Privacy policy
Including Cookie Policy — bioglamglobal.com
BIOGLAM GLOBAL FZCO | Dubai, United Arab Emirates | bioglamglobal.com
21 July 2026
1. Introduction
This Privacy Policy explains how BIOGLAM GLOBAL FZCO ("BIOGLAM", "we", "us", "our"), a free zone company registered in Dubai, United Arab Emirates, with its registered address at Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, collects, uses, discloses, stores, and protects personal data when you visit bioglamglobal.com (the "Website"), create an account, place an order through our online store, subscribe to our communications, complete our forms and assessments, or otherwise interact with us.
BIOGLAM operates a longevity intelligence platform. We are an integration and interpretation layer that works with independent specialist laboratories and licensed clinical partners; we are not a hospital, clinic, laboratory or licensed healthcare provider, and we do not provide medical diagnosis or treatment.
For the purposes of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"), BIOGLAM GLOBAL FZCO is the data controller of the personal data described in this Policy. By using the Website you acknowledge this Policy; where the law requires consent for a specific processing activity, we will ask for that consent separately and expressly.
2. Legal framework
We process personal data in accordance with the applicable laws of the United Arab Emirates, including in particular:
- Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and any executive regulations, decisions and guidance issued by the UAE Data Office;
- Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means (E-Commerce Law), including its consumer data provisions;
- Federal Law No. 15 of 2020 on Consumer Protection and Cabinet Decision No. 66 of 2023 (its Executive Regulations);
- Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services; and
- Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes, insofar as it relates to information security.
3. Personal data we collect
The personal data we collect depends on how you interact with us. The categories are:
| Category | Examples |
|---|---|
| Identity data | Full name, title, date of birth (where provided), nationality (where required for shipping or compliance). |
| Contact data | Email address, telephone number, billing address, delivery address, country of residence. |
| Account data | Username, password (hashed), account preferences, order history, membership tier and status. |
| Transaction data | Products or memberships purchased, order value, currency, payment method type, invoices, refunds. Full card numbers are processed by our payment providers and are not stored by BIOGLAM. |
| Lifestyle and program data | Your responses to the BIOGLAM Longevity Evaluation and similar lifestyle questionnaires: daily habits, sleep patterns, nutrition, physical activity, stress management, wellness goals and program preferences. Collected only with your recorded written consent and treated as personal data under the PDPL; the Evaluation is a lifestyle instrument and does not request medical diagnoses, medications or clinical information. |
| Technical data | IP address, device and browser type, operating system, time zone, pages visited, referral source, session behaviour, cookie identifiers. |
| Marketing data | Newsletter subscription status, communication preferences, engagement with our emails. |
| Communications data | Messages you send us through contact forms, email, chat or social channels, and our responses. |
We do not knowingly collect personal data from anyone under 18 years of age. The Website, our store and our programs are intended for adults only.
4. How we collect personal data
- Directly from you when you create an account, place an order at checkout, complete an intake or assessment form, subscribe to our newsletter, contact us, or participate in a program.
- Automatically through cookies and similar technologies when you browse the Website (see the Cookie Policy in Section 12).
- From third parties such as our e-commerce platform provider (Shopify), payment providers, form and survey tools, analytics providers, and, only with your explicit consent.
5. Purposes and legal bases of processing
| Purpose | Data categories | Legal basis (PDPL) |
|---|---|---|
| Operating the Website and your account | Identity, contact, account, technical | Performance of a contract; legitimate interest |
| Processing orders, payments, delivery and invoicing | Identity, contact, transaction | Performance of a contract; legal obligation (tax, invoicing) |
| Delivering longevity wellness programs and memberships, including interpretation of results you share with us | Identity, contact, account, lifestyle (with recorded consent) | Explicit consent; performance of a contract |
| Responding to enquiries and providing support | Identity, contact, communications | Legitimate interest; performance of a contract |
| Sending newsletters and marketing communications | Contact, marketing | Consent (opt-in); you may withdraw at any time |
| Analytics, Website improvement and security | Technical | Consent (non-essential cookies); legitimate interest (security, fraud prevention) |
| Compliance with legal obligations and requests from competent authorities | All categories as required | Legal obligation |
We do not sell personal data, and we do not use customer data for third-party advertising purposes without consent. We do not carry out automated decision-making that produces legal effects concerning you without human involvement.
6. Lifestyle data
BIOGLAM questionnaires collect lifestyle information: habits, sleep, nutrition, activity, stress management and goals. This is personal data, not sensitive data, because the Evaluation is designed as a lifestyle instrument and does not ask about medical conditions, diagnoses, medications or clinical matters; we nevertheless collect it transparently and only after you have given recorded written consent through a dedicated consent step, and we use it solely to prepare and deliver your program.
