Holistic CornerPrivacy Policy
Last updated: 9 November 2026
1. Who we are
Holistic Corner is a brand operated by Holistic Corner Trading and Consultancy FZC LLC, a free zone company licensed by Sharjah Publishing City Free Zone (licence no. 4428981.01), of Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates. We are the controller of the personal data collected through shop.holisticcorner.ae and the Holistic Corner iPhone and Android apps (the "Services").
We process your data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where they apply, the data protection laws of the country you shop from (such as the EU GDPR and Turkey's KVKK).
2. Data we collect
What you give us
- Account: name, e-mail, phone and password (stored only as a one-way hash). With Sign in with Apple or Google we receive only your name and e-mail, which may be an Apple private relay address.
- Profile (optional): profile photo, gender, year of birth, and your birthday's day and month so we can greet you.
- Orders and delivery: delivery addresses, a gift recipient's name, address and phone, products, amounts, payment method and coupons used.
- Location: only if you allow it while placing the delivery pin on the map; we keep the pin you chose with the address. We do not track your location otherwise.
- What you write and publish: reviews and their photos, community posts and replies, video comments, likes, complaints and contact messages.
- Free health consultation: what you write about your health and your question.
- Courses: what a booking form asks, such as age, height, weight, occupation and notes, plus the courses you bought and their certificates.
- Wholesale requests: company name, contact details, products and quantities.
- Your chats with the AI assistant.
What we collect automatically
- IP address: to set your country and currency and protect the store from fraud; kept in our security log.
- App identifier: a random number the app creates on your device to link your likes and chats before you sign in. It is not the advertising identifier.
- Push token: if you allow notifications, with your device type, app version and notification choices.
- Order source: if you reach the website from a campaign link (utm or an ad), we keep the campaign name with the order to learn which ads work.
- Points and wallet: balances and history.
What we do not collect: we never store card numbers; once card payment is enabled, card details are entered with the payment gateway directly. We do not use your device's advertising identifier.
3. Why we use your data, and on what basis
| Purpose | Basis |
|---|---|
| Fulfil and deliver orders; run your account, points and wallet | Performance of our contract |
| Answer messages and complaints; consultations and course bookings | Contract, and your explicit consent for health data |
| Order notifications and e-mails | Contract |
| Offers, newsletter and marketing notifications | Your consent, which you can withdraw at any time |
| Learning from assistant chats what customers look for, to improve our products | Our legitimate interest |
| Arranging the products, videos and courses we show you by what you view, like, put in your cart and buy in our store (never health information, consultations or assistant chats) | Our legitimate interest; on the website in the EU/EEA, the UK and Switzerland only with your consent |
| Protecting the store against fraud and abuse | Our legitimate interest |
| Accounting and tax records | Legal obligation |
We never sell or rent your data.
4. Our apps do not track you
Our apps contain no third-party advertising or analytics tools, and no app order or app data is sent to advertising platforms. On the website only, and with your consent where the law requires it, we use Meta's advertising measurement (Pixel and Conversions API): a purchase event is sent with your e-mail and phone turned into unreadable hashes, so we can learn how our ads perform.
5. Cookies (website)
- Essential: to keep you signed in, protect your session and remember your country. Your cart and wishlist are kept in your own browser.
- Advertising: Meta's cookie, only with your consent where required. You can delete cookies in your browser settings.
6. Who sees your data
Inside Holistic Corner: each team member sees only what their role and country need:
- orders: customer service and the agent in your country who prepares your order;
- consultation: only the consulting doctor and the bookings team;
- course details: only the courses team;
- assistant chats: management.
Every access and change is recorded in an audit log.
Service providers acting for us under contracts that protect your data:
- Amazon Web Services: hosting, database, backups and outgoing e-mail (Amazon SES).
- Apple and Google: sign-in with their accounts, and notifications.
- Anthropic: processing your questions to the AI assistant and translating content, under its commercial terms, which do not use your data to train its models.
- Google Workspace: the mailbox where we receive your messages.
- Meta: advertising measurement on the website, as in section 4.
- Couriers: name, phone and address, to deliver your order.
- The payment gateway once enabled, and Apple for in-app purchases on iPhone.
Authorities: when the law requires it.
7. International transfers
Our servers are with Amazon Web Services in the Mumbai (India) region, and some providers process data in the United States or Europe. We transfer data with appropriate contractual safeguards and only as needed to provide the Services.
8. What you publish, and community rules
Reviews, posts and comments are shown to others with your first name and your photo if you added one; your e-mail and phone are never shown. We remove location data stored inside every photo you upload.
Abusive or misleading content and treatment claims are not allowed:
- you can report any content or block any user from the «…» button;
- our team reviews reports within 24 hours, removes what breaks the rules, and may suspend the author's account;
- posts are reviewed before they appear, and offensive words are filtered automatically.
On the «Wall of Love» we publish kind words customers sent us about their experience, with only a first name or the first digits of a phone number. We never publish personal health details without review, and we remove any card as soon as its author asks.
9. The AI assistant
The assistant is AI software, not a person or a doctor. It answers from the store's information, and its answers are general, not medical advice. It makes no decision with legal or financial effect on you. Conversations are kept so you can return to them, and management reads them to improve the service.
10. Security
- All connections are encrypted (HTTPS).
- Secrets and keys are stored encrypted.
- Staff sign in with a password and a second verification code.
- Backups are encrypted.
- If a breach affects your data, we will inform you and the competent authority as the law requires.
11. Retention
| Data | How long |
|---|---|
| Account and profile | While your account exists |
| Orders and invoices | Five years, as UAE commercial and tax law requires; without your personal details after your account is deleted |
| Security log | As long as needed for protection and investigation |
| Points | Expire under the rewards programme's rules |
| Assistant chats | While the service runs; unlinked from you when your account is deleted |
12. Your rights
- Access and copy: download your data from «My profile › My data».
- Correction: edit your details in «My profile» at any time.
- Deletion: «My profile › My data › Delete account» in the app or on the website, with no order in progress. When you delete your account, we:
- delete your personal data and photos;
- hide your posts and comments;
- unlink your assistant chats from you;
- revoke Sign in with Apple and Google;
- keep only the order records the law requires, without your name, phone or address.
- Withdraw consent: turn off the newsletter and marketing notifications in Settings, or withdraw location, photo and notification permissions in your device settings.
- Objection, restriction and portability: write to us and we will answer within 30 days.
- Complaints: you may complain to the UAE Data Office or to the data protection authority in your country.
13. Children
Our Services are intended for people aged 18 or over, and we do not knowingly collect data from children under 13. If you learn that a child gave us their data, write to us and we will delete it.
14. Changes
We may update this policy and will show the new date at the top. If a change is significant, we will tell you in the app or by e-mail.
15. Contact us
Holistic Corner Trading and Consultancy FZC LLC
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
E-mail: privacy@holisticcorner.ae · or the Contact us page