data Processed

Data processed may include:

• Identification and contact data (name, address, phone, email)
• Commercial data (purchase history, preferences)
• Technical data (IP address, cookies, access logs)
• Financial and billing data

5. Data Retention Period

• Customers: 5 years
• Prospects: 3 years
• Accounting data: 10 years
• Cookies and technical logs: up to 12 months

6. Data Recipients

Data may be shared with:

• La Maison NiCi's and its Greenchic Africa – Dubai team
• Service providers (hosting, payments, logistics)
• Competent authorities when required by law

No data is sold or transferred to third parties for commercial purposes.

7. International Data Transfers

Data may be transferred outside the United Arab Emirates, in particular to Côte d'Ivoire (main office) and the United States (GoDaddy hosting services). Such transfers are made under contractual safeguards and security mechanisms consistent with PDPL requirements.

8. Data Subject Rights

In accordance with PDPL, data subjects have the right to:

• Access their personal data
• Request correction or deletion
• Restrict or object to processing
• Exercise data portability
• Withdraw consent at any time

Requests can be sent to: privacy@greenchic.africa

9. Supervisory Authority

For complaints or concerns, data subjects may contact the UAE Data Office, the competent authority established under the PDPL.

10. Data Security

La Maison NiCi's implements appropriate technical and organizational measures to ensure data security:

• Secure and encrypted hosting (SSL)
• Restricted access to authorized personnel
• Regular backups
• Data breach response plans
• Continuous monitoring of systems

11. Policy Updates

This privacy policy may be updated periodically to reflect legal or technical changes. Last updated: October 2025.

© 2025 – La Maison NiCi's – Greenchic Africa Dubai – All rights reserved