Privacy policy

CANNAE — PRIVACY POLICY

CANNAE respects privacy and is committed to processing personal data responsibly and in accordance with applicable data-protection requirements.

CANNAE is operated by Sahli FZ-LLC, United Arab Emirates.

Depending on applicable law, Sahli FZ-LLC may act as the controller of personal data collected through the CANNAE website and related services.

PERSONAL DATA WE MAY COLLECT

Depending on how a person interacts with CANNAE, we may collect:

* Name;
* Email address;
* Telephone number;
* Billing address;
* Shipping address;
* Order information;
* Transaction information;
* Products purchased;
* Customer account information;
* Customer Care communications;
* Complaint and claim information;
* Delivery information;
* Device information;
* Browser information;
* IP address;
* Website activity and interactions;
* Cookie and similar technology information;
* Marketing preferences;
* Fraud and security signals; and
* Information voluntarily provided to CANNAE.

Payment information may be processed by authorised payment service providers.

CANNAE may not directly store complete payment-card details where payment processing is performed by a third-party payment provider.

HOW WE USE PERSONAL DATA

CANNAE may process personal data to:

* Process and fulfil orders;
* Process payments;
* Arrange shipping and delivery;
* Communicate regarding orders;
* Provide Customer Care;
* Investigate product and delivery claims;
* Manage disputes;
* Detect and prevent fraud;
* Respond to chargebacks and payment disputes;
* Protect website and transaction security;
* Maintain transaction, accounting and business records;
* Comply with legal and regulatory obligations;
* Establish, exercise or defend legal rights;
* Improve CANNAE products and website functionality;
* Conduct analytics where legally permitted;
* Personalise services where legally permitted; and
* Send marketing communications where legally permitted.

Where applicable law requires a legal basis for processing, CANNAE will rely on an appropriate legal basis, which may include contractual necessity, legal obligation, consent or legitimate interests where permitted.

MARKETING COMMUNICATIONS

CANNAE may send marketing communications where permitted by applicable law.

Where consent is legally required, CANNAE will obtain the required consent.

A person may unsubscribe from marketing emails using the unsubscribe option provided or by contacting CANNAE at support@cannaeuae.com.

Unsubscribing from marketing does not prevent CANNAE from sending necessary transactional, security, legal, account or order communications.

FRAUD, DISPUTE AND LEGAL RECORDS

CANNAE may retain relevant transaction, delivery, technical and communication information where reasonably necessary to:

* Detect or prevent fraud;
* Investigate claims;
* Respond to chargebacks;
* Manage disputes;
* Establish, exercise or defend legal rights; or
* Comply with legal obligations.

A request for deletion does not require CANNAE to erase information that applicable law requires or permits CANNAE to retain.

SHARING PERSONAL DATA

CANNAE may share relevant personal data with service providers where reasonably necessary to operate the business, including:

* E-commerce platform providers;
* Payment processors;
* Shipping and logistics providers;
* Warehousing and fulfilment providers;
* Customer-service providers;
* Hosting and information-technology providers;
* Fraud-prevention and security providers;
* Analytics providers;
* Marketing and advertising providers, subject to applicable privacy requirements;
* Professional advisers;
* Insurers where applicable; and
* Government, regulatory, judicial or law-enforcement authorities where legally required or permitted.

CANNAE does not authorise service providers to use personal data for unrelated purposes merely because the provider receives data from CANNAE.

INTERNATIONAL DATA TRANSFERS

CANNAE operates an international e-commerce business and may use service providers located in different countries.

Where applicable data-protection law imposes requirements on international transfers, CANNAE will take the measures required under applicable law.

DATA RETENTION

CANNAE retains personal data for as long as reasonably necessary for relevant business, contractual, legal, accounting, tax, fraud-prevention, security, dispute-management and record-keeping purposes.

Retention periods may vary depending on the nature of the information and applicable legal requirements.

DATA SECURITY

CANNAE takes reasonable technical and organisational measures intended to protect personal data against unauthorised access, misuse, alteration, loss or disclosure.

No internet transmission or electronic storage system can be guaranteed to be completely secure.

PRIVACY RIGHTS

Depending on applicable law, individuals may have rights relating to their personal data.

These may include rights to request:

* Access;
* Correction;
* Erasure;
* Restriction of processing;
* Objection to certain processing;
* Withdrawal of consent; and
* Data portability.

These rights may be subject to legal conditions, exemptions and verification requirements.

CANNAE may request information reasonably necessary to verify the identity of a person submitting a privacy request.

Privacy requests may be sent to:

support@cannaeuae.com

CHILDREN’S PRIVACY

The CANNAE website and products are not directed at young children.

CANNAE does not knowingly seek to collect children’s personal data in violation of applicable law.

If a person believes a child’s personal data has been collected improperly, they should contact CANNAE at support@cannaeuae.com.

CHANGES TO THIS PRIVACY POLICY

CANNAE may update this Privacy Policy to reflect changes in its operations, technology, service providers, legal obligations or privacy practices.

The current version will be published on the CANNAE website with an updated effective date.

Privacy Contact: support@cannaeuae.com