7. Who we share personal data with
We share personal data only where necessary, under contractual protections, with:
- Shopify Inc. and its affiliates, which host our online store and process account, checkout and transaction data on our behalf as processor;
- Payment service providers (such as Shopify Payments and other gateways enabled at checkout), which process payment card data under PCI DSS standards; BIOGLAM does not store full card numbers;
- Form, database and productivity tools used to run intake forms, program administration and internal operations (such as Tally and Airtable), acting as processors;
- Delivery and logistics providers to fulfil physical orders;
- Analytics and marketing platforms, subject to your cookie and marketing consents;
- Professional advisers (legal, accounting, insurance) under confidentiality obligations; and
- Competent authorities, where disclosure is required by UAE law or a valid legal process.
We require processors to act only on our documented instructions, apply appropriate technical and organisational security measures, and assist us in meeting our PDPL obligations.
8. International data transfers
Some of our service providers, including Shopify, host data on servers located outside the
United Arab Emirates. Where personal data is transferred outside the UAE, we do so in
accordance with Articles 22 and 23 of the PDPL, relying on one or more of the following:
transfer to jurisdictions offering an adequate level of protection; contractual commitments
binding the recipient to standards consistent with the PDPL (including data processing
agreements with our providers); your express consent; or transfers necessary for the
performance of a contract with you. Details of transfer safeguards are available on request.
9. Data retention
| Data | Retention approach |
|---|---|
| Account and order records | Duration of the relationship plus the period required by UAE commercial, tax and accounting laws (generally 5 years from the end of the relevant financial year, or such longer period as required). |
| Lifestyle data | Duration of your active program plus [24] months, unless you request earlier deletion or a longer period is required by law or by our licensed clinical partners’ obligations. |
| Marketing data | Until you unsubscribe or object, then suppressed. |
| Technical and cookie data | Per the cookie lifespans in Section 12; analytics data retained in aggregated or pseudonymised form. |
| Communications | Up to [36] months from the last interaction, unless needed for a dispute or legal claim. |
When retention periods expire, data is deleted or irreversibly anonymised.
10. Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS), access controls and role-based permissions, use of reputable hosted platforms with recognised security certifications, staff confidentiality obligations, and vendor due diligence. No online system is completely secure; if a personal data breach occurs that risks your rights, we will notify the UAE Data Office and, where required, affected individuals in accordance with the PDPL and applicable guidance.
11. Your rights
Subject to the conditions of the PDPL, you have the right to:
- request access to your personal data and information about how it is processed;
- request transfer of your data in a structured, machine-readable format (portability);
- request correction of inaccurate or incomplete data;
- request erasure of your data where processing is no longer necessary or consent is withdrawn;
- request restriction of processing or object to processing, including objecting to direct marketing at any time;
- withdraw consent at any time, without affecting prior lawful processing; and
- lodge a complaint with the UAE Data Office if you believe your rights have been infringed.
To exercise any right, contact us at [info@bioglamglobal.com]. We may need to verify your
identity before acting on a request, and we will respond within the timeframes required by the PDPL.
12. Cookie Policy
Cookies are small text files placed on your device. Our Website, which runs on Shopify, uses the following categories:
| Category | Purpose | Basis |
|---|---|---|
| Strictly necessary | Core store functions: session management, shopping cart, checkout, security, fraud prevention, load balancing. The Website cannot function without these. | Legitimate interest; no consent required |
| Performance and analytics | Understanding how visitors use the Website (pages visited, traffic sources) to improve content and user experience, using tools such as Shopify analytics and [Google Analytics]. | Consent |
| Functional | Remembering preferences such as language, region and login state. | Consent |
| Marketing | Measuring campaigns and, where enabled, showing relevant content on third-party platforms (such as [Meta] and [Google] tags). | Consent |
Managing cookies
On your first visit you will be presented with a cookie banner allowing you to accept all cookies, reject non-essential cookies, or set granular preferences. You can change your choices at any time via the cookie settings link in the Website footer. You can also delete or block cookies through your browser settings; blocking strictly necessary cookies may impair checkout and account functions. A current list of the specific cookies set by our store and installed applications, including names, providers and lifespans, is maintained at [link to cookie table page] and is updated as our technology stack changes.
13. Third-party websites
The Website may contain links to third-party websites, including payment providers. Their
privacy practices are governed by their own policies, which we encourage you to read. We are not responsible for the content or privacy practices of third-party sites.
14. Changes to this Policy
We may update this Policy from time to time to reflect changes in our services, technology stack or legal requirements. Material changes will be signposted on the Website, and the "Last updated" date at the top of this Policy will be revised. Where a change requires new consent under the PDPL, we will seek it.
15. Contact us
BIOGLAM GLOBAL FZCO
Registered address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Privacy contact: [info@bioglamglobal.com]
If you are not satisfied with our response to a privacy request or complaint, you may contact the UAE Data Office